Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: y21Zs/KaYW+isAwPHPlyIPbpMMx8sUqR35T3jQEphAQ=
Subject key identifier: 23:E3:4F:06:E7:41:33:CB:83:E1:4F:DA:DE:20:08:99:4E:A3:F1:F8
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 0194BCA9F4CCC31AF3BA5BA40852C0AA1FC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 143A
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: aWYx61iz9IbtS6sPz_tNd3xbxx8.roa (hash: Vkm3fql6kXuhTrnhNHZglrgURgNEXcNWhe7x92KisVo=)
2: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: lETIZAhPV98RvasKxxj3qVBT/iKcjXAVllls89RpxoI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f4:cc:c3:1a:f3:ba:5b:a4:08:52:c0:aa:1f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=23e34f06e74133cb83e14fdade2008994ea3f1f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:65:6a:3a:3d:20:68:41:22:2f:91:b3:c2:4b:
dd:d0:a7:e4:78:9a:0c:0e:6a:3f:db:7c:e5:12:e3:
6f:71:5c:23:80:46:5e:cc:59:10:bd:c8:34:7e:0b:
03:b2:97:5e:27:6f:8f:51:4d:9c:5b:6f:b4:6f:95:
c1:9e:e7:52:f4:2e:18:50:e7:7f:62:61:5d:03:2c:
7b:05:d7:b8:79:c7:86:91:3c:10:e4:53:d6:37:34:
d3:7e:eb:1d:89:b2:43:b4:45:22:b3:90:a6:b0:4b:
a6:49:37:58:c6:ba:ea:7f:03:6a:df:fd:32:8a:e6:
35:ff:da:1c:58:f3:90:b6:71:d9:98:a1:a7:f9:8c:
77:da:31:7e:14:18:41:c4:46:b7:42:fd:5c:69:58:
a7:d1:65:a7:98:bf:a7:3e:f1:e7:9a:1d:56:f2:15:
96:a6:44:3c:33:64:d6:73:ba:2b:7f:84:62:bc:67:
43:1c:54:4e:b3:42:92:87:00:fc:78:94:19:1b:05:
fb:56:0a:31:f5:6b:78:2c:72:01:47:7c:be:4e:f1:
cd:fe:e3:48:c5:e7:34:24:f1:69:95:1c:0a:eb:b6:
40:25:da:e5:16:28:4a:20:37:f8:81:1f:5f:47:79:
6e:f8:cf:69:7a:49:b0:60:d6:7e:d2:10:40:aa:72:
a3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E3:4F:06:E7:41:33:CB:83:E1:4F:DA:DE:20:08:99:4E:A3:F1:F8
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:26:ce:83:ee:ec:8a:b9:52:32:af:88:13:c6:eb:71:ac:12:
be:f8:18:47:03:e2:90:b7:35:ec:2c:02:84:b4:0f:c5:03:08:
7d:56:81:60:e3:76:bc:e7:d6:da:59:ce:cc:a4:f3:1e:61:9e:
03:f3:0c:20:10:1e:1b:fe:1a:dc:64:83:cc:8b:36:a3:29:56:
f5:07:f9:79:90:4d:d4:cd:5a:14:15:f9:8c:3c:c3:50:ec:4e:
bb:c0:e1:4d:70:b0:f8:d8:ce:80:0e:fc:69:94:53:af:bf:69:
d8:66:e1:0b:db:8e:0e:60:49:37:e2:67:26:97:81:7e:19:ff:
b0:58:d8:c7:71:dc:e0:77:a1:10:85:dd:25:46:55:11:04:12:
67:d3:6c:34:da:2d:16:5a:fc:3e:57:26:d9:d5:ce:0b:55:f1:
01:66:1d:d1:b4:6d:08:c3:e7:21:1e:89:53:f4:be:77:d8:fa:
69:4a:32:10:61:54:e7:7a:d9:2c:28:20:d9:96:13:62:1d:4f:
d5:e7:d4:2b:7e:99:7b:fb:4c:4e:00:ba:d2:0a:70:7a:13:80:
d1:ed:d8:70:3e:99:ea:74:21:e4:4b:23:2b:6c:b7:f5:10:13:
72:3d:31:86:15:8a:0a:e2:01:8e:ff:c1:99:fe:b2:a1:32:62:
75:8b:25:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:57 2025 by rpki-client