Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
File: v3Oj8hoZREIbTdun7LyDYMyl5vw.mft (raw, json)
Hash identifier: QIqwlTnbaqwKE00/5fOeSTmQsDT8qQuPzQOGaQ+OKrs=
Subject key identifier: FF:93:01:52:E4:08:E3:49:76:77:AA:B5:BD:50:AE:9C:D7:BC:CE:0A
Authority key identifier: BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
Certificate issuer: /CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Certificate serial: 0194BC3BCB95263174B9BA7AF31FA46A7ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: L7Ph7QKSrFzUunM1nWiy0ztRgz0.roa (hash: kyuuS5N2dRPA4EclKijD6r08caPFmvNvp8WyN8E3ZU0=)
2: kIoXSOBJVGL2wOnwc997EpFfJ8w.roa (hash: FN/3cL8sV+zXuaKvwt/Sn0EpauPoBxcB543NJqaVmj4=)
3: v3Oj8hoZREIbTdun7LyDYMyl5vw.crl (hash: OoKP5m9t3kFfxskIJnorTdUBYx1vv6y1ZAHbkA+mvcU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cb:95:26:31:74:b9:ba:7a:f3:1f:a4:6a:7a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf73a3f21a1944421b4ddba7ecbc8360cca5e6fc
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=ff930152e408e3497677aab5bd50ae9cd7bcce0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:39:bf:1b:96:9e:86:cf:52:a5:53:c8:60:
43:14:1e:53:32:04:cb:f2:cd:b9:e6:ba:0c:4c:0d:
79:9d:64:72:ed:2d:5d:3f:3e:00:4b:43:de:26:53:
57:e1:07:88:be:22:d2:89:86:22:9f:19:30:ac:a3:
14:99:82:c8:4d:d4:7d:20:9c:a5:a5:0a:ae:66:10:
99:d2:84:34:b7:66:06:8a:2b:ac:5c:c1:65:cc:35:
c9:2a:95:8f:85:20:c4:e7:5f:f0:45:9f:11:05:d7:
27:20:2c:84:f3:83:00:33:d1:92:74:09:3d:90:e2:
1d:d6:16:2a:2d:c1:49:89:aa:c7:fe:ae:f4:ea:10:
7d:ce:bc:96:94:a8:50:6c:ca:f2:fe:90:7a:9e:a3:
ad:d9:91:7e:7e:9a:c6:7a:27:38:de:9d:ed:0e:14:
b8:d1:c8:f7:b1:fc:6d:62:00:be:d0:34:1e:b5:28:
6f:f8:91:4d:68:e3:a0:cb:d3:f4:f0:2e:a5:2d:28:
14:55:a9:4d:8b:34:64:92:1a:43:dc:9b:3d:de:5d:
5e:1e:d6:4f:29:f4:95:02:94:57:67:9b:07:b8:e9:
bb:9c:49:d7:db:e0:07:5c:f6:c8:3c:b1:80:0c:70:
60:2a:4b:28:4e:eb:3e:b4:f5:2a:69:8b:ae:68:90:
6f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:93:01:52:E4:08:E3:49:76:77:AA:B5:BD:50:AE:9C:D7:BC:CE:0A
X509v3 Authority Key Identifier:
keyid:BF:73:A3:F2:1A:19:44:42:1B:4D:DB:A7:EC:BC:83:60:CC:A5:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3Oj8hoZREIbTdun7LyDYMyl5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/400686-8c75-42d0-8bd1-00044757fe8a/1/v3Oj8hoZREIbTdun7LyDYMyl5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:92:b9:5a:07:70:6e:04:9b:9f:50:94:13:00:21:24:3c:66:
31:8c:f7:34:f4:72:5b:69:e9:e0:bf:b3:4e:f2:f7:69:99:a0:
3a:ea:1d:ff:7d:d7:2e:04:a9:24:d0:9c:53:a9:93:43:8b:8c:
6f:9e:02:cc:c5:8f:0d:be:c4:4d:45:bc:63:5f:b2:e4:b3:31:
99:89:da:ba:c8:09:32:3f:83:8a:3f:eb:93:3c:5b:15:fd:02:
5a:9a:ee:fd:fb:0f:1c:c0:ae:a3:b4:53:57:26:d1:a5:82:a0:
f1:31:b1:3a:f5:d6:9e:fc:16:2b:37:63:a3:a3:58:3c:ea:9a:
5b:64:6d:f7:e5:54:41:77:47:9f:c3:00:f3:32:e2:85:6d:f2:
4a:7b:06:37:b3:b4:8b:db:a4:b8:6a:6e:6c:cd:10:47:78:7a:
02:a3:80:a3:78:d0:ad:3c:94:95:70:a5:33:b8:44:58:de:fd:
32:29:99:55:ad:fd:94:f7:23:e1:4e:2f:51:e7:7a:f6:ef:81:
e7:cc:9b:c9:25:ad:00:d9:ef:ab:80:d4:f9:cf:1e:43:7b:42:
6d:4f:56:05:07:c6:02:f4:51:64:ca:e7:9c:f1:a8:ce:64:fd:
1e:d3:f8:59:af:bf:c8:a8:4e:99:15:7f:78:c1:72:c5:ad:44:
94:4f:30:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:55 2025 by rpki-client