Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
File: oyLyKe3C8xSi-l7w168d3bSZ6jE.mft (raw, json)
Hash identifier: WfHcgaFLbTu7DpeFO0JFeJh//kN97EmieDanejWlMNU=
Subject key identifier: FF:DB:D9:02:70:02:BF:52:3C:EE:75:DA:9F:B6:D6:87:83:01:85:BA
Authority key identifier: A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
Certificate issuer: /CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Certificate serial: 0194BC3C7CC730FB28EAE8F416B735973F28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:01:08 +0000
Manifest this update: Fri 31 Jan 2025 12:01:08 +0000
Manifest next update: Sat 01 Feb 2025 12:01:08 +0000
Files and hashes: 1: 3qKLU4_hnhevyQ2xzjrsnxKz8ww.roa (hash: 6GP5y6y6jPloivIjZ41ioDcm/x4+Zw+Ugei75hGwAeY=)
2: Zx1ClAMUuD9lyG7YgRP_om-ZEYI.roa (hash: gbBcl06UfQ1+hxbFp7K2ZbQwEqAaFU9l3RdaNWVj9Fw=)
3: oyLyKe3C8xSi-l7w168d3bSZ6jE.crl (hash: JxonyslR1oQDOrZ8JnWqbYHNkIW11AeG5FMPYS8Lhxc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:7c:c7:30:fb:28:ea:e8:f4:16:b7:35:97:3f:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a322f229edc2f314a2fa5ef0d7af1dddb499ea31
Validity
Not Before: Jan 31 12:01:08 2025 GMT
Not After : Feb 1 12:01:08 2025 GMT
Subject: CN=ffdbd9027002bf523cee75da9fb6d687830185ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:e2:13:03:cc:4f:b8:c4:cd:af:ce:24:67:
1b:fb:c9:6f:79:9f:1d:d9:95:e1:c3:4a:7f:af:d1:
69:ea:07:0b:e2:b0:c5:bd:ee:69:ae:cc:8c:43:64:
77:7a:75:0b:61:f1:93:42:e6:2b:42:ca:28:ef:63:
cc:2e:84:2a:d2:6b:cb:33:3e:15:2d:8d:ce:9c:dd:
54:8e:96:21:b5:1f:ae:47:9d:c6:ba:5e:0f:a1:d5:
c0:4e:03:2c:53:0c:b5:44:1b:ff:b7:d5:7e:52:c4:
94:f8:cd:b0:52:48:0e:82:17:4c:31:9b:23:49:f6:
f4:f6:40:51:f5:7c:89:39:aa:91:74:45:d2:b8:49:
d4:86:a2:89:37:a6:0d:20:5b:5a:7b:30:8a:b5:40:
1a:ab:7e:ca:d0:89:83:43:e8:f9:c1:a4:9b:0d:b8:
d7:20:87:23:8f:24:85:65:f1:68:d1:35:a3:18:b3:
c0:a7:f5:0b:fb:96:ba:2d:ec:a7:29:49:dd:03:61:
ee:eb:28:e0:fe:3c:00:b9:f6:3c:f3:a8:04:cc:2e:
60:53:9e:7f:40:9b:88:26:bc:68:e3:73:36:b7:e2:
cc:6d:df:9f:75:24:d9:45:a3:48:a8:4e:37:a8:2b:
7e:82:0f:6a:80:36:22:a9:4e:4b:de:e1:72:a3:00:
2e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:DB:D9:02:70:02:BF:52:3C:EE:75:DA:9F:B6:D6:87:83:01:85:BA
X509v3 Authority Key Identifier:
keyid:A3:22:F2:29:ED:C2:F3:14:A2:FA:5E:F0:D7:AF:1D:DD:B4:99:EA:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyLyKe3C8xSi-l7w168d3bSZ6jE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/edffbb-1082-4482-8a08-65f8247ffa91/1/oyLyKe3C8xSi-l7w168d3bSZ6jE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ee:89:61:2c:c4:7f:e1:39:90:a2:e3:c0:15:0b:9f:d1:d7:21:
5a:6a:a0:c4:e2:5a:38:13:fe:84:f1:1c:5c:7c:c0:7d:1a:0d:
c1:f6:46:72:88:a4:8c:0c:8a:e7:13:94:e9:b9:0c:5d:a5:bb:
b8:98:6c:f4:65:53:d8:89:11:01:7d:a4:b7:bc:0f:a8:ba:44:
58:bc:f0:89:47:3c:e8:8b:cb:aa:77:ee:44:94:cb:04:d4:48:
75:a7:e3:e7:f4:f0:72:51:91:85:01:9f:ca:b0:61:bc:a0:b5:
82:97:4e:2c:82:7c:9f:b0:e0:3d:51:73:1b:d6:5e:8b:7a:91:
c1:2a:4a:15:12:a4:21:35:df:a8:b3:4d:57:b0:3e:c7:54:4f:
7a:10:b3:cd:8e:c0:d6:ef:12:c9:98:cc:dd:95:93:ae:88:4f:
dd:e1:c6:5a:60:48:95:c9:3e:7d:51:9f:4b:3d:06:1f:ee:f7:
9b:a7:54:e6:d5:9e:02:e8:b5:37:bf:78:ce:d7:6e:6c:b1:04:
82:1f:9c:37:45:33:96:bd:04:93:82:a6:03:77:bd:8c:f0:12:
fd:69:8f:30:d8:89:0c:02:a7:b8:b8:3d:15:5e:b8:03:13:fe:
9a:59:b7:44:ac:be:96:b3:1d:e7:22:2f:36:5f:6c:ac:cd:7d:
3c:3f:3b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:08 2025 by rpki-client