Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
File: k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft (raw, json)
Hash identifier: A2eRlxp+ouPO5nIJebBm6pn1xhduGSZXmN1FLIzvagA=
Subject key identifier: AB:EF:38:2D:37:59:01:57:44:F3:4F:19:A0:A5:29:35:C3:D5:C0:B3
Authority key identifier: 93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE
Certificate issuer: /CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
Certificate serial: 0194BD4E81D70956C6A1A1B1EB12A4C736C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
Manifest number: 0384
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: 28GUm6MyGmDzZNaWznfWcQv0e_Y.roa (hash: C7L+FDUEfqbFey+e0t8jNl/x+IFvC1I+YVSxl7oinY0=)
2: k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl (hash: TOksP/fYDHP5GedpRJrAf6x7VKsSTlx1euqQvY1lEng=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:81:d7:09:56:c6:a1:a1:b1:eb:12:a4:c7:36:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fa1a1d917a3041739a2dee0f41ccf80c554dde
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=abef382d3759015744f34f19a0a52935c3d5c0b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:42:3f:0f:03:c3:1e:2c:9f:5f:dd:6b:01:
5b:f1:97:0e:6c:1a:ee:29:09:da:0f:ff:eb:13:13:
57:d2:b7:41:04:5c:52:70:9e:c7:05:3c:d4:dd:b6:
17:0e:5c:ab:0e:54:41:08:83:c0:e6:07:fa:31:d1:
89:12:fd:0b:ce:a4:cd:63:cc:8f:87:a6:8d:63:57:
50:e9:71:3a:5e:05:bf:b3:60:e6:1d:6a:ad:47:08:
8d:10:57:63:0b:a1:1a:d8:fb:41:f7:0c:71:d5:13:
05:45:b6:5c:4e:fb:5c:86:b2:07:7b:0b:cb:68:82:
47:12:63:b2:ce:48:eb:ec:38:d1:0d:29:1d:22:17:
aa:94:3a:97:fa:02:86:33:db:ba:1e:7c:7e:17:e1:
dc:62:f4:3f:8c:d6:33:c4:ca:07:18:36:dc:8e:8f:
3e:5c:26:83:b8:2f:ce:17:fe:c4:0e:b6:e7:e4:75:
c2:1f:15:1f:96:b8:32:eb:47:04:86:81:48:7e:77:
24:d1:24:58:18:a3:9b:1d:fb:6b:18:7c:53:f2:57:
dc:97:4d:98:cb:b8:2d:9b:3b:cb:fe:ab:6d:3e:22:
34:a7:15:d0:46:f2:04:9a:85:39:9c:d2:24:19:6c:
30:bc:b3:10:4b:00:01:74:c4:d7:4d:0b:99:60:a9:
4c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EF:38:2D:37:59:01:57:44:F3:4F:19:A0:A5:29:35:C3:D5:C0:B3
X509v3 Authority Key Identifier:
keyid:93:FA:1A:1D:91:7A:30:41:73:9A:2D:EE:0F:41:CC:F8:0C:55:4D:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_oaHZF6MEFzmi3uD0HM-AxVTd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c39a07-a973-47f8-9b9f-fed21eff2338/1/k_oaHZF6MEFzmi3uD0HM-AxVTd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8e:6c:9a:49:c5:da:ff:dc:61:5c:0c:20:a5:03:45:0b:c2:
66:f5:52:cc:8f:52:89:65:79:85:33:f3:27:34:67:ff:62:84:
0c:c7:c8:9e:9e:b4:d5:5f:29:fb:33:15:df:33:ef:28:45:16:
a9:89:f4:0a:03:55:a7:d6:34:24:ae:c3:49:6b:7c:34:b0:31:
d6:19:6c:73:d9:53:eb:10:32:86:bf:b5:0f:3f:bd:2f:2d:23:
97:28:e2:48:dd:54:97:77:68:ed:81:d6:11:e4:2a:d0:97:15:
2e:4c:fb:2a:c6:47:01:a3:30:e1:ab:2c:b4:94:f5:67:d7:e2:
c1:c2:4b:6b:7c:ed:26:04:03:71:2c:51:0f:cd:3d:8a:95:11:
95:98:8f:4d:e7:c3:58:65:41:b9:e9:2d:08:ae:79:d2:d5:3e:
20:6f:0b:ba:e1:60:cf:a4:b6:c1:e9:f4:fd:31:26:55:d2:e4:
5c:34:35:0b:26:91:36:cf:4e:96:96:1c:4f:ef:90:1e:90:c8:
1d:31:9a:c0:17:0d:4c:d2:0e:ec:fb:24:66:29:78:bc:28:9e:
7e:0e:27:6b:35:fb:0e:81:53:b9:35:ce:90:7a:6b:15:8e:bb:
ba:58:96:35:c0:91:d7:0b:87:00:1c:c1:08:ee:8f:b5:20:97:
92:90:c7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:55 2025 by rpki-client