Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
File: o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft (raw, json)
Hash identifier: ZzVUcBv/QS1p0zpu64BHtqjgbvV9yK2GoC6nvxSVfSs=
Subject key identifier: 8B:4A:7D:AA:72:81:17:C1:8B:9D:A5:6B:9C:85:F8:68:AD:1A:BD:B7
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Certificate issuer: /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial: 0194BD177C3259416ACAC015380D496626F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
Manifest number: 13C2
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: M5VBoueFwyiZ7y6LqhtMdkXqTgA.roa (hash: KvER2HIUGSx1EcSqGbNB9cVOLanNeLf/MKB2z89H4ZY=)
2: UvojC1ENhPbEF8CWrIQdqvN_EPk.roa (hash: M3fEcWwNkOYKiYYPvaWdy7xS9Gzd5XLhj8l6RknzTeQ=)
3: o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl (hash: 77pEwTudiKGO4D9RHtPjwSi9fwAsWecJC6dabqXgkp4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7c:32:59:41:6a:ca:c0:15:38:0d:49:66:26:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=8b4a7daa728117c18b9da56b9c85f868ad1abdb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:bd:b6:b0:fa:75:b3:c0:e1:8b:e9:bb:71:
ac:ab:dd:72:fe:27:2f:8d:67:ef:5d:b6:b1:11:df:
0a:15:2b:30:7f:7e:24:9c:8d:9e:5c:6d:4b:19:a0:
b1:1a:8b:d6:75:d7:38:63:8e:60:92:70:a2:c6:09:
d3:40:88:d1:84:22:48:ef:91:ee:14:b0:f4:ba:bb:
46:34:a5:cd:39:c9:e8:dc:b9:1a:c5:de:3b:4f:e9:
99:11:ee:08:63:ec:f4:93:e8:37:6f:04:94:0d:00:
b0:80:1e:a6:67:fb:5b:08:19:2d:32:f8:ac:33:1b:
56:c5:fd:fb:29:ab:f9:2a:ed:df:af:f8:f9:45:a5:
fe:d9:14:09:d7:89:61:91:f4:12:7e:5c:86:22:be:
ef:b7:5b:e6:a4:b7:6a:c2:9b:d1:e4:89:5b:4b:b3:
ff:36:15:ac:c0:e8:65:ff:02:2b:c4:fe:18:b3:5a:
03:1c:3f:68:16:b4:37:f1:db:54:7a:00:d6:3f:7e:
3a:6a:ca:59:ff:56:91:20:fb:4c:ac:3a:89:be:57:
12:83:a1:32:39:42:66:5a:c2:66:89:a5:5b:ed:35:
f1:71:18:18:44:f4:cc:d0:a2:33:2a:41:71:59:13:
3c:f0:29:8f:16:11:5c:1c:81:51:90:b3:85:a1:0f:
55:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4A:7D:AA:72:81:17:C1:8B:9D:A5:6B:9C:85:F8:68:AD:1A:BD:B7
X509v3 Authority Key Identifier:
keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4e:6a:50:09:10:fe:91:38:62:26:51:20:fd:4b:13:fb:da:
f1:51:c6:f1:25:a4:8b:20:27:cb:4b:0a:95:ef:35:66:bc:05:
77:3b:5b:d5:ea:3c:c7:39:de:22:48:f2:28:1e:e3:44:e4:62:
55:5d:16:71:00:3b:ea:e1:25:47:98:29:1a:bb:59:57:c7:bb:
19:e8:f0:4c:42:b0:bc:02:df:86:56:fa:16:e9:fd:22:4a:36:
d4:ba:15:ba:8a:62:b6:b4:4f:48:e8:22:d3:09:bd:ff:1a:b5:
50:7a:f8:7d:ba:7d:f7:b9:21:54:05:35:b0:87:db:df:c4:9f:
0d:59:d3:03:17:89:26:e0:da:20:ab:9b:4b:dd:ee:16:fc:c3:
6c:ea:9f:a8:e4:4a:fa:56:77:2f:f9:15:3f:5b:68:b5:d8:59:
df:30:1d:59:6b:05:6f:4e:d8:60:28:32:c3:34:09:ff:e2:83:
fc:e9:e2:4b:5b:55:69:7e:0d:c4:34:06:d6:ef:8e:7d:c1:e1:
d6:e0:89:7c:db:ed:d5:be:01:8f:e2:d3:ef:1b:a6:d5:0d:0e:
4e:09:6f:34:c8:f1:65:c4:c8:3c:49:2a:13:2d:3f:40:ba:4e:
ae:a4:b7:c4:53:77:35:47:6c:8a:ff:34:e5:5c:bc:7d:37:b1:
61:9c:fb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:46 2025 by rpki-client