Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
File: oxkPbv156nMz-bzNhaBDUtkVsjk.mft (raw, json)
Hash identifier: 25fX7crmqO3VAB5KmD8Id1GSB5xO+mmYoLWDxjxP+oM=
Subject key identifier: 63:AB:BF:4C:A5:5D:EE:46:24:0A:07:DE:73:9C:40:29:2E:AE:5F:5B
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial: 0194BC731DBEC317AA128D525C83A3A23164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
Manifest number: 132D
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: KExUk0ZqXQL8EgosDUsfpJpTUyg.roa (hash: Sz5tU52c4zqN1bHM/ntPj4qPbpRJB4wKgoKZm0ClNu8=)
2: aIdDcKIPSrdTWAm8Itr83nsLcD0.roa (hash: UkSPTJ6SY0So9wqyoQ355LtxgU1FlK7CRcCejA7q0Vc=)
3: oxkPbv156nMz-bzNhaBDUtkVsjk.crl (hash: ONVHcTzsruYBgepvOBXhFjfo0aRmbPzhY4tjrnl+flM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1d:be:c3:17:aa:12:8d:52:5c:83:a3:a2:31:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=63abbf4ca55dee46240a07de739c40292eae5f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a3:1e:93:bd:7c:41:71:27:f9:36:3d:9c:30:
86:79:bd:ea:32:a3:34:af:a7:1a:20:26:ca:99:17:
bc:6d:86:49:0f:53:39:d3:c7:99:6c:3e:03:3d:9d:
91:37:a6:53:1e:61:92:68:5b:71:31:18:f7:45:cd:
01:98:10:07:e1:48:12:3a:48:93:be:0f:99:10:1c:
64:f2:17:85:c2:64:d7:be:45:6f:96:de:56:23:44:
16:1a:bb:ab:2a:f9:54:ca:2d:35:af:7d:3c:92:82:
fc:bb:bc:e9:f2:5a:51:b1:eb:75:a3:fa:6f:f5:a1:
a5:9c:d9:1b:a2:a7:9b:42:5d:1a:ff:62:41:a2:c5:
88:1c:e6:23:99:ed:fa:cf:09:01:9a:5f:d3:86:f9:
f6:df:df:55:74:38:c0:c2:5b:c3:e4:b0:97:88:49:
21:bf:62:e2:eb:1d:47:e2:9d:4f:09:19:e8:3d:b9:
e8:bf:30:0b:3f:10:1a:c1:3f:61:dc:4e:fb:c3:8b:
cc:2c:e6:eb:12:e6:35:ac:79:03:b6:3b:ef:db:7d:
cd:51:29:b4:48:ce:2d:7a:6c:30:20:c1:0a:e6:17:
e8:a3:38:5f:88:35:99:64:55:a4:51:13:ea:9a:18:
a8:af:8c:42:37:75:a0:0c:3c:78:80:e8:77:3d:ea:
24:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:AB:BF:4C:A5:5D:EE:46:24:0A:07:DE:73:9C:40:29:2E:AE:5F:5B
X509v3 Authority Key Identifier:
keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6b:29:92:2d:f4:1d:c1:93:88:f2:f6:80:fa:12:36:2c:ea:
ce:ca:a6:88:ae:32:4c:69:bc:d6:f4:b4:97:0d:90:c7:40:26:
9d:6c:16:b6:4e:49:75:ae:46:7f:a2:8a:0d:1b:74:ab:5d:d1:
95:11:b1:d6:55:0c:3e:df:e1:71:14:2f:d6:2c:44:ce:aa:b1:
b7:21:93:ff:81:78:63:ad:d4:8b:53:74:ac:42:42:68:1c:f8:
59:bb:32:8c:1b:56:36:5e:c1:e8:63:92:1a:5c:05:78:cf:77:
aa:30:d1:84:7e:74:4c:e4:fb:0a:ae:41:fc:10:0d:17:23:5b:
4b:ec:bb:55:da:9c:ac:39:35:c1:eb:66:47:96:28:80:b4:0a:
a8:4c:36:3c:74:29:64:3c:f6:d8:d7:d8:62:46:bd:46:e6:4f:
69:cc:40:58:cc:05:93:dc:e9:df:db:0c:2f:91:3b:e2:a0:ae:
dc:58:e9:0b:b2:14:af:7d:c6:63:e1:c9:01:61:67:fa:80:72:
74:8c:54:d7:b2:d1:18:0b:6c:73:18:f7:22:88:b8:a0:30:f2:
bf:0c:be:fb:81:ec:10:db:3e:9e:10:0e:9b:5b:e8:4f:bf:85:
07:81:3b:cf:3b:bf:e1:79:c0:0c:61:c2:80:94:10:e5:0f:00:
77:b1:19:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:45:51 2025 by rpki-client