Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
File: ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft (raw, json)
Hash identifier: qeri7uXIrRjA2mZXEcVn6hoWPHASc9k3wI0uf293SUA=
Subject key identifier: ED:8D:E5:B3:32:9F:BA:ED:06:30:1E:E0:61:E2:68:E3:FE:08:9E:40
Authority key identifier: A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
Certificate issuer: /CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Certificate serial: 0194BC3C604518B476DFAE46794999BF523F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
Manifest number: 0DCD
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl (hash: coJX8DhVM99Y+yacbsJNeSKWCWmB/9iHSD50H1MPw/I=)
2: thsd_2EivTS0FbZ7b83mqFkVBNo.roa (hash: Pv1XY8/swMxg7QqZhkFzX8BQKAWTTZrU7LwKowVl3tU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:60:45:18:b4:76:df:ae:46:79:49:99:bf:52:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a214fabfef203a8ee08ccb47dd6473fce799a28f
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=ed8de5b3329fbaed06301ee061e268e3fe089e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:b3:73:67:69:c5:bb:ff:30:e7:cc:6c:e9:
b1:4c:e9:0d:56:01:4d:61:3e:ef:d4:70:a1:dc:c3:
47:08:4b:4f:61:ed:08:2e:93:78:c5:52:df:ad:c3:
96:83:51:34:b9:5c:a1:51:64:f5:83:66:15:44:1f:
ec:43:c4:a4:60:8f:6f:9e:60:bc:25:f2:d7:34:f0:
6f:8d:e8:a7:d8:b4:f8:5c:a0:ad:4e:fa:49:19:84:
e7:5c:8a:00:2f:bb:e9:ac:7d:31:e5:a1:10:df:43:
60:db:99:86:a8:5a:99:24:47:51:08:94:a3:71:16:
ad:77:68:b2:f3:ce:63:65:75:bd:e9:45:8f:30:28:
bf:c5:ff:5e:d4:25:5f:57:b7:65:25:98:ba:8f:dd:
e0:cf:fe:16:05:1a:a5:7d:72:05:50:7f:37:9d:d1:
e0:63:d3:b0:6a:86:9c:dc:dd:56:ee:6e:2b:06:70:
ea:9e:3f:b4:36:d7:30:c5:f5:10:5a:d6:1f:d1:23:
89:a6:c2:e7:b4:55:73:ca:0d:dd:d4:87:69:8a:ef:
70:97:7d:4c:e4:95:2a:24:8a:ec:c9:04:32:b0:5c:
b0:d8:6e:23:74:19:73:3d:4d:b4:ed:33:10:bf:43:
2b:d6:32:2d:46:70:47:6b:91:9d:10:c3:c3:9f:65:
00:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8D:E5:B3:32:9F:BA:ED:06:30:1E:E0:61:E2:68:E3:FE:08:9E:40
X509v3 Authority Key Identifier:
keyid:A2:14:FA:BF:EF:20:3A:8E:E0:8C:CB:47:DD:64:73:FC:E7:99:A2:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ohT6v-8gOo7gjMtH3WRz_OeZoo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eba459-03d3-4cd5-8606-25c5f7123e35/1/ohT6v-8gOo7gjMtH3WRz_OeZoo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f0:b1:50:95:55:c1:ff:eb:04:56:f7:ef:59:c8:e4:fc:30:
d1:3c:9b:54:cb:57:28:da:74:58:47:a8:62:a7:20:6c:b2:7d:
68:ae:0f:e9:f8:8c:40:ae:d7:e9:b1:83:92:a5:4d:ff:d7:70:
7f:9f:1a:01:c6:69:f9:c1:a6:24:51:21:b6:d7:d2:0e:95:d0:
e4:f0:86:62:29:5d:e6:ae:6d:69:1e:5c:40:a8:0e:b3:1d:0b:
a3:47:8c:7a:43:64:b2:9a:bd:88:fa:64:d7:8d:c3:61:af:d3:
ce:56:da:d6:2c:0f:1b:05:6c:32:8f:37:cf:35:7e:33:ff:62:
66:af:fc:c6:b5:7c:e3:a2:9e:a9:19:49:20:33:c5:ba:eb:b6:
0d:26:8b:2c:4d:4b:77:19:e4:40:71:40:fc:a5:2f:5b:5e:dc:
73:14:f8:64:a2:11:7a:9c:10:4f:66:ba:e3:b8:11:49:51:16:
c2:75:ad:d9:50:19:d7:96:04:fe:85:17:c1:05:be:e0:8f:64:
cd:89:f6:9e:0c:7a:b0:cb:f4:7b:5b:6e:9b:24:85:36:3a:4e:
b8:e5:ef:d8:21:e7:81:c8:e4:92:ed:7d:65:6b:c2:74:50:39:
c6:b8:47:99:9e:cf:78:ab:87:32:3d:6d:f2:9a:30:60:30:83:
06:08:58:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:37:14 2025 by rpki-client