Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.mft
File: oVHP748-2G0RrqutTRngal0HDTA.mft (raw, json)
Hash identifier: mjuz2Y+ZEyJOSjeP1SLBDv/iPFw7lA5KEzQoTpEHXc8=
Subject key identifier: 78:AD:4A:2D:37:B8:84:36:05:21:F2:4D:97:96:1F:7F:B8:8A:45:22
Authority key identifier: A1:51:CF:EF:8F:3E:D8:6D:11:AE:AB:AD:4D:19:E0:6A:5D:07:0D:30
Certificate issuer: /CN=a151cfef8f3ed86d11aeabad4d19e06a5d070d30
Certificate serial: 0194BD85370224B34A46F4700A8538716F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVHP748-2G0RrqutTRngal0HDTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: cURozdoKIb78CE26-wMYNNQ7Uyc.roa (hash: dA/x8vNS0uSWiGck2vmKHPyuh1JLESwmF1FR0wRZ1Jw=)
2: oVHP748-2G0RrqutTRngal0HDTA.crl (hash: o9evSgmmN7n6877fnQSA6dfXLJkHsPN9wRG/MRQ7HIo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:37:02:24:b3:4a:46:f4:70:0a:85:38:71:6f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a151cfef8f3ed86d11aeabad4d19e06a5d070d30
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=78ad4a2d37b884360521f24d97961f7fb88a4522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:36:a5:a7:c7:fb:9d:83:45:72:d0:67:95:9d:
f4:a1:71:4c:6c:09:af:24:fe:a8:5f:24:bb:2d:22:
d7:ab:d0:ff:16:34:d5:eb:51:b5:cc:51:8d:df:64:
19:ac:b7:96:d4:29:d2:7e:9e:a9:e1:8a:4d:e5:4b:
01:f1:49:ba:66:5f:d9:5d:1f:e5:00:b4:9d:46:f2:
fc:e7:88:5c:a6:ec:14:f1:29:61:47:db:fa:d1:2d:
46:a2:ad:c8:3b:ec:ca:35:dd:88:94:3f:41:a1:d6:
20:f3:0b:6b:14:50:61:b3:e7:f4:4b:3b:cb:26:43:
82:a6:40:23:5b:39:17:91:fc:04:a9:48:24:ad:19:
37:6d:c2:a3:af:3e:39:95:0d:96:1b:04:fb:55:78:
48:12:e2:43:7d:85:d0:a7:44:b5:d5:f0:0c:14:61:
30:4c:5a:75:54:38:9a:7f:69:dd:da:79:29:ad:bf:
33:6e:4a:32:9c:b3:ca:35:71:c2:91:49:10:f3:23:
01:c5:f0:37:cc:da:af:94:cb:24:e8:e8:92:83:04:
76:be:2c:d5:2e:92:8a:08:dd:36:c4:78:85:f9:10:
6f:11:fd:ce:10:2d:48:06:28:64:f9:79:28:c1:c7:
4f:25:3c:e9:ed:16:33:6f:62:91:d9:33:5a:5b:d2:
2c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AD:4A:2D:37:B8:84:36:05:21:F2:4D:97:96:1F:7F:B8:8A:45:22
X509v3 Authority Key Identifier:
keyid:A1:51:CF:EF:8F:3E:D8:6D:11:AE:AB:AD:4D:19:E0:6A:5D:07:0D:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVHP748-2G0RrqutTRngal0HDTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/959b9f-1408-4cf7-8e75-4046a32d27a4/1/oVHP748-2G0RrqutTRngal0HDTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e8:cb:ce:67:d1:ed:52:a9:c0:f4:2c:98:aa:b8:2b:7b:db:
a4:80:52:6d:4d:31:14:69:f2:03:f9:b4:8a:3c:1e:cd:75:6d:
3e:31:e2:ce:d2:18:f5:29:61:a5:79:5c:45:ec:13:7c:2c:22:
e0:c3:0d:80:9d:cd:51:4d:dd:04:cd:12:2c:ac:85:7d:2a:30:
ee:de:3d:7a:37:68:fa:c7:05:07:a9:5b:ed:7c:b1:0d:a8:34:
27:dd:fc:32:4d:7e:54:31:79:8a:42:7c:94:97:50:b9:c2:f6:
b3:62:25:3d:19:ef:4c:0d:02:02:8b:fe:f8:b0:d6:30:aa:90:
b7:3e:52:5d:f8:f3:08:8a:c1:fa:9d:f5:71:e7:46:1a:34:07:
bc:41:f1:3e:07:58:9e:c8:12:0d:90:e8:73:5d:2c:8a:b1:e4:
17:ea:c3:d8:7c:76:ae:27:96:c0:59:86:14:f4:47:11:59:05:
d4:94:03:e1:03:8f:ef:9d:ca:60:b7:03:08:98:d2:e5:de:40:
b3:b3:48:41:a6:f9:48:24:4d:4e:ab:6c:54:a9:58:5d:cf:fb:
23:24:de:01:b9:7e:c2:01:70:56:37:e8:03:ff:01:f3:a9:ba:
ad:5d:74:f3:31:09:af:44:f9:4b:4d:e6:1f:d2:79:e3:46:16:
a5:eb:79:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:41 2025 by rpki-client