Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
File: oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft (raw, json)
Hash identifier: k2bUA7J2l74gIM0JsMHxcMmwwdTIHm512QSeh5kqjdk=
Subject key identifier: 99:71:00:E5:64:E7:CE:0E:94:3B:CC:BD:F8:D2:D5:D2:B0:85:3B:65
Authority key identifier: A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
Certificate issuer: /CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Certificate serial: 0194BCA9D04AFD394544661B3F2235632EDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
Manifest number: 026F
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: WacUruZTE83WEEePnyB3KKF0YFU.roa (hash: IGW0uLOK6yIPDXD8+jDEju++6EJZMklynz//i9x70Jo=)
2: oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl (hash: 3c3iielkh8t3mXdaepbsjK0OaoOFwJRyQvMTQqCLE0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d0:4a:fd:39:45:44:66:1b:3f:22:35:63:2e:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15d9596b7a5ef0889a73971000d12630daca9a6
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=997100e564e7ce0e943bccbdf8d2d5d2b0853b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:86:fd:93:ed:db:d9:d1:29:bf:f1:73:71:
cf:49:df:e7:08:4b:23:d2:3d:2a:29:c0:47:d0:6e:
66:57:04:9c:30:7b:a9:00:9e:39:fc:76:b1:68:8f:
8a:51:da:2e:99:9e:75:0d:72:94:e1:59:3d:c9:a5:
77:47:df:73:eb:22:88:40:dd:20:5c:bd:ac:6e:82:
c2:8e:18:22:0a:6c:92:9c:d7:60:8b:36:78:79:2b:
0d:0e:eb:68:a1:0b:ee:72:4a:83:7d:7c:a3:1e:75:
0e:73:82:b7:67:5a:42:34:78:dd:98:e2:e3:f1:f1:
19:d2:5a:f5:e0:65:cd:18:06:a5:33:0d:0e:ee:05:
be:e4:f8:0a:4d:28:3f:9a:03:17:8a:c0:1f:9e:25:
58:16:d7:67:82:a6:80:c7:f5:a3:ce:f9:b3:07:e3:
44:97:56:ce:dd:72:e4:08:6a:ae:16:14:d3:2d:43:
3b:41:4c:65:79:47:84:16:ed:aa:ac:ad:8c:fc:75:
fb:58:30:40:c4:4b:5e:62:4f:2a:0d:05:eb:b0:68:
58:26:24:87:50:ce:d7:0e:be:61:0a:f5:b5:18:6a:
a6:4b:02:5d:0a:6c:57:4d:c2:f4:12:12:36:73:09:
ce:79:0a:eb:c0:ec:59:58:ea:2d:64:7c:f0:e4:f8:
55:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:71:00:E5:64:E7:CE:0E:94:3B:CC:BD:F8:D2:D5:D2:B0:85:3B:65
X509v3 Authority Key Identifier:
keyid:A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:15:0d:a1:2d:0b:b0:da:f5:1a:fa:0b:fc:85:a4:ba:77:06:
88:24:e4:6a:f0:02:e4:f9:a6:00:e1:94:fd:5c:8a:d5:ef:cf:
5d:ce:66:fa:9f:f4:44:0f:58:9b:6a:24:3b:7d:b9:36:e5:0e:
e7:ca:e3:e5:54:38:f8:8a:9b:ac:99:b2:a2:38:d8:0e:69:af:
85:81:13:b8:b4:07:5d:1f:ea:69:dc:02:c5:d3:9b:c5:9c:e8:
8c:91:d3:43:1c:dc:dd:7c:42:34:47:50:cf:28:d2:71:18:72:
43:0e:f5:34:67:83:17:d0:a3:8c:cb:36:7c:37:41:53:a9:98:
07:f7:ee:32:51:ac:65:fc:04:c4:54:a6:6d:ef:d0:86:6d:f4:
ab:1c:ee:f5:75:af:d0:3d:a2:35:56:16:47:61:a7:bd:f0:33:
ac:4e:47:24:92:6c:6f:7c:5a:c6:fc:4c:f9:10:b4:6a:e6:51:
87:fd:27:58:1f:0b:22:f6:bd:1d:b0:bc:02:3b:bc:7f:05:95:
45:c2:89:54:8e:0e:6b:de:e8:19:1a:11:d3:ac:e4:52:1d:8e:
38:a7:7e:98:7c:af:f9:ce:05:89:84:0a:d3:f7:48:09:64:13:
bc:95:12:bb:ba:cf:6b:cd:5c:8f:ec:94:0c:2b:31:2b:82:49:
fd:a7:a2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:54 2025 by rpki-client