Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
File: oaLRWp2N_ezej-awwYBNCp7i5ig.mft (raw, json)
Hash identifier: l8AW1S5h01Kb9OBJAYJP+BDHriooI65q+5x8LSGGW3w=
Subject key identifier: 42:55:6A:87:D7:25:7C:29:2C:32:DC:C9:75:04:BD:D1:75:2D:38:65
Authority key identifier: A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
Certificate issuer: /CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Certificate serial: 0194BD4EC865FEF49B4A7B2887D57609F746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
Manifest number: 0EC5
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: g8PGSyPYHcwtTKtN52pgkwL2VLw.roa (hash: d/0R1T8TL/elS7S9V2dPYN7wq40xN73ObdYQKEckxT4=)
2: oaLRWp2N_ezej-awwYBNCp7i5ig.crl (hash: XMVv1nL0mDq6+26Z0lNSxK9p/yGGSc9uJAFMpqn9vTQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c8:65:fe:f4:9b:4a:7b:28:87:d5:76:09:f7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d15a9d8dfdecde8fe6b0c1804d0a9ee2e628
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=42556a87d7257c292c32dcc97504bdd1752d3865
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:15:d2:f9:38:5d:79:94:a2:2e:30:9c:83:d5:
2c:f1:25:3e:c4:4d:e5:f4:dc:7f:87:93:07:97:a9:
d1:87:12:ab:29:aa:8a:fc:29:58:48:98:f8:98:07:
44:18:6f:9e:c4:bc:41:f6:53:93:a6:3c:82:86:77:
1e:2d:e8:34:ed:3b:59:79:ca:9a:53:3a:ca:1a:0e:
e4:c1:da:6f:c1:2e:f9:58:51:0e:52:01:fc:06:a8:
75:6e:49:6d:c6:ac:c4:97:13:d5:36:e3:f8:44:8c:
79:b5:8e:a1:a4:fe:fa:37:1a:9e:28:7b:d5:5b:fe:
42:17:1c:16:60:e7:14:aa:f4:bc:d2:cc:9f:97:b4:
8e:0c:ab:fb:4b:cb:a4:14:2a:ce:25:e7:f7:e3:4a:
55:4d:a7:3d:87:b2:69:2d:4b:5c:ba:fc:04:28:ba:
62:bd:29:8c:a4:7b:64:c6:33:f8:c6:a0:f6:f0:80:
01:8b:f3:67:6e:fa:9e:c8:7f:7d:ef:b9:49:e3:f7:
21:6f:06:65:b0:2c:a3:db:11:2f:73:ac:0d:ee:ed:
eb:45:66:49:dd:59:30:51:8a:c1:80:bd:7e:98:ed:
5d:21:14:6b:e4:7d:2d:3c:2e:b4:4f:6a:79:af:6d:
36:10:58:7d:3f:c8:a3:fe:ab:8e:e2:a1:08:e3:f2:
f6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:55:6A:87:D7:25:7C:29:2C:32:DC:C9:75:04:BD:D1:75:2D:38:65
X509v3 Authority Key Identifier:
keyid:A1:A2:D1:5A:9D:8D:FD:EC:DE:8F:E6:B0:C1:80:4D:0A:9E:E2:E6:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLRWp2N_ezej-awwYBNCp7i5ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b640a6-7ecd-420b-86ed-86d194ae8a71/1/oaLRWp2N_ezej-awwYBNCp7i5ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1a:08:c9:7d:9a:b3:64:c1:16:c2:65:dc:c8:04:bd:bc:b2:
b6:d5:f9:25:74:39:a2:bc:25:7f:91:f4:97:08:7a:e4:87:53:
51:b3:9d:53:96:36:99:7c:36:ce:c4:fb:37:ae:9d:54:ef:e8:
c2:ba:63:05:36:c0:de:45:f4:7a:fc:5c:b7:0a:2f:af:4b:b2:
6c:42:5c:cd:90:4d:2d:8c:65:a4:55:17:f0:4c:e6:1b:a6:02:
93:ad:73:b8:25:51:39:eb:f0:0b:6b:cb:4a:06:68:42:fb:e8:
c4:27:b4:9b:d9:2d:d3:40:32:95:41:28:a9:72:88:24:e5:87:
d9:82:1a:32:f2:be:8f:74:86:ba:b4:d6:fa:45:28:78:b1:fb:
28:65:6a:f1:5d:7f:de:26:27:c1:78:d9:1a:cf:0b:15:92:14:
b4:c2:96:27:17:9f:d6:45:02:b2:7b:7b:ce:f5:b3:da:fc:be:
46:4a:b6:4e:4c:f4:93:6b:f5:9a:50:e9:43:8d:03:8f:97:22:
42:b5:80:78:84:3b:12:b9:77:5f:d5:ce:2c:84:92:5d:47:09:
20:a0:97:f2:1c:d4:73:9b:bc:d3:76:41:36:52:7c:3f:cd:24:
50:68:39:24:82:38:23:c5:41:4d:34:7c:7f:79:b8:2f:ea:a0:
1f:4c:bd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:51:16 2025 by rpki-client