Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
File: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft (raw, json)
Hash identifier: NtT1pFLhYfFXEoYP1NptT8kDBQv5kdlJMmXgHv5lkPo=
Subject key identifier: 3B:1E:9E:7B:93:08:94:59:D5:91:9B:0B:40:0B:EC:21:AE:0B:17:73
Authority key identifier: A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
Certificate issuer: /CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Certificate serial: 0194BBCDDB3D28E304FE5B8DCE0ACC69C64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: VpVmsYSCQdNXwRHKQt0NXlzsSG0.roa (hash: E6B6Bl1mDcetd5EsaNvc0boHcTeWIhqXRqGoFPj9kUc=)
2: oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl (hash: f61snPx7yRUtrfEtMSuyQIIOHhn2NGPAYDDwpkoE63I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:db:3d:28:e3:04:fe:5b:8d:ce:0a:cc:69:c6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f27d4f067614bcbc270346fa0d44b15f805163
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=3b1e9e7b93089459d5919b0b400bec21ae0b1773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b7:a0:9d:b4:b1:ac:1c:ff:4f:ba:68:ea:03:
4a:c3:9d:ea:b3:9d:5c:39:04:4e:d5:4e:82:5c:32:
11:d2:fe:43:6f:93:41:b2:03:be:9a:e7:0e:14:70:
71:9a:96:34:06:f6:22:b9:48:7e:df:89:3e:5c:aa:
3e:4e:22:04:e8:1e:f7:81:21:7a:40:31:75:8f:36:
43:af:10:56:5d:50:b3:32:28:28:1b:f1:35:f3:84:
f9:e4:40:ed:bf:d9:36:7d:a0:0f:99:8d:dd:aa:dd:
34:9a:2f:83:6a:70:2c:dc:42:08:78:1e:ab:14:46:
86:2f:5a:9a:e3:3f:cb:35:0b:89:cd:96:4a:3f:87:
31:3d:ba:ce:2e:8a:ad:28:3e:71:32:9b:d5:3c:53:
ce:61:b4:54:8c:5e:05:bc:bf:7c:51:98:c7:bf:8a:
16:5e:8b:87:21:6a:ba:46:c8:e5:4a:1f:bb:88:45:
76:34:6d:54:0d:6a:39:99:58:7d:26:41:f0:0b:bf:
ec:22:ef:3a:94:40:3b:00:78:1f:9e:9b:1c:c3:e6:
c4:4e:49:c8:25:b2:3d:2b:b4:7a:3e:db:1f:3f:f2:
94:0e:29:c5:93:e4:f8:e9:31:7e:67:5d:0b:07:de:
d1:fe:73:5e:18:12:51:02:9b:b1:79:cb:c7:b2:2f:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1E:9E:7B:93:08:94:59:D5:91:9B:0B:40:0B:EC:21:AE:0B:17:73
X509v3 Authority Key Identifier:
keyid:A0:F2:7D:4F:06:76:14:BC:BC:27:03:46:FA:0D:44:B1:5F:80:51:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f732a0-dc62-4326-85e2-936598e00cfe/1/oPJ9TwZ2FLy8JwNG-g1EsV-AUWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8b:43:cd:e6:9b:77:16:ad:f5:57:ce:43:27:54:3b:7d:ae:
a8:72:33:87:89:98:f2:30:c5:9c:56:c3:66:e9:53:ed:55:22:
92:c5:7e:d0:20:4b:61:ab:38:97:6b:57:36:f5:f7:1d:76:23:
e4:14:4e:4a:12:94:c2:cf:07:06:93:dd:10:1d:94:20:99:05:
85:dd:49:a3:c1:58:b1:b5:5c:9a:70:1f:5c:21:5d:38:74:62:
24:f2:97:d4:9c:4d:d5:54:f4:fa:91:46:69:cc:04:4f:8c:5f:
a7:14:1b:46:3e:56:7e:6d:7a:b7:82:d3:b9:e4:c7:d3:4a:9e:
78:02:4f:54:5e:c4:8b:03:65:32:d8:6f:55:23:df:d3:15:97:
73:49:76:a1:ab:12:b0:cb:72:56:50:04:c1:dc:6a:b8:68:ba:
78:2f:2a:f5:08:c6:4c:3d:03:6c:c3:5b:21:fd:7a:b2:90:f5:
e6:f6:12:e0:11:4c:2f:a7:1e:0f:30:26:bb:d6:8b:7c:6c:6b:
cd:7c:13:55:8f:b0:34:ac:98:d1:4a:90:f6:fd:29:7d:e8:06:
15:0a:ef:d4:bb:ff:22:e2:7d:c8:fa:e3:45:95:e5:3b:3c:27:
9f:ea:07:06:3d:ba:c3:b4:c2:39:6a:12:2f:10:e3:2f:23:7f:
66:69:fa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:12:03 2025 by rpki-client