Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
File: olECeb4TjELN72Jxjw9q-srhgZ4.mft (raw, json)
Hash identifier: 6yQ7nRLA6jghfqJMz97OPCvA4m2hkKHgn620JRaPlZ0=
Subject key identifier: 0F:C8:98:E4:61:C2:45:DB:F1:0A:95:9F:43:78:1D:95:E3:40:6B:38
Authority key identifier: A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
Certificate issuer: /CN=a2510279be138c42cdef62718f0f6afacae1819e
Certificate serial: 0194BC0529310B06DE72B423CE10C252D906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 11:00:42 +0000
Manifest this update: Fri 31 Jan 2025 11:00:42 +0000
Manifest next update: Sat 01 Feb 2025 11:00:42 +0000
Files and hashes: 1: olECeb4TjELN72Jxjw9q-srhgZ4.crl (hash: bBs8+OE5J/tcJKmHOeW0yAhxa4Z6D28maZlUgyN3FFI=)
2: qn4mzYCXdFRBnxWyXBeL9NzUGwQ.roa (hash: 5MeTBfSySavyHPFSKNwiy3eNDAshSqCWYE/J6aXln9k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:29:31:0b:06:de:72:b4:23:ce:10:c2:52:d9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2510279be138c42cdef62718f0f6afacae1819e
Validity
Not Before: Jan 31 11:00:42 2025 GMT
Not After : Feb 1 11:00:42 2025 GMT
Subject: CN=0fc898e461c245dbf10a959f43781d95e3406b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:6f:b1:f4:12:fa:77:64:6f:4c:6a:df:fe:
2e:dc:5a:f9:77:1a:3c:6c:5b:05:19:c3:76:10:89:
18:36:21:ba:e9:05:3e:aa:a0:0a:7f:ea:4a:0c:40:
8a:28:db:a0:36:b3:7b:23:6b:e5:8d:f9:3d:35:0b:
5e:e3:88:cc:66:bc:0e:6f:e5:50:31:fc:6e:a5:bc:
31:da:82:96:f1:35:45:74:39:64:5d:9b:27:f0:b2:
6c:11:39:aa:28:dd:e7:ff:8b:2c:c7:83:a3:c7:06:
49:3f:dd:e8:5b:6f:b7:9c:d0:bc:e3:3a:cb:ba:0e:
11:7a:21:b5:35:69:b0:cd:9a:1a:42:99:53:0d:55:
d6:be:5e:71:d5:54:1c:eb:e0:55:6c:2e:6a:68:82:
48:9a:00:b9:5d:26:f5:82:56:1f:b8:70:21:d9:1e:
b1:8e:6b:cd:c7:34:f1:34:f5:3c:3f:17:13:cc:c5:
03:be:9c:58:02:ea:bf:b1:f0:5b:d9:81:a6:3e:2a:
64:ac:9e:ec:e0:e8:aa:e0:16:23:cc:7d:dc:ef:0b:
9e:68:19:50:ef:2c:c8:79:56:47:9f:1c:d1:92:29:
a3:aa:4b:f0:75:25:b9:a5:e2:09:b0:9c:aa:ae:95:
e9:d7:a9:34:ab:94:93:f6:c1:77:71:31:4c:84:c4:
71:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C8:98:E4:61:C2:45:DB:F1:0A:95:9F:43:78:1D:95:E3:40:6B:38
X509v3 Authority Key Identifier:
keyid:A2:51:02:79:BE:13:8C:42:CD:EF:62:71:8F:0F:6A:FA:CA:E1:81:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olECeb4TjELN72Jxjw9q-srhgZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2146ca-e026-402c-a56e-86af52fb4eeb/1/olECeb4TjELN72Jxjw9q-srhgZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:62:8a:ad:d6:cd:ba:f1:45:4c:15:cd:3e:a6:6e:40:76:77:
33:6d:af:99:b0:cc:5d:49:27:b5:15:24:12:d7:96:4b:06:f0:
d4:8c:4f:fc:12:67:e2:73:84:7c:e2:9a:e0:33:45:43:bd:42:
59:36:1a:6a:b2:1d:61:41:32:ef:fd:16:bd:cd:b6:11:9f:1d:
5a:74:f7:01:29:0d:c0:af:37:83:06:74:87:f6:70:c4:09:83:
95:70:7f:42:14:9c:25:bc:d4:d9:d1:a6:8c:0e:24:94:07:43:
64:be:10:ab:02:90:97:88:bc:aa:d9:10:f3:93:ce:b5:d1:06:
ad:67:2e:62:55:7b:c1:a7:ff:56:d6:9a:03:63:a7:1a:93:98:
fd:93:47:c1:de:80:df:bd:71:a6:e4:00:a3:3d:ce:b6:60:08:
60:22:72:62:37:1c:28:90:66:32:cb:81:6e:9f:ef:35:08:6a:
2f:98:75:f9:a7:ce:e7:7c:ec:30:46:71:84:2a:11:38:2f:47:
e1:df:30:8b:33:00:3c:30:55:9b:a2:9e:8a:77:50:81:50:da:
64:a9:52:07:3c:2c:da:af:5f:af:f1:66:70:f2:cb:9d:fe:f2:
42:c8:8a:66:82:28:85:1b:3c:0c:4f:32:ab:50:dc:10:14:a6:
ef:53:5d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:52 2025 by rpki-client