
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
File: OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft (raw, json)
Hash identifier: ecND7hwQeK+mv4JXVy9zfDGOx83vp3FV4EBAYyabdGM=
Subject key identifier: 0A:4F:ED:69:4D:15:76:E0:7A:BE:90:82:33:B6:AA:D1:1C:B6:63:24
Authority key identifier: 38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
Certificate issuer: /CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Certificate serial: 0194BBCE94EFD8C3D4A6FEDF046D28FBC901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
Manifest number: 04A1
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: 96NgLEHRtKxUiimE9cBg6xhscpQ.roa (hash: mk1oEXhjeJbAg6bVncPiZm7XaZ/iA+I0QEGuQUH1ZeM=)
2: OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl (hash: fsVMqtjSrAHi4K0qGqWC7d3eUn/UE96S+DAbBIURFWs=)
3: auApMcvT0ghtABN_47-F8XLxrNw.roa (hash: XofAinsDeuW+LGI1qiG7UWKXoZIw8N+n+gNQOT5w3Kk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:94:ef:d8:c3:d4:a6:fe:df:04:6d:28:fb:c9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38083044fb6c43bffad5fd54b07d2cc7c00d1bd3
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=0a4fed694d1576e07abe908233b6aad11cb66324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:88:2d:92:d5:4a:58:70:35:c0:e4:a8:33:
cb:96:f4:47:d4:e5:4a:87:88:8b:28:a7:4d:ae:3a:
4d:2f:c9:cc:b8:7d:a9:5d:8d:f9:c8:e0:c6:12:01:
5f:36:49:47:96:8c:df:b3:13:72:66:1a:13:60:72:
a1:16:1f:db:ff:f1:f7:56:c3:85:57:a9:43:54:75:
f3:4e:7e:bc:2a:60:9a:10:53:d6:88:a1:fb:f5:2f:
26:d9:2a:65:7c:46:cf:82:e8:02:f4:8c:95:74:5b:
0d:10:2e:d4:e6:89:81:31:5f:cb:bf:73:c3:56:4f:
ee:0e:1c:a4:96:65:40:bd:78:d7:4c:e4:70:af:e9:
cc:4d:7e:d1:8f:f4:46:3b:30:b6:23:75:d1:5e:3f:
79:25:79:d7:22:3f:16:32:a3:29:12:79:89:4d:c5:
51:f4:a6:5d:0a:64:84:d0:e6:d0:54:9e:dd:d5:77:
0e:35:d1:1c:4c:6e:80:e3:09:f4:82:ca:ae:db:a9:
cf:20:b5:cd:58:0b:fe:73:ee:73:61:a7:07:a4:bc:
93:10:ab:aa:ec:37:f1:74:9d:04:88:bb:3b:df:6e:
04:ec:38:35:a8:fb:47:b3:5f:cf:cf:2c:cb:7e:4d:
d1:52:6d:24:72:08:c4:dd:1c:0c:95:c8:17:a0:aa:
d5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4F:ED:69:4D:15:76:E0:7A:BE:90:82:33:B6:AA:D1:1C:B6:63:24
X509v3 Authority Key Identifier:
keyid:38:08:30:44:FB:6C:43:BF:FA:D5:FD:54:B0:7D:2C:C7:C0:0D:1B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAgwRPtsQ7_61f1UsH0sx8ANG9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/94a6b8-39d3-4f79-ae25-a95511ba4d46/1/OAgwRPtsQ7_61f1UsH0sx8ANG9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:fc:2a:f8:4e:48:05:ee:99:5b:9c:ab:b4:fa:a0:de:d9:0d:
5d:48:4d:88:0b:43:a6:ee:fe:04:89:62:0c:ad:84:79:66:8d:
b9:d6:0c:a7:04:ce:50:55:84:ef:12:03:4d:30:80:13:a8:83:
12:19:49:46:ed:fd:43:a7:5c:c1:dd:f7:83:12:cd:8a:70:4d:
06:26:4c:b2:a4:24:f8:fb:72:05:65:a1:c4:d2:1e:0a:47:2e:
c1:24:4e:6b:18:4a:00:0e:45:b4:44:cf:38:3b:88:b7:b5:e4:
08:96:d3:cc:fb:08:0a:72:6b:6d:a1:c3:f6:2e:44:bc:d5:72:
a6:c9:3b:cf:bb:13:d7:47:2d:10:e0:83:65:a1:2d:7c:df:88:
e6:a5:f6:ab:5a:0b:27:91:12:5b:8f:ca:66:0b:dd:47:22:40:
c8:bf:32:d9:46:d7:24:a8:af:05:91:f6:f2:7d:7b:01:65:20:
78:45:89:70:2e:00:47:7e:9e:37:7e:52:ff:f6:6d:01:c7:8e:
34:ce:dd:a6:89:a0:d6:8d:74:b3:c9:88:4e:37:76:8f:5e:0f:
14:f1:82:fd:d8:6b:a2:e8:d8:bd:48:16:66:10:d2:23:07:e7:
eb:0c:dd:f1:71:ea:20:2b:ff:44:fb:6d:0c:f5:ae:66:0a:f3:
23:1a:d3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:48 2025 by rpki-client