Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
File: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft (raw, json)
Hash identifier: 8u/GC/7FnSWJT64v/iQZuceITSQ7wfO7Bfc2544Uz2c=
Subject key identifier: 94:9B:66:7C:3D:84:F6:9D:77:0B:10:CA:CE:9E:C3:0D:F7:40:5F:09
Authority key identifier: A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
Certificate issuer: /CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Certificate serial: 0194BD8594D0E34350EE1E0AA5CCB89F01EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
Manifest number: 05FE
Signing time: Fri 31 Jan 2025 18:00:35 +0000
Manifest this update: Fri 31 Jan 2025 18:00:35 +0000
Manifest next update: Sat 01 Feb 2025 18:00:35 +0000
Files and hashes: 1: oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl (hash: eIrfBwclfwWfKPYs8Er3U/dyG8239KMEea67ph4gKv4=)
2: swurPPgvx5Mw_k7aI45OkF86THI.roa (hash: dit/va7s8wsuU7O85dlDJKzD74oG/IiETxDpxdGILWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:94:d0:e3:43:50:ee:1e:0a:a5:cc:b8:9f:01:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22e61b1ddc81dc4f338a689febd8dfddb44bf44
Validity
Not Before: Jan 31 18:00:35 2025 GMT
Not After : Feb 1 18:00:35 2025 GMT
Subject: CN=949b667c3d84f69d770b10cace9ec30df7405f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:24:9a:d4:9a:9a:37:64:c9:35:b3:51:bf:f6:
7e:9c:e1:f3:1d:0e:be:08:fb:6c:3e:b7:60:42:59:
0b:42:eb:50:e9:17:1b:7a:dd:d7:ff:e0:f3:48:d3:
dc:ef:cd:7a:74:e5:71:fc:76:04:1c:74:95:df:72:
02:4f:e9:4c:4c:5d:a9:9a:02:56:87:c5:94:88:c1:
4b:2e:f9:95:80:2f:bb:f2:fa:4c:7a:7e:3c:6c:dc:
05:15:fd:48:53:bc:e1:8f:cf:4c:25:50:ff:fa:0a:
ad:23:bd:69:40:14:ac:26:c0:a5:d2:70:d7:f5:73:
59:8d:d0:21:9d:e0:c0:6a:13:19:14:3b:8f:55:18:
98:ae:70:5f:b1:56:19:32:85:14:92:96:d3:58:82:
83:d5:6c:fe:5e:ef:2b:d8:7c:8c:b2:d9:ee:b1:d1:
1a:a4:93:e5:9c:35:9c:7e:96:1a:0d:64:22:ad:2f:
d0:d0:06:47:41:85:d3:e5:b8:cd:b5:94:50:32:75:
9f:82:ed:87:7a:1a:54:3e:5e:72:f0:26:e3:03:b3:
32:2a:b3:55:bf:aa:f5:1c:74:49:91:e5:41:16:b7:
6b:37:19:65:e0:39:5b:73:7a:7a:80:ed:37:30:d3:
83:60:f6:f0:94:d4:e0:23:60:d7:5f:c6:f2:68:42:
fa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9B:66:7C:3D:84:F6:9D:77:0B:10:CA:CE:9E:C3:0D:F7:40:5F:09
X509v3 Authority Key Identifier:
keyid:A2:2E:61:B1:DD:C8:1D:C4:F3:38:A6:89:FE:BD:8D:FD:DB:44:BF:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d93edd-a807-45a5-8719-7baba2973746/1/oi5hsd3IHcTzOKaJ_r2N_dtEv0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:91:fd:86:84:b6:9d:15:07:a3:be:33:77:5a:18:1b:ae:c1:
55:e0:0c:ce:8e:15:11:aa:7b:47:66:71:6b:99:a8:b0:f6:c4:
78:f8:b0:f7:9a:26:ff:11:85:41:c4:08:b2:88:4f:7b:68:98:
7e:e8:12:a4:f0:f5:cc:74:1e:60:30:d1:3d:45:12:1e:3a:ab:
55:2a:cc:06:bd:e4:3e:5e:0c:ed:94:72:4e:08:a6:a8:3e:87:
7e:20:da:90:3a:c7:be:f6:8e:62:d2:75:66:7f:35:6c:23:af:
d1:7b:dc:72:fc:5f:ae:69:f8:d1:a8:77:f4:1f:a1:f5:f5:96:
db:d6:58:58:84:89:b1:0b:97:59:b7:be:a9:d6:e7:60:21:81:
d5:88:be:7b:07:8d:d9:35:07:91:a6:93:71:31:a9:0e:c1:05:
72:cc:8b:24:92:43:70:52:bc:a8:17:75:04:fb:75:f4:bf:3f:
d3:ae:41:9a:e1:6e:45:c9:62:11:d6:f6:6e:3d:b8:83:d9:85:
0f:fa:30:e9:74:af:bf:50:30:d5:c7:22:f4:71:88:81:b5:64:
61:ba:1b:c8:b9:cf:f4:d0:7a:c9:a5:8f:fc:87:d7:e8:0f:94:
46:75:39:a9:cf:30:9e:16:ec:e6:28:b0:c9:a7:3e:d2:d0:be:
9b:9a:0d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:36 2025 by rpki-client