Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
File: o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft (raw, json)
Hash identifier: oGeqQmIN+3ays7UrvUMuYFq+Yo98mGK1ZA91QOtm/Rk=
Subject key identifier: 0D:5E:42:9F:15:05:C9:38:DE:FC:73:16:2F:59:1A:C0:10:8C:2D:FD
Authority key identifier: A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
Certificate issuer: /CN=a37a126d7854ecd565ae82970c693f3359f85f37
Certificate serial: 0194BD17B83B80D26AF7C17A3B09A5317D99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: mCmdogU3kH7W3vnMnxNLVbtvTa4.roa (hash: gDJzKrp4zR1sht7C5P/Tek0HKRIcYsUf9kyhRMAnCbI=)
2: o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl (hash: Vsfp3TZmJA3dBXKpDas7JiPAw4mMAq9PZ7CusqmAmkM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b8:3b:80:d2:6a:f7:c1:7a:3b:09:a5:31:7d:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37a126d7854ecd565ae82970c693f3359f85f37
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=0d5e429f1505c938defc73162f591ac0108c2dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b3:53:76:6a:59:04:ce:94:34:c0:e5:e8:d7:
fd:bc:ec:87:6d:ed:28:83:d0:d2:62:54:1a:9b:4c:
24:b0:6c:31:e5:37:1c:fd:ee:f6:b3:8f:0c:ca:1f:
44:3c:7d:da:03:c1:6e:9c:e6:90:e7:b0:60:2e:fa:
5a:35:3e:7e:ea:5e:6d:3d:71:a1:03:d7:00:f1:c3:
b8:cb:d0:db:6a:d6:9e:85:2e:00:00:20:e0:6b:42:
d1:44:fb:bb:5c:73:e1:71:32:60:d3:1f:4a:9a:8a:
a2:2c:a4:0b:e0:8b:ea:d3:9a:81:1d:a5:01:37:99:
2b:88:0a:34:aa:a1:c7:8e:8d:ee:4b:66:1e:c2:79:
6a:1d:03:3e:65:0a:8b:66:d7:c6:ff:64:ba:75:83:
9d:e8:47:39:84:21:3a:95:e6:d3:d2:51:cc:8d:5d:
1e:f3:50:ea:76:5a:a5:74:bd:73:f0:3c:32:0e:a3:
95:c4:e8:01:9e:a9:cd:85:40:7c:ac:95:25:5f:c0:
7e:ab:b0:0d:d0:be:65:f7:24:01:74:be:f5:0c:f9:
7f:46:9e:b8:37:5b:55:0c:ff:f8:47:ca:99:bf:e5:
a0:71:1b:5b:9d:93:cc:7d:2f:65:17:a7:50:e7:d5:
77:f4:d5:40:b7:f4:9c:9a:fa:11:43:da:bb:25:ee:
14:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5E:42:9F:15:05:C9:38:DE:FC:73:16:2F:59:1A:C0:10:8C:2D:FD
X509v3 Authority Key Identifier:
keyid:A3:7A:12:6D:78:54:EC:D5:65:AE:82:97:0C:69:3F:33:59:F8:5F:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3oSbXhU7NVlroKXDGk_M1n4Xzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/834407-163d-410c-b949-786cb1296e58/1/o3oSbXhU7NVlroKXDGk_M1n4Xzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e5:46:51:c2:7d:8e:e8:7d:8d:d9:7d:af:70:23:24:e7:16:
c7:f8:9f:15:c8:6b:e4:ee:f4:16:2e:1c:03:87:04:b4:c9:f9:
84:c4:58:e7:bf:c4:24:b2:d1:f8:3d:36:88:24:b2:81:22:18:
51:c8:fd:e3:6c:de:54:48:38:d2:2b:3c:38:26:b9:5b:dc:46:
d3:50:16:92:9b:d4:a6:57:68:19:25:9b:f3:ac:b1:7d:89:0b:
bd:fe:33:a2:5f:d7:c0:4c:cd:f0:e2:b5:dd:08:63:b5:96:92:
1f:37:32:a1:37:5b:58:59:21:67:93:01:25:3b:47:a5:a4:3f:
e1:43:84:25:14:38:d1:81:ce:5c:9e:e4:70:38:02:64:73:5c:
f2:a3:a5:89:f4:58:f9:15:50:64:6c:ea:4a:bd:09:7e:fa:44:
56:e3:d4:02:c2:4d:97:ae:c8:1a:d6:1c:9a:22:60:89:be:6d:
de:bf:b9:87:8b:39:13:3c:a5:fe:c7:fa:7f:24:c9:97:2a:27:
2d:28:38:dd:68:f2:3b:c5:50:1a:63:a4:b8:95:44:f7:1c:6d:
3a:e6:ef:9e:7d:35:f2:cb:5d:9c:d9:46:93:a0:e4:8e:9d:de:
6b:ed:dc:2b:aa:45:13:36:d5:c9:2f:d2:41:60:05:aa:af:0e:
07:a2:56:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:08:35 2025 by rpki-client