Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
File: oktI7cejJdfxrg8lfA4oNRcbya4.mft (raw, json)
Hash identifier: PjchXEjRjN2yOHIZ8oAqnov6zz3kO1wfUzT8XsUPYds=
Subject key identifier: 0A:91:5D:57:CA:09:9A:D4:D7:B1:81:01:18:27:66:B4:B4:06:5D:80
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 0194BD4EC1B39B9BF48AF467ABD7CA764DBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: B0JGrIFbhcfZ9k0gLZbKOC7BRts.roa (hash: uan7Xlr3tx5QNJHwIPILAsu/3eaM2Ksrcs3oBa0JKWg=)
2: B6qJHXpeC3IEJy34_URs46RdWiA.roa (hash: toHD5hhCltD6s8AbgpGot0TJcoWUl/7kkl/+KkMGZ/I=)
3: X5BI_4m66OA1gTOSPBNCsDRd-Pw.roa (hash: 3oZT1fDyGLqNouLkyRSol/W9I5a1RPKZknAigOCTTYM=)
4: oktI7cejJdfxrg8lfA4oNRcbya4.crl (hash: FaCG+m+AioP+jGTFj7qARzoNm/beADw+EMg2P0pBoSQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c1:b3:9b:9b:f4:8a:f4:67:ab:d7:ca:76:4d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=0a915d57ca099ad4d7b18101182766b4b4065d80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ed:d6:89:6e:71:9d:ac:20:9a:de:6b:1e:fd:
99:cc:67:86:eb:02:03:bb:83:77:2f:17:29:fc:f7:
41:f9:42:6f:39:e5:7e:9b:3e:ac:0e:67:0e:9c:6d:
91:6f:a8:38:7d:08:5a:f7:c8:92:77:97:b4:89:8e:
f8:87:09:c0:33:47:4f:95:45:a5:5c:29:d2:1b:d0:
57:d0:6e:ef:58:b9:db:a8:45:1b:3b:92:a7:7f:2e:
0d:ff:93:46:df:00:4f:f8:57:23:01:4a:ca:3d:8d:
a7:f8:e3:2d:2b:52:30:7a:3d:33:59:88:77:fb:33:
aa:39:3e:76:16:3f:95:81:e0:a0:ab:70:42:ed:b2:
d2:6d:4c:69:c6:1f:22:fd:b9:ba:35:5e:e1:36:62:
eb:3c:e8:37:72:2a:24:3c:fc:f2:d7:18:d7:e0:cb:
80:13:3c:da:17:fd:49:8f:8d:f2:63:34:aa:53:08:
c0:ca:51:c0:3f:74:96:55:64:36:c1:59:3a:cc:e8:
be:da:24:05:14:89:3c:92:82:f0:de:50:f0:80:62:
96:6f:52:aa:9f:54:c1:b5:d5:15:2c:81:2b:be:67:
dc:ee:8e:8f:29:e7:6e:32:04:22:b2:76:7a:5b:ab:
46:ec:39:2c:8f:ea:74:92:b0:d9:33:7b:6d:e7:96:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:91:5D:57:CA:09:9A:D4:D7:B1:81:01:18:27:66:B4:B4:06:5D:80
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7d:62:4d:42:c8:7f:b8:44:53:64:b6:d0:5c:e9:35:e2:26:
3a:d1:10:a9:b0:e4:83:73:ad:7c:a0:c8:6e:06:12:52:6c:ae:
99:18:f7:40:41:8a:91:92:06:cc:c1:69:a4:10:2d:52:2d:da:
68:a3:a8:6b:13:06:41:da:e8:1a:4b:a9:43:f0:be:48:d3:94:
2b:e5:47:12:67:d9:a6:af:a3:5e:de:50:b3:f1:5e:0e:ab:2c:
fc:1e:ba:2a:ce:50:ed:68:ce:43:1e:3a:93:ec:43:ca:ff:96:
52:35:dd:03:c5:cc:a1:d4:d5:a4:ea:59:e4:f6:00:a6:fb:81:
88:0f:00:df:e3:df:6e:4f:86:da:a2:41:59:3f:19:eb:52:0b:
b8:00:a1:7d:85:75:de:d8:c8:86:74:f9:4c:22:1f:ef:6f:9d:
75:63:16:94:8b:44:7b:71:2f:63:4a:b6:5f:c6:89:07:ef:ff:
02:e2:f6:34:53:b3:4d:9a:03:0c:3f:c3:1e:7c:d4:87:8e:86:
5a:e3:0b:67:3e:8c:ee:62:d9:76:b0:18:c9:99:a6:20:82:5d:
08:09:f8:15:05:8e:ab:63:09:f9:4d:c9:33:85:25:21:a9:26:
03:f0:7c:04:a1:5e:35:57:2f:e8:20:49:f2:e5:6b:51:6f:e2:
20:1c:ef:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:24 2025 by rpki-client