Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
File: oetgspJSzhhaQWNqJHtMAnPTdK4.mft (raw, json)
Hash identifier: acARaMxn8KK+kHSaQVLDZ12yG8/YOTQ0pDrxqAv+b6Y=
Subject key identifier: 11:35:08:2A:21:DB:53:19:8E:09:F2:71:A7:08:68:C5:C0:0B:F9:27
Authority key identifier: A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
Certificate issuer: /CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Certificate serial: 0194BC04CDDF2A39DEBEE1C354BFF990C49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
Manifest number: 0502
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: 22l5n06bYUaSPuk04ilGSf6iBbQ.roa (hash: pO0MBn0s4vmy63q8CyWFXxA4ngNjwwnhcmcIV/rJqEU=)
2: oetgspJSzhhaQWNqJHtMAnPTdK4.crl (hash: Qawrc6UsHGfwKE3rZYUl8W3ENzQO9lrSRADKhWlStEg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:cd:df:2a:39:de:be:e1:c3:54:bf:f9:90:c4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1eb60b29252ce185a41636a247b4c0273d374ae
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=1135082a21db53198e09f271a70868c5c00bf927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:1f:b6:54:80:44:da:84:a7:3b:73:56:88:
41:24:4c:57:04:b6:b2:76:c7:59:28:19:e2:17:9c:
d9:a3:ae:52:71:3d:f6:e8:9c:5c:69:7d:cf:16:47:
a7:a8:df:61:c9:25:b6:2c:a9:5e:5c:43:57:66:20:
37:90:25:5b:9a:2c:80:07:87:3b:28:1a:2a:85:91:
18:5b:e9:15:a5:f8:89:c7:d4:26:d9:ce:39:87:26:
06:93:b0:d3:7d:1f:9d:89:e4:0e:e0:f5:7f:66:27:
0f:fa:49:c0:e3:4b:57:fb:1c:cc:cb:ac:9c:d3:0d:
ec:dc:95:e5:73:73:02:50:65:4c:90:0c:93:98:98:
34:cf:7b:6e:f5:f0:25:76:cf:c8:13:89:da:75:5a:
64:fa:23:2a:e5:18:3a:57:4f:0a:33:6f:11:32:a0:
90:e7:29:4c:d3:f6:e2:4b:bc:40:1e:f9:80:d6:18:
8c:69:dc:29:4a:be:2a:50:f0:8b:5b:83:72:58:f7:
a0:ea:ef:f4:da:fb:28:85:68:97:2b:00:d4:c4:36:
3f:81:50:47:f0:73:91:ed:9e:e6:5d:2c:8b:30:dc:
b9:64:de:d4:39:89:b8:a7:31:df:27:a9:b0:74:10:
f7:d8:fd:54:6f:24:32:fd:b3:c8:68:e7:38:0b:0b:
cd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:35:08:2A:21:DB:53:19:8E:09:F2:71:A7:08:68:C5:C0:0B:F9:27
X509v3 Authority Key Identifier:
keyid:A1:EB:60:B2:92:52:CE:18:5A:41:63:6A:24:7B:4C:02:73:D3:74:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oetgspJSzhhaQWNqJHtMAnPTdK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/26b286-d967-4ca6-8f10-d8b0756d82a5/1/oetgspJSzhhaQWNqJHtMAnPTdK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b4:bc:21:ca:bf:7b:f4:f0:69:b0:be:83:f3:99:05:1e:a9:
34:85:3f:41:23:be:8a:81:49:1d:ec:e2:df:c5:e5:be:4c:db:
73:41:4e:e9:2e:6c:9f:b7:87:73:ab:80:d9:47:fe:69:0e:8d:
51:cb:dd:8b:e3:ee:d5:fe:fb:59:5d:bc:33:26:c3:6b:3f:30:
fc:1e:5d:bb:8b:ff:0c:7a:02:c2:ee:03:3b:62:92:e0:20:fa:
e4:4f:19:a9:3d:9c:65:09:89:47:6e:46:a9:d9:87:7d:32:5f:
f1:0f:43:86:df:a9:11:7a:e1:ec:a3:85:59:44:82:9a:c0:e7:
a5:5c:66:d6:5d:2f:62:ff:86:2a:ed:3e:ad:45:ce:bf:e9:25:
1b:20:72:a7:09:3a:d8:64:db:6a:0e:d2:24:15:83:39:17:fb:
b9:12:93:6f:b4:92:b6:ea:7d:4f:ab:89:2a:d7:ad:39:ed:a8:
98:e8:2a:e2:a1:d0:63:1f:0c:cf:71:49:00:54:cf:15:05:80:
7c:ef:82:02:f7:50:e0:ce:2a:38:01:1e:b7:ef:a0:78:34:ce:
ff:8f:89:6b:93:fe:3a:f7:96:b9:bd:6e:0e:89:e3:ba:2b:25:
bf:ee:92:35:0c:c3:d7:96:60:5b:a1:a6:b4:37:31:c6:c3:56:
39:dd:6b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:55 2025 by rpki-client