Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
File: oixSeMS7sCbhL_12C-rFn8FV_CU.mft (raw, json)
Hash identifier: TPEn6X8+1qBg0vZOCmAKRblkreU2Gi1yBPuBvygwkZc=
Subject key identifier: 78:AD:9E:78:33:90:19:BB:30:5C:29:E6:43:32:FF:0A:2F:4A:C0:47
Authority key identifier: A2:2C:52:78:C4:BB:B0:26:E1:2F:FD:76:0B:EA:C5:9F:C1:55:FC:25
Certificate issuer: /CN=a22c5278c4bbb026e12ffd760beac59fc155fc25
Certificate serial: 0194BD85B01C7DE825E8B202909332389CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
Manifest number: 0897
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: P8h8nlnz4dD4fkTghoS9unFyKig.roa (hash: MYpmJNo5HIfucuzKcNdlv0aQadbbtMqL8vbh/XHclWY=)
2: oixSeMS7sCbhL_12C-rFn8FV_CU.crl (hash: BcMiIfEL9FZ1NyIl5HsyUU1G9NNIZ5xgsk+AcFzAaWw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b0:1c:7d:e8:25:e8:b2:02:90:93:32:38:9c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22c5278c4bbb026e12ffd760beac59fc155fc25
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=78ad9e78339019bb305c29e64332ff0a2f4ac047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:b0:68:bd:18:47:f5:fe:8e:51:2b:59:c3:
93:86:f5:b6:16:b7:36:df:b0:8f:86:18:f2:d4:68:
f9:76:58:e1:b9:31:f6:be:0f:8a:b8:b9:62:d3:87:
15:b9:e7:93:00:d1:24:ee:c8:c9:e5:54:c8:29:eb:
54:94:ff:62:21:b9:1b:e9:f0:cb:6c:0b:2e:c3:eb:
f6:b1:81:29:e0:df:0c:21:9c:12:91:ea:9d:82:61:
7b:b4:ae:27:96:cb:ea:4a:92:ff:87:b8:b8:d9:76:
91:a8:42:cc:e5:24:99:83:8f:61:8c:d1:58:32:4e:
ec:b1:fe:d0:3a:34:fb:0a:4a:13:a8:9c:4c:b2:29:
ec:5c:fc:44:1f:51:79:cd:a8:13:08:ee:ed:a4:f9:
f7:61:ae:21:79:39:07:ef:8f:ae:6c:b0:57:25:28:
75:6b:ee:1f:92:a5:aa:b0:b9:f7:d5:a4:9c:9a:14:
bd:ab:7a:47:cd:bc:8f:ac:4a:22:9c:c8:5f:c3:da:
d7:29:36:29:89:e7:a1:4f:d4:2c:59:c4:b5:9f:c5:
68:55:2d:e9:97:04:fe:df:7c:30:a5:7d:4b:a9:79:
bf:db:7a:85:aa:39:c1:0e:4a:ca:9d:72:bb:6b:9e:
60:d4:ef:b2:41:7c:fb:a9:c8:99:05:6f:c1:3b:6c:
7c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AD:9E:78:33:90:19:BB:30:5C:29:E6:43:32:FF:0A:2F:4A:C0:47
X509v3 Authority Key Identifier:
keyid:A2:2C:52:78:C4:BB:B0:26:E1:2F:FD:76:0B:EA:C5:9F:C1:55:FC:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oixSeMS7sCbhL_12C-rFn8FV_CU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/afcbad-c126-4f8e-bd22-492b60343a70/1/oixSeMS7sCbhL_12C-rFn8FV_CU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b3:c0:45:6d:98:06:5f:b7:c2:47:cc:e0:78:60:1f:c5:03:
0e:9d:19:77:68:0d:ff:dd:1b:87:1b:48:0e:77:3e:79:7f:93:
3b:1f:fb:21:00:50:b4:ad:2a:d7:d3:24:43:30:6e:80:8b:24:
b1:81:46:87:5a:89:c4:a1:80:51:51:cc:0b:87:bd:8d:17:77:
76:be:90:89:1d:92:73:27:97:44:2c:54:2a:2d:27:e5:b9:94:
55:4f:c1:7c:77:b2:6a:92:1d:fd:29:b4:11:cf:1d:b1:c5:cb:
3d:95:41:0f:89:c5:d4:0f:1f:7e:49:18:16:12:7c:1d:b9:c7:
81:4b:96:e9:fe:10:05:59:8f:eb:02:be:58:3d:18:c0:83:24:
de:91:a7:c3:dd:6c:0b:61:a7:bd:71:ef:f6:6e:d4:ea:31:b3:
64:46:76:d9:d1:11:e7:66:e4:d7:da:9a:a6:23:d3:61:bf:02:
a6:bb:1c:40:d4:b6:aa:86:07:bf:f3:29:6a:c6:da:cc:64:67:
76:cd:76:af:fe:34:fa:5b:bf:f5:ef:f4:53:18:73:1d:07:10:
01:af:80:75:55:be:36:10:4e:45:07:ba:e0:79:e5:ad:6a:d6:
37:d9:24:a2:9a:24:02:83:15:97:6c:8b:04:cd:8b:ad:01:9c:
21:aa:75:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:31:03 2025 by rpki-client