Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
File: o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft (raw, json)
Hash identifier: 0XX82SGE1g4arlwWLs/GyI/Pgbgeje+etCSRBiafcAk=
Subject key identifier: C5:C7:F3:7D:92:27:E0:0F:C4:F3:8C:CA:48:B7:1B:34:75:0B:79:F6
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 0194BC3C1B8C5A81BFC87E3249C54975D217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
Manifest number: 10C5
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: 6bKOaNTOD26M5DPQmaAIN6UyW0c.roa (hash: n/Tx+likKaNH/PY72I+EbFWla5M5IP5SB9HyRpTSt7g=)
2: QufC61fw7pK87dB-kx4RiKifXlM.roa (hash: r+1QwPLgLXThXyY70R3A0vn9kct3kVdr0ohpYgp0VlA=)
3: o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl (hash: BKEDgCqCikH6wtUAFPj4xFeyRmfIANN5JSz9LiYbuKE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1b:8c:5a:81:bf:c8:7e:32:49:c5:49:75:d2:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=c5c7f37d9227e00fc4f38cca48b71b34750b79f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ca:2f:19:05:e3:f0:37:06:ff:2c:e8:45:59:
8e:d5:6a:49:4e:e1:09:26:5e:35:00:17:64:af:e1:
34:f2:d7:13:d6:bd:3d:a8:fb:5e:4f:11:98:28:aa:
ef:d1:21:5f:77:b4:6a:77:3a:9e:eb:c1:ba:5e:47:
aa:51:5a:1e:6c:23:a7:c7:b4:21:79:70:60:ae:12:
8d:8f:a7:1c:f8:22:45:e2:5e:aa:fc:05:8d:f2:58:
db:40:f9:08:3a:c6:51:29:a1:19:bf:91:c8:7c:6b:
f4:e6:d8:c4:a2:e6:76:6c:9c:f7:72:9b:f5:13:85:
68:bf:a5:75:a6:70:06:0e:62:b1:cc:75:3e:7c:30:
67:af:3b:b6:30:66:97:54:62:1e:0f:89:76:ad:f0:
93:6d:74:e9:b2:61:8c:63:43:1a:a9:51:51:e5:1c:
bc:26:62:da:56:12:14:9c:4f:1a:ed:30:23:06:1b:
0d:c7:6c:a5:74:63:cb:7b:c6:90:46:4b:07:61:bb:
fe:22:43:b5:09:f2:57:33:e9:bf:f0:c7:c6:77:33:
7a:25:b3:b5:ca:88:b7:b5:d1:08:0a:8b:33:59:0c:
e6:8d:97:74:6d:c0:b9:58:3d:f9:e9:29:77:3f:fd:
dc:ae:69:3a:9b:83:6d:64:c1:6d:d3:47:38:fe:e5:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C7:F3:7D:92:27:E0:0F:C4:F3:8C:CA:48:B7:1B:34:75:0B:79:F6
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:00:59:45:05:04:fd:44:24:ee:b6:87:49:c1:eb:10:46:99:
b7:32:6f:35:28:6a:0a:91:21:d2:2b:66:8d:b3:89:ac:ae:a6:
40:44:1f:4b:25:24:f2:89:42:24:1d:90:f9:26:e0:29:28:0b:
c2:84:a4:68:e3:39:fa:60:39:9c:90:68:3b:03:2a:e1:57:83:
64:a1:f0:5e:76:cd:35:7d:66:8f:ef:77:35:fa:2f:1a:19:56:
24:d3:1a:ed:36:39:20:1b:f3:3e:19:86:a5:46:33:84:d3:03:
1d:83:fa:68:84:f9:4e:6e:98:1a:a6:bb:9f:0b:10:4d:4d:86:
9f:0b:9f:b4:66:48:f7:54:7b:bf:b5:70:78:ca:77:91:50:ad:
ce:c0:69:aa:44:58:47:d2:66:db:6f:54:9c:e8:a5:bf:d2:77:
a6:da:5a:aa:2e:7c:10:1b:fa:12:5e:5b:95:a2:c2:07:4d:c9:
cb:ee:1d:f7:65:60:77:1c:7f:71:99:92:97:7b:40:25:42:d5:
99:cf:44:22:fd:d9:bd:12:c6:06:f5:11:f7:a9:67:23:de:07:
05:5f:80:a9:21:bf:13:3f:af:51:59:47:da:5b:d0:1e:92:1b:
c5:5d:fa:4f:2a:1b:ab:ee:71:44:4f:33:69:0a:a5:a4:0c:27:
c1:ae:15:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:24 2025 by rpki-client