Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
File: od5FbU1AXG9CktY2iGds4VDn8H4.mft (raw, json)
Hash identifier: O1jXwv9Zsvq6su5LkOfzi1DmKV/mr7SjuhIuOtAq2I4=
Subject key identifier: 64:C6:5F:87:AA:58:63:B7:4A:9D:28:74:76:77:07:FC:2E:CA:12:B3
Authority key identifier: A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
Certificate issuer: /CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Certificate serial: 0194BD4E9E0BF62A8CAC01286199EEC600FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
Manifest number: 099C
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: dqExZg0GTgu9TOznJg-Erf9mkrI.roa (hash: h4iiYtbEAvUkqkzgU+RKRv7Gvi0HY66tI3dhqgvZQ0E=)
2: od5FbU1AXG9CktY2iGds4VDn8H4.crl (hash: JT8NwWkxocCEnTSCncPTiz6ubQq4Noj+4N56XZHcDXE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9e:0b:f6:2a:8c:ac:01:28:61:99:ee:c6:00:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1de456d4d405c6f4292d63688676ce150e7f07e
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=64c65f87aa5863b74a9d2874767707fc2eca12b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:89:b4:8e:fe:65:46:bf:4f:9c:58:a4:f7:88:
96:a9:ae:a9:cb:ac:74:d1:01:da:9c:91:56:34:66:
15:a4:67:1d:db:bd:82:3b:9a:02:df:3a:0c:e1:c3:
33:a8:35:f5:d4:1d:53:86:67:34:72:50:0b:37:88:
ad:a5:4c:20:df:63:21:a7:7e:f0:cf:d6:0a:d7:bb:
33:02:27:bb:3e:02:2f:89:9d:50:88:c1:63:a5:e7:
c8:78:8d:5f:7a:67:29:4d:7d:9d:f6:cc:27:ce:7e:
47:a9:41:f4:a8:71:66:91:1a:be:13:23:a3:9d:be:
f2:89:bc:00:c7:67:78:22:44:65:17:ae:0e:f5:86:
3b:62:27:db:8c:6a:ff:06:27:d5:28:41:31:4d:d7:
77:85:a2:25:e2:4a:db:d0:bf:00:d6:10:39:25:5b:
fe:bb:1c:37:00:9a:cc:75:b5:4c:8c:7e:d3:0d:a1:
da:6f:5b:c2:8b:0a:ad:36:55:d3:40:32:41:68:75:
a6:f8:26:0b:98:80:66:54:58:94:10:b2:dd:af:4a:
ca:8c:54:6e:13:a6:7d:d8:73:a1:79:e6:46:23:ba:
83:6e:e5:b8:07:c1:0f:be:ca:65:7c:0b:9d:37:52:
69:42:dc:c1:ed:91:19:e8:17:08:82:8f:8a:e3:30:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C6:5F:87:AA:58:63:B7:4A:9D:28:74:76:77:07:FC:2E:CA:12:B3
X509v3 Authority Key Identifier:
keyid:A1:DE:45:6D:4D:40:5C:6F:42:92:D6:36:88:67:6C:E1:50:E7:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/od5FbU1AXG9CktY2iGds4VDn8H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/40e405-a38f-4781-8d55-0c9e0cf7e9fc/1/od5FbU1AXG9CktY2iGds4VDn8H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:93:8a:fd:0d:22:34:76:1a:45:28:2a:fb:87:69:18:7c:ab:
35:26:74:55:52:4c:2a:e5:df:8f:3a:a9:23:92:fc:e7:d6:4a:
7e:e9:be:21:57:56:5f:a0:53:a8:57:f3:1e:5e:4e:69:76:9a:
fa:f7:17:84:bd:98:40:96:8e:44:82:35:1e:db:fb:e1:37:1c:
65:ed:bd:b2:56:fe:05:e2:f1:32:06:68:6f:a7:f6:c3:07:25:
62:80:9d:ff:45:c1:09:2b:5f:d3:06:67:a9:88:69:89:1f:c6:
bd:0f:9c:e5:ae:be:06:d0:ef:9e:77:38:20:88:01:d2:f0:e1:
77:19:67:ee:73:98:67:74:b5:bf:7d:d5:5b:3f:2d:11:bc:ed:
2f:56:db:aa:24:ab:3d:26:2a:16:ab:a8:af:18:d6:12:88:c4:
e7:4d:35:27:1b:b3:82:72:63:84:59:9b:fc:4a:98:62:c4:81:
01:ff:54:5b:15:1b:74:ae:85:14:e1:cc:80:9f:88:6e:3b:9a:
62:6e:0c:28:6a:15:ee:c8:54:e0:d4:e7:63:7e:e4:2a:7b:f3:
11:90:48:6c:d8:cd:b5:1e:99:ba:06:97:dc:08:d7:77:7e:14:
a7:28:bb:16:5c:bd:30:d6:4a:22:35:f3:c6:1b:a9:d7:3d:5a:
08:46:69:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:04 2025 by rpki-client