Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
File: o8cchkWd50u9NaPMv9iuXZy00tg.mft (raw, json)
Hash identifier: dnW0XWzk2crrj/LkzvStclBmfxT/ypR4ubVlv5O+P80=
Subject key identifier: 44:1C:D4:6C:FA:F9:78:B2:69:BD:1D:3C:BF:7B:DD:90:E0:DF:E2:9B
Authority key identifier: A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
Certificate issuer: /CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Certificate serial: 0194BD85A84286B7CFBEC2AEED0153C88A54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
Manifest number: 0CDD
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: UK3kp7DVS-fpdp_PyKKZBPAEkaQ.roa (hash: 8KxM7G0u96R3lRI3p6WhEJjK8omSDAMQXe8llr10HQ8=)
2: o8cchkWd50u9NaPMv9iuXZy00tg.crl (hash: nN4BtCyCC2pLYrU0S8ve8cOCY5bVMxdNhrOv1QXUmRM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a8:42:86:b7:cf:be:c2:ae:ed:01:53:c8:8a:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c71c86459de74bbd35a3ccbfd8ae5d9cb4d2d8
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=441cd46cfaf978b269bd1d3cbf7bdd90e0dfe29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:4a:d9:10:d1:33:ca:4f:17:28:f5:b2:b5:
f4:eb:34:9d:98:4e:9e:c4:c4:18:b3:c3:f1:5e:84:
94:cf:2f:bd:48:28:85:e6:2e:8d:eb:96:19:01:a8:
56:c5:96:21:95:4a:76:75:16:3d:60:b8:bc:b6:1b:
8b:d0:75:bb:f4:c4:0e:f3:02:84:6b:3e:0d:41:fe:
8f:ec:07:d9:bf:c5:28:8c:ab:31:0b:d4:80:64:92:
62:1e:97:a4:63:4d:82:da:87:44:ca:4b:a6:64:01:
82:c3:e0:a3:c7:2f:8a:f5:9d:5c:50:54:8b:0e:73:
55:db:d8:ad:75:1a:c1:cc:80:0d:21:a8:48:e5:59:
2d:fd:c0:4b:12:45:c4:e5:79:05:5f:e8:b9:dc:64:
85:8c:7c:af:79:7e:0d:e9:81:0e:aa:ef:1a:53:1d:
40:bc:df:8a:e5:0a:7e:84:48:1e:7f:a0:7e:5a:8c:
48:ea:b7:ed:e2:0c:ad:45:f0:27:08:59:78:ce:32:
73:8e:83:a0:aa:7d:8a:b4:d5:09:5e:5c:db:4d:89:
67:9a:4c:1e:ab:eb:4f:39:24:27:a0:40:65:f3:76:
c4:f5:a1:02:60:a5:c6:7a:19:df:3f:e2:e7:49:ef:
73:77:a5:ed:95:4c:52:04:65:80:5d:1a:f4:3e:b1:
f4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1C:D4:6C:FA:F9:78:B2:69:BD:1D:3C:BF:7B:DD:90:E0:DF:E2:9B
X509v3 Authority Key Identifier:
keyid:A3:C7:1C:86:45:9D:E7:4B:BD:35:A3:CC:BF:D8:AE:5D:9C:B4:D2:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8cchkWd50u9NaPMv9iuXZy00tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/cc8e7a-e413-43ff-aa59-0914ad24a3e4/1/o8cchkWd50u9NaPMv9iuXZy00tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4c:77:03:29:f1:4e:f6:2a:29:c7:bf:b6:2c:e3:d4:02:4d:
0b:7b:4f:27:34:92:e5:69:95:5b:76:1e:03:39:6d:2f:e7:28:
de:aa:90:9a:b7:d2:3e:8f:3e:12:bd:d0:14:7b:8d:7d:20:6c:
0b:36:08:47:5a:27:ad:69:64:d7:81:53:16:00:26:1e:c4:14:
d6:0f:5b:97:40:07:a7:5b:39:b1:0e:c0:da:2c:21:22:5d:d5:
29:90:d4:92:87:8d:54:38:0d:0f:49:2f:29:5d:70:1d:2b:36:
43:a2:0a:91:e0:10:3f:aa:be:c9:d9:97:91:42:c8:27:2f:1b:
ce:02:16:20:ae:cf:ec:79:b8:c6:28:01:75:ff:79:e9:30:d7:
db:94:63:27:9e:f8:11:6d:fa:b9:36:9c:fe:e7:88:56:25:2c:
56:3d:64:2c:f8:86:6c:fc:f8:16:ff:78:a3:2c:1c:83:be:9b:
f3:1c:c0:3c:a8:46:37:42:c7:5a:c6:a4:29:e2:fb:9b:da:96:
f1:60:1d:cd:c9:1a:80:69:82:84:36:82:72:b2:ee:58:22:47:
41:5a:08:de:59:88:e9:2d:0f:03:8d:1b:b2:ae:ed:2a:26:19:
59:e0:7b:43:f2:48:03:79:0d:6d:ba:22:3b:76:a9:57:13:61:
48:26:a1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:57 2025 by rpki-client