Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
File: oLsXGJY93ZEot2_T2CE6FWXvhW0.mft (raw, json)
Hash identifier: wye5NG2OEzE3bF4DModLHpr+inlnwDZOptgfSvc//Dg=
Subject key identifier: CF:9C:DC:35:C0:B2:35:10:C4:1C:26:9D:89:4F:3A:A7:7C:E4:2C:31
Authority key identifier: A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
Certificate issuer: /CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Certificate serial: 0194BCA9B5434CA46506799188BF3A931164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: 3AKmduEBocJ2JnN0jXYWS-8GbOY.roa (hash: iBJD1wTxS+O8/2QNKHhH8F14y6hfViRbWeFBsKe3/pI=)
2: kIIfJ-bgIB8FEHmlLuoBBuJNtKA.roa (hash: d5x0f5Yxm3xcFQXy2bPoyZU9c7+8Vyq9PQskQziwEEU=)
3: oLsXGJY93ZEot2_T2CE6FWXvhW0.crl (hash: 9EzPjohWF/3BG2qid0rZLgDOKD0qZOIgxS76WrqgVSA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b5:43:4c:a4:65:06:79:91:88:bf:3a:93:11:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bb1718963ddd9128b76fd3d8213a1565ef856d
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=cf9cdc35c0b23510c41c269d894f3aa77ce42c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1c:a7:f5:01:9a:32:89:ae:f4:8d:48:07:96:
74:65:5e:5a:8d:72:68:42:8b:10:2e:23:b5:dc:e1:
3e:cb:5d:7d:57:b6:5e:46:ad:36:de:79:c4:dd:8c:
0b:ab:be:1c:7c:96:35:d3:55:d4:67:83:db:ac:da:
31:5d:49:25:66:e9:8b:b7:54:34:36:7a:f2:a5:e8:
19:96:bf:5e:60:5a:08:20:cf:99:53:77:0e:b7:e3:
6c:d8:da:5d:89:7b:ec:86:94:7c:d5:27:82:c3:a8:
08:55:94:e9:a0:9d:4f:75:23:57:77:2c:44:2c:b3:
a8:fb:e1:08:6b:fa:69:52:65:d7:0c:06:39:94:33:
bf:69:b1:a6:35:0a:56:8f:57:83:05:bd:0d:4e:3d:
f6:1c:91:da:33:37:b9:ac:9d:5b:d4:73:00:e6:9a:
ec:83:6a:eb:74:f8:e1:a7:12:7c:97:82:43:08:5e:
09:36:ca:c0:aa:a0:c2:15:a7:40:a2:a9:d6:db:f2:
76:cc:e0:4a:59:a7:61:17:cc:39:28:4b:3d:44:25:
30:65:c2:f0:7f:01:e1:d9:6b:7c:9c:21:22:1c:e6:
c4:1c:b0:6a:01:eb:03:a1:08:db:80:85:e4:7a:51:
81:48:cf:6d:4e:cc:7d:62:ec:e2:c4:37:58:07:1b:
d4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9C:DC:35:C0:B2:35:10:C4:1C:26:9D:89:4F:3A:A7:7C:E4:2C:31
X509v3 Authority Key Identifier:
keyid:A0:BB:17:18:96:3D:DD:91:28:B7:6F:D3:D8:21:3A:15:65:EF:85:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLsXGJY93ZEot2_T2CE6FWXvhW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c4210e-90de-4eca-8206-5537d85d2bd0/1/oLsXGJY93ZEot2_T2CE6FWXvhW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:19:42:6f:6f:f2:d5:fc:f0:31:d6:18:a6:fc:fc:45:f8:85:
2c:f2:28:48:cd:4a:17:fb:bd:4c:53:de:7b:7b:00:5a:a4:33:
10:39:a7:09:dd:56:fc:6c:d2:ce:76:fd:53:20:c7:94:b5:d6:
3f:db:8b:a6:43:ff:ba:09:df:2d:3e:95:e3:16:5b:f8:8d:49:
bd:20:fd:5f:c5:e9:2c:26:e4:10:7c:5c:48:24:b6:d9:b8:b1:
6c:0d:4d:85:a7:eb:7d:a8:a7:54:a2:6b:5c:01:ec:ba:75:04:
d6:00:9c:3c:80:6d:15:d1:47:ee:30:6c:4b:5e:41:57:e0:0d:
42:db:5c:e5:5b:3d:39:a0:2a:fd:d9:36:8e:dc:54:24:15:cd:
55:bc:41:9a:6d:de:17:7c:49:16:fc:27:52:b1:ab:15:2d:f3:
e1:a5:ee:8c:c7:a0:31:33:19:d4:8d:47:c8:72:ea:25:51:5c:
e6:36:e4:bd:4c:0a:ea:b4:88:3d:fb:13:ba:10:7a:9c:9a:e7:
74:3c:c0:6a:68:e0:b5:bc:28:7d:59:d8:11:b8:b3:78:1f:98:
b9:db:3a:b6:86:a9:37:62:53:aa:9e:ed:03:ad:a4:56:51:82:
c3:4c:d8:00:d1:22:b9:19:6a:9c:1e:69:33:73:00:86:e5:bd:
29:b6:77:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:19:10 2025 by rpki-client