Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
File: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft (raw, json)
Hash identifier: +19QLHTGraoCFd0kPLYOiDNEstglxsRjtZBSgO4OOrE=
Subject key identifier: 0D:90:A6:7C:2E:62:30:38:B1:5E:C7:73:64:A9:6C:51:68:67:A8:A9
Authority key identifier: A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
Certificate issuer: /CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Certificate serial: 0194BC04A3F395E22A2A64AAD67116892D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
Manifest number: 0DFD
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: 00IasE-o8chBNSoJdt3smuycCow.roa (hash: pV/5gFRP1JCOYIjBq4kIT8BYMxCvMc+8eXCSruPkrAc=)
2: lqiA_aAj9YiPmEY_ozKBdTXaK8U.roa (hash: FH++B616VrSvf6jbJ25EtMhVAMv/kHOEkuMZjWfUstA=)
3: o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl (hash: ZFJcy7TuWD+Qs3Ue16q6MTbA4D0xx+FggvnYN0l0n0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a3:f3:95:e2:2a:2a:64:aa:d6:71:16:89:2d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3787d2be6eac36c1d2780f786b87c9e153e81f1
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=0d90a67c2e623038b15ec77364a96c516867a8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:30:87:74:3b:c4:d7:c9:2c:a6:a0:b4:ad:48:
d3:c3:f2:bd:b4:bf:55:42:7f:4c:4f:49:6a:1a:23:
a7:63:e2:8e:a3:7f:29:34:98:62:cd:17:f2:90:c7:
84:7e:bf:8b:3e:ac:56:d3:e7:3d:db:48:cb:d6:d8:
2a:8a:c8:ac:02:b7:6f:9a:57:cc:70:b0:1e:20:09:
5c:2a:05:3c:1f:47:a6:86:0c:76:3b:ef:05:69:da:
80:55:4a:7a:c9:b9:a4:0f:5e:54:66:c2:be:86:2b:
6b:67:40:af:89:c2:94:9b:42:2f:ee:f3:7a:2d:74:
03:18:ad:c6:7e:73:05:2c:37:3a:00:3f:f1:99:f3:
ff:9a:e7:0f:1f:63:80:a0:ff:14:3f:4b:53:ad:01:
a3:f6:89:ab:ad:6c:7c:3f:c3:97:26:b1:cd:9a:63:
86:e6:89:7a:5a:10:b4:35:4a:a0:28:ae:7c:86:4c:
1f:7f:05:36:64:0a:c0:5a:41:a2:2a:62:84:32:f5:
86:5f:5a:96:c1:ff:3a:f5:31:bd:a5:6b:64:0a:d1:
51:6e:47:54:14:6e:04:3f:eb:3d:89:75:05:e6:18:
86:f5:1d:80:ee:c7:38:a8:90:78:55:9a:d9:fc:5e:
20:ef:b6:97:ac:b1:bf:1b:9b:ae:62:18:92:77:9e:
b4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:90:A6:7C:2E:62:30:38:B1:5E:C7:73:64:A9:6C:51:68:67:A8:A9
X509v3 Authority Key Identifier:
keyid:A3:78:7D:2B:E6:EA:C3:6C:1D:27:80:F7:86:B8:7C:9E:15:3E:81:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/f565d7-32af-4be1-82ac-b602cedac36c/1/o3h9K-bqw2wdJ4D3hrh8nhU-gfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:6a:3a:4a:6b:e6:f7:8b:92:5a:8a:64:4a:b0:82:8a:6e:88:
b1:9b:2d:fd:12:1c:c4:f6:5d:76:54:45:b3:96:23:77:68:66:
c1:84:e1:bd:7c:af:90:03:0e:a1:20:70:ed:7d:9b:a5:eb:15:
2a:50:53:67:b9:35:28:fd:6f:be:2f:9b:80:4b:1c:cb:33:2f:
e7:be:64:ec:12:b0:3e:31:a4:c8:71:9d:71:b1:bf:ef:e3:ff:
a8:e6:90:a9:7c:4f:b8:5e:62:5a:71:56:47:26:bd:86:6e:55:
1b:e0:d5:34:2e:12:dc:f5:fb:b3:21:1f:59:5e:bd:da:cb:0e:
74:00:83:4f:38:9f:cf:75:9d:6c:d1:39:ec:20:67:4d:45:e4:
3f:f1:3c:55:13:3e:7e:26:6f:e7:12:73:d3:aa:12:78:49:dc:
b2:88:23:0c:29:13:23:af:e7:2d:3a:73:9e:69:41:01:8b:4d:
4e:9e:71:51:b7:6a:3a:65:81:25:62:41:c0:05:54:14:f6:13:
5a:6f:14:96:f3:f1:df:fc:be:28:98:ba:fa:4a:35:82:02:07:
49:65:58:3c:da:8a:fa:09:f2:91:19:95:92:16:ed:99:94:64:
c0:fc:1a:61:9e:8f:77:cf:51:f1:f1:cd:55:64:df:9d:7c:6f:
b8:5a:27:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:07:29 2025 by rpki-client