Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
File: pOeg0vxXpnuyt-hcPo14GSvKDxg.mft (raw, json)
Hash identifier: 5P0NsDQo+Sfki64BrvA29GN1xWJeDFtKScjeHy3m3H0=
Subject key identifier: 75:26:E7:1C:F5:8E:C8:20:4B:DF:3F:E3:42:17:5E:81:A8:28:34:17
Authority key identifier: A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
Certificate issuer: /CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Certificate serial: 0194BC3BF9A79924DBE7560686EC0E37B911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
Manifest number: 08AA
Signing time: Fri 31 Jan 2025 12:00:34 +0000
Manifest this update: Fri 31 Jan 2025 12:00:34 +0000
Manifest next update: Sat 01 Feb 2025 12:00:34 +0000
Files and hashes: 1: AdJqJvlWVSQ_2sjUlxPnhKVvXgE.roa (hash: rvwXexvACQ2KWhkVUmfkFIN6qH1hFBVmtLOZa/tj5cA=)
2: pOeg0vxXpnuyt-hcPo14GSvKDxg.crl (hash: Bmh7+3Wp6xX4nAcA+4U0OOu/tFHtqOZDaz/lH07ArDU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f9:a7:99:24:db:e7:56:06:86:ec:0e:37:b9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7a0d2fc57a67bb2b7e85c3e8d78192bca0f18
Validity
Not Before: Jan 31 12:00:34 2025 GMT
Not After : Feb 1 12:00:34 2025 GMT
Subject: CN=7526e71cf58ec8204bdf3fe342175e81a8283417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ee:70:15:37:4a:07:19:77:c6:37:ee:e5:88:
f0:46:18:96:ad:b4:60:e4:7c:b2:73:18:c9:0d:c6:
6c:3b:d0:5b:ec:f7:b1:93:d1:22:38:57:08:bc:41:
8f:a7:4a:fb:80:f5:8d:08:f7:43:80:53:e5:38:ed:
ee:d2:41:fc:e5:bb:73:4e:41:4c:af:0c:61:dd:d1:
8e:60:58:fe:1d:f3:72:02:d0:4a:29:2a:c5:f0:06:
77:01:a5:55:43:6c:ae:2e:49:78:9c:9f:f4:b5:f5:
a0:9a:43:88:af:e6:2f:85:c0:a8:ab:eb:39:3c:88:
71:17:3b:5a:5a:6f:2e:cb:1d:37:c6:52:a2:6c:e2:
7b:3d:ef:8b:e1:c5:56:b6:34:9c:8f:9c:ab:24:1f:
6f:86:b8:16:fa:d3:cc:6e:7e:b8:c8:32:c9:63:fd:
6d:e2:c8:3c:37:91:34:3d:5a:ad:1a:7b:d3:34:6c:
1b:fe:04:6e:a1:3f:c8:b5:9b:a8:2c:87:e0:06:ee:
f6:6e:f5:e9:ec:76:a7:77:20:e8:35:c8:3e:f8:aa:
b6:0c:cc:01:2b:cf:39:d3:8b:e3:d3:98:72:0c:06:
a1:cd:ee:04:8f:2a:21:b4:e5:45:c1:6e:28:2a:46:
19:b8:ea:db:45:62:3c:55:ca:c8:16:20:7d:1f:5e:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:26:E7:1C:F5:8E:C8:20:4B:DF:3F:E3:42:17:5E:81:A8:28:34:17
X509v3 Authority Key Identifier:
keyid:A4:E7:A0:D2:FC:57:A6:7B:B2:B7:E8:5C:3E:8D:78:19:2B:CA:0F:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeg0vxXpnuyt-hcPo14GSvKDxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/96c272-f746-4628-95bc-a6126b54094d/1/pOeg0vxXpnuyt-hcPo14GSvKDxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:09:01:be:63:72:3f:8d:b3:d3:6b:00:59:09:88:00:3e:26:
f9:36:55:09:63:33:68:4d:7d:6c:c2:09:fd:41:fa:4b:a4:01:
b7:0b:84:c7:97:e4:95:42:ca:48:40:d1:05:61:c8:d3:3b:c6:
f8:62:24:ae:25:7c:60:72:20:4d:42:f4:ed:49:90:85:91:b3:
28:4c:fa:88:0b:c4:2f:c3:f5:a4:d3:9b:04:23:a4:1f:1a:a1:
c6:cb:78:dc:61:4c:0c:72:da:b9:ae:9c:8f:d1:95:04:dd:93:
12:2d:fa:23:3b:ad:51:e9:e8:36:b5:6a:78:24:f2:43:8f:85:
79:8f:5b:60:64:a9:58:59:dc:3c:18:b9:fb:4e:f1:2c:0f:91:
eb:0e:85:55:a3:7f:c0:ee:69:bb:c0:1e:9a:c9:03:2e:d5:01:
7f:9a:01:13:be:fa:23:55:f0:d6:18:dc:d6:df:7c:27:c0:a9:
65:b6:27:30:7b:5b:bc:1c:2f:48:40:e9:d3:2b:b4:0a:4b:58:
fc:06:1a:e8:01:ec:0c:c0:41:19:3e:63:2f:75:05:24:b7:b5:
99:05:ac:7a:c3:11:ba:7e:c9:1d:39:69:89:2e:9e:b2:48:b8:
1e:94:0e:a2:6b:43:91:23:45:c9:15:87:f9:0d:09:b8:b0:82:
68:38:db:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:24:39 2025 by rpki-client