Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
File: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft (raw, json)
Hash identifier: +A+6LJL7ANuhG/+qTIGc45iVpniyADJQnNgz6tijUFQ=
Subject key identifier: 11:E2:7E:55:0E:B6:01:AB:C6:F9:06:DD:48:38:26:F5:9D:F9:AB:8D
Authority key identifier: A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
Certificate issuer: /CN=a018d68115dc4b730f157906b04426e599b3a8ca
Certificate serial: 0194BC3BC6EC2667E710EACC66250754FFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
Manifest number: 09F3
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: OwUS3NXybv4j2e2fp7XuRCsj9G8.roa (hash: 1wSHkE+/1+8ByWbwo11cGeXiOHBKl5OZ9BEstqVoHFw=)
2: oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl (hash: Wsp9Lvxivu9v6lgzcQ3urpZV4ye0Gm2M3TpYPvkK4Uw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c6:ec:26:67:e7:10:ea:cc:66:25:07:54:ff:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a018d68115dc4b730f157906b04426e599b3a8ca
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=11e27e550eb601abc6f906dd483826f59df9ab8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:52:d1:86:db:76:02:19:54:c8:f3:93:3f:cb:
d1:a4:f6:2b:fd:4a:65:0e:e4:6f:2f:5c:d5:59:f7:
f1:4d:6d:89:fd:05:32:c5:fe:f4:67:df:48:14:d6:
52:8e:e9:a8:9b:bf:f6:c7:f9:79:7b:29:19:4f:7a:
9a:1d:8f:9d:2d:bd:50:ce:f4:51:d0:4a:0c:86:da:
00:bb:77:f9:9f:ba:11:89:ca:6a:90:b4:48:6a:02:
f9:db:c1:b8:bd:2d:f9:b6:a1:43:71:1a:16:2b:98:
e8:30:98:cc:c8:44:38:86:81:e3:fd:58:dc:7b:a9:
8f:42:09:d4:e4:ae:74:d3:05:ed:cd:92:c7:fd:3a:
16:90:f2:92:46:8c:2f:36:19:c9:c3:38:1f:63:99:
88:30:e3:46:c8:8c:49:e0:94:b6:81:db:94:11:5a:
bc:ab:38:a3:b9:d3:c8:cc:cb:0f:a4:a7:a1:65:5a:
93:bc:f9:0d:7a:e2:87:c8:b1:90:84:69:f7:cb:b7:
93:3f:ba:85:89:71:97:0d:97:01:50:5f:82:5f:3c:
63:10:7c:f5:0f:b8:34:40:de:7f:bb:1d:1d:63:6f:
e3:47:35:d8:52:3b:79:f1:92:0a:99:5e:7a:71:9f:
bf:b8:c3:49:d2:0c:b2:79:c7:ab:90:09:eb:1c:5d:
bb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E2:7E:55:0E:B6:01:AB:C6:F9:06:DD:48:38:26:F5:9D:F9:AB:8D
X509v3 Authority Key Identifier:
keyid:A0:18:D6:81:15:DC:4B:73:0F:15:79:06:B0:44:26:E5:99:B3:A8:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/464660-7a6e-49a7-903d-5cbc636bd7e7/1/oBjWgRXcS3MPFXkGsEQm5ZmzqMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:a8:90:0e:8f:e5:d3:41:d7:f6:26:91:52:3b:29:82:66:3d:
02:82:cf:0b:65:79:ef:1a:19:6c:43:07:9a:0a:64:32:04:38:
ae:ae:5f:5b:1c:19:5e:fe:3c:fe:bb:85:02:c5:58:e1:8d:16:
64:d3:7f:8d:a9:c7:20:cc:9f:6f:11:e4:ca:d3:18:ff:1b:ea:
29:29:bd:5e:44:b7:46:cd:d7:3a:2a:87:fd:59:d3:93:94:a6:
40:16:4a:88:6f:61:27:d4:20:93:54:82:14:0b:7f:ba:e6:9f:
eb:12:f7:63:cd:b6:99:e0:9e:09:7f:a3:ff:18:1d:45:ce:13:
a5:ac:03:91:a5:f1:c8:a5:2b:bc:ff:89:23:8a:5f:a0:64:6b:
fc:57:84:51:67:d4:d7:ee:14:26:8c:17:80:44:f9:77:c6:b6:
86:7c:9a:9c:08:37:11:05:1c:9c:36:1b:0e:7a:f4:76:ab:ce:
62:b4:45:3e:ab:7a:a8:64:94:25:05:2e:0d:c3:c8:ff:67:ae:
09:ab:73:cd:cf:e5:a8:a4:fa:e0:d4:75:b1:be:af:83:88:b6:
8d:ee:9b:c6:b9:80:c2:99:8e:53:07:0f:0d:90:9d:58:83:80:
71:6e:0c:7b:3f:13:e5:aa:ba:b8:48:07:08:e8:68:6f:42:f2:
dd:4d:56:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:53:13 2025 by rpki-client