Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
File: r_oT8a4FORYoDsaO4bCXb569Pqg.mft (raw, json)
Hash identifier: LRIyQQpCHHOYKaP+bYO7a7xmmHyYzRPI3sSmUd6L6eQ=
Subject key identifier: 05:A3:A1:48:8C:75:01:D2:39:A1:1B:65:AF:6B:EA:C8:8D:D5:92:C5
Authority key identifier: AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
Certificate issuer: /CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Certificate serial: 0194BCE0E31A2B01137AB2F8196B0CF28229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
Manifest number: 1300
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: 7BUAS9lNIJKrmgyqitmt4vjUchs.roa (hash: ZW63wkZvkBfaNmwpw8bvuYCpTs0W+QW7Uv70+dpsljM=)
2: 7DO8E30RGY4vAe7tIWHKTeq95P8.roa (hash: wO6AvUEPcj/+yaf4lye0oLqn75BJbLzeCB1mL+qhuus=)
3: F_q5_Z07qZI9DXW4KcpMFI_8MOY.roa (hash: UA+1oifvamJJirFIBnTAGXQVq0QT81TJRyTJ7BTxetg=)
4: HLeQFxpSAwO5N1pZKMX56Q-hB1w.roa (hash: +EuA9d7+91Ny4e4gzqH16NmmQUk9ZPnn92MghDjKpE8=)
5: QHGx9rBcGUaJTuZl4OFvkzmjZVA.roa (hash: ZZjwJdlY+j59oAR5+dW/8zpKf4al08hvm5qlRq5DDsA=)
6: iL0fpiq0g7Tpl8O9Cr71bc0UOYU.roa (hash: +0HQwj7rpV4acr+qdH/U1EOSgBMGpBNUkpCPoAIrOlE=)
7: r_oT8a4FORYoDsaO4bCXb569Pqg.crl (hash: mJimHlFmTuYMxn0OllDPaNxrnAEXdlbsRgH6nBLgYhM=)
8: xJMh3j3GpShYCJoYtsAE4dqx3WU.roa (hash: k38ffw08ruTV3gYvZegSeTLOSKho9qw6Tw7LEO7WSjk=)
9: xmfrzoBs6Rhbg64vPzeCbbD4I6U.roa (hash: X1lH5bbTPug3DKbEg/bKjT6QG10Inw9lELIZLmoF2Qg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e3:1a:2b:01:13:7a:b2:f8:19:6b:0c:f2:82:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=affa13f1ae053916280ec68ee1b0976f9ebd3ea8
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=05a3a1488c7501d239a11b65af6beac88dd592c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7a:a8:51:f5:c5:65:70:68:46:a8:58:87:39:
7d:be:c6:ac:2d:31:7d:a4:09:d9:67:f2:82:b9:93:
64:2b:62:4a:10:30:82:bf:26:fb:9a:21:0e:e3:ab:
d7:3a:66:98:26:e4:97:0e:a5:4f:b2:38:84:26:8e:
a5:6d:0d:8e:42:c7:80:2e:70:58:9b:2e:b1:a4:58:
d9:a1:5e:6e:a6:2f:f7:2f:b6:53:f7:4e:bf:e9:ab:
d6:66:0e:63:75:60:91:6e:39:53:d5:00:bd:d9:65:
95:d9:0f:fd:14:be:5c:f3:47:a7:b9:75:1c:9a:76:
e8:25:99:fb:89:2b:91:52:a7:75:81:44:af:3f:d8:
b5:97:ae:62:1f:c7:c5:fd:7e:0f:a0:37:b0:91:66:
22:bf:b4:11:68:22:cb:12:88:27:60:62:2e:2f:6b:
d3:3f:9c:cc:94:70:62:e1:99:7f:24:31:c3:8d:a5:
36:0e:48:7b:87:28:56:c9:4a:b4:92:29:df:ea:c8:
f7:8f:fc:39:25:5b:6d:d9:5b:c0:eb:31:e1:f2:f7:
53:38:e7:85:c3:f2:37:ff:f5:25:2e:18:f4:53:6d:
72:66:cc:1b:b5:70:54:46:4d:e3:2d:79:2a:6f:8f:
fe:6d:65:40:bf:42:c1:6f:09:cf:e8:a8:98:4a:02:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A3:A1:48:8C:75:01:D2:39:A1:1B:65:AF:6B:EA:C8:8D:D5:92:C5
X509v3 Authority Key Identifier:
keyid:AF:FA:13:F1:AE:05:39:16:28:0E:C6:8E:E1:B0:97:6F:9E:BD:3E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_oT8a4FORYoDsaO4bCXb569Pqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/a3c0a4-3191-4e51-8d80-478c2c8cb2a0/1/r_oT8a4FORYoDsaO4bCXb569Pqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a1:62:f8:06:63:f4:79:34:00:44:f7:10:2e:0f:10:91:7a:
f4:96:fd:50:71:f1:02:aa:82:c0:e3:a4:71:74:38:f0:df:21:
96:61:e0:7b:92:c6:fd:c9:d8:dc:56:73:ca:31:b8:95:47:f1:
06:67:e5:07:dd:96:a6:a6:83:8c:61:49:87:d8:6a:4d:5b:dd:
6a:de:fd:13:d4:4c:6c:0c:40:4a:c2:ff:f5:d6:1b:8a:c8:7a:
80:8a:7c:9c:5b:a1:49:cc:6e:f7:09:ec:2c:16:4c:c8:3d:09:
9c:af:f8:76:aa:5e:1c:3e:ac:4b:db:d6:37:d5:2a:26:5a:3c:
f4:39:51:ac:c7:36:64:79:82:e3:ce:e4:88:6e:03:7b:70:e0:
b5:0f:1d:22:26:77:d7:25:a7:8f:09:17:99:bb:15:43:af:bb:
23:55:c7:a2:55:07:f6:a0:1b:93:33:0b:af:94:22:cd:1a:6b:
49:61:23:7c:02:ea:bb:fa:d0:53:6d:bb:5a:db:1e:38:87:93:
50:ef:ea:2a:6e:e4:48:74:bc:71:5b:9f:df:0f:05:68:9c:65:
8f:3b:c4:c7:30:00:32:6e:97:8a:ce:69:ae:8a:41:c1:96:b5:
ac:f6:e4:e8:99:13:ea:28:c4:8e:41:86:88:fd:81:6d:e7:47:
cc:00:46:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:11 2025 by rpki-client