Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
File: oInbclD9hHbImK7gpfvyqYg0Af4.mft (raw, json)
Hash identifier: oZ+DVKOmdkL/Rjc+vn4vzhysYuoWuye6XTdjAd4JGbA=
Subject key identifier: BC:D5:06:9E:70:A2:51:13:BC:BC:DC:77:F1:57:4F:15:D3:67:52:50
Authority key identifier: A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
Certificate issuer: /CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Certificate serial: 0194BBCDB18A510E524A24406647A45144C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: PRBRLMqw-2-Iz8UAT3zfg4Sw6lo.roa (hash: GVRCRwJe0CJRmQR55/f83gphK42VF5Ywz7text0ZVtk=)
2: oInbclD9hHbImK7gpfvyqYg0Af4.crl (hash: ww89qgK3TRIwY6zpar6bUHvlMvTFmX0Bf9Pv5zYzecM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b1:8a:51:0e:52:4a:24:40:66:47:a4:51:44:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a089db7250fd8476c898aee0a5fbf2a9883401fe
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=bcd5069e70a25113bcbcdc77f1574f15d3675250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:8f:f1:40:e1:0d:10:15:8f:79:f0:a4:40:
eb:25:88:07:6f:2e:bf:fa:77:7e:4e:79:dd:2c:41:
63:b3:54:f5:fa:f4:01:00:ac:5f:77:0e:77:ea:bf:
32:51:f0:51:83:04:0c:fb:fa:c8:d9:da:27:5e:18:
f2:61:dc:99:ee:32:0e:73:3c:0a:5f:c4:24:11:d9:
7d:2b:44:43:f2:c2:de:09:b4:f3:af:5d:9b:28:6d:
9b:af:f0:2a:cd:17:51:ed:b2:bd:42:4e:58:20:3d:
7c:de:ca:6e:aa:9a:92:e0:9b:8f:e4:a3:83:1d:6e:
b1:47:13:d8:fc:7b:b5:e8:65:2d:15:e7:07:64:e3:
fa:cd:32:a0:4d:e8:63:c7:d7:1f:35:ae:55:0c:32:
bc:76:e3:eb:eb:9b:c6:77:00:a6:25:31:45:9d:59:
d7:82:c5:73:42:aa:a3:a5:f0:96:97:2c:ce:fb:bd:
3c:88:b0:84:5c:26:d7:2b:d2:d6:74:c2:e1:f9:dd:
cb:4c:2e:19:3e:b7:03:96:e0:c5:fb:ef:6b:08:33:
3d:8e:2d:99:02:0d:69:56:b4:00:4f:35:e8:05:28:
35:25:85:61:53:cf:5e:5c:f9:46:56:e8:be:76:6a:
ae:3a:d1:67:95:7c:89:bd:df:a8:37:59:d0:68:f2:
cf:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D5:06:9E:70:A2:51:13:BC:BC:DC:77:F1:57:4F:15:D3:67:52:50
X509v3 Authority Key Identifier:
keyid:A0:89:DB:72:50:FD:84:76:C8:98:AE:E0:A5:FB:F2:A9:88:34:01:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oInbclD9hHbImK7gpfvyqYg0Af4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2a8832-cdd6-4d8c-93f3-d825d0365789/1/oInbclD9hHbImK7gpfvyqYg0Af4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:d2:17:83:77:e5:81:3e:76:b3:18:3b:47:39:4e:c9:30:57:
b0:bc:cf:9f:d0:2c:4b:ec:77:17:f9:fc:83:5d:5c:76:42:40:
d1:8f:da:e7:73:f0:40:fe:43:57:fc:6d:73:34:f6:15:5a:8e:
e6:62:73:87:4e:83:76:ef:ac:bd:ae:c0:b5:78:40:e4:bc:79:
f2:da:dc:fb:fe:88:6e:09:cd:01:65:20:0d:1b:a8:b7:05:d9:
39:fe:96:52:5d:e4:5b:83:08:5c:7b:c8:c7:a0:2f:92:dd:5d:
4e:73:f3:90:74:a0:20:68:6c:a8:4c:35:22:38:65:80:a6:c7:
74:13:ea:42:cc:15:b1:b4:eb:65:43:b3:b9:42:82:ea:ce:f1:
32:a7:59:72:86:ad:02:e9:55:e5:ab:00:ed:71:15:97:a8:a0:
58:a2:a1:04:a9:64:ee:32:59:4b:d4:a7:74:a5:c9:3c:e4:e7:
c8:4b:ca:27:6a:e9:aa:dc:bb:3e:d6:a2:12:75:a2:ee:20:b2:
bd:25:42:ce:bc:3f:b4:91:99:34:5b:28:ff:13:54:72:9d:c5:
41:89:55:69:12:b4:f0:5b:cf:c8:f1:1b:de:e8:aa:e7:ef:ab:
2f:89:88:29:df:6a:ec:2f:23:10:cc:5d:c4:c0:f1:b2:20:6c:
b8:47:30:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:51:56 2025 by rpki-client