Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
File: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft (raw, json)
Hash identifier: sn/ejjOJ9ZX3Eg/mQqX5SyyH4rTabe2ONxJVMmDT+iQ=
Subject key identifier: CE:ED:17:F2:1C:EA:9D:F1:52:ED:91:CC:8F:A3:20:E6:53:0B:4C:7A
Authority key identifier: A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
Certificate issuer: /CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Certificate serial: 0194BBCDB63742BF12294D4931753A002B19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
Manifest number: 0983
Signing time: Fri 31 Jan 2025 10:00:08 +0000
Manifest this update: Fri 31 Jan 2025 10:00:08 +0000
Manifest next update: Sat 01 Feb 2025 10:00:08 +0000
Files and hashes: 1: ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl (hash: PwTzOnIhvRKwKOjQ+kD/ddCeIqwRkOoTFKepbtNQVv8=)
2: qIsWYTGGyTWdcMi1EBNZy3-Gz6s.roa (hash: 7m+uP5vyUA/FJoMPvZCOt04fNaOUpHbFnR+UKfmp0FA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b6:37:42:bf:12:29:4d:49:31:75:3a:00:2b:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f516bf42214086db39847f9f563b4cf4a0ff43
Validity
Not Before: Jan 31 10:00:08 2025 GMT
Not After : Feb 1 10:00:08 2025 GMT
Subject: CN=ceed17f21cea9df152ed91cc8fa320e6530b4c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:67:ff:29:4f:8a:94:9d:f9:b9:b7:ce:37:6a:
5a:ac:3a:36:9b:06:5b:cf:f8:e8:98:9c:ec:70:c2:
87:fd:7c:b2:27:18:ee:a2:39:2b:d1:a8:fa:22:43:
81:54:af:8d:d2:50:75:c3:d3:b5:e8:3f:8a:39:f2:
41:fc:8f:ac:a1:95:d9:48:4a:85:22:ff:22:f4:8d:
ed:a9:ba:b7:eb:e4:87:8d:7f:6d:69:22:9c:22:7e:
c7:4d:61:b6:d0:75:27:d8:82:42:00:38:db:bd:10:
ac:19:e7:bd:ce:c8:00:e4:08:c4:3a:fc:50:71:bf:
22:bf:6c:f6:0c:9b:62:e9:d7:00:67:92:ea:cf:e2:
50:ce:5c:50:8d:92:b1:e8:0d:20:55:96:32:9d:73:
60:99:b1:9d:01:d3:cb:1d:6b:db:9f:d9:7f:d6:cc:
da:97:47:a9:84:75:53:03:bd:d9:7f:6f:85:78:65:
22:40:69:cc:87:db:a8:6e:f5:f7:74:2c:2d:07:b8:
bb:17:af:87:e7:c1:0b:c2:19:c4:fd:21:4e:c3:35:
a4:46:79:df:a8:fb:1d:0b:17:48:24:b1:b8:18:07:
50:b1:b2:75:b6:72:09:b7:f8:4f:9a:4b:96:8c:4f:
07:ca:76:dc:49:2a:27:36:af:d5:3b:54:29:6f:ad:
52:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:ED:17:F2:1C:EA:9D:F1:52:ED:91:CC:8F:A3:20:E6:53:0B:4C:7A
X509v3 Authority Key Identifier:
keyid:A2:F5:16:BF:42:21:40:86:DB:39:84:7F:9F:56:3B:4C:F4:A0:FF:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d1dfd6-ccdf-4621-b454-6e3fa62cd2df/1/ovUWv0IhQIbbOYR_n1Y7TPSg_0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:42:77:ee:7e:67:3b:24:42:00:3a:9f:85:b7:c6:85:94:7f:
04:75:c6:6a:da:b9:cc:ae:d3:05:b4:cc:fd:c0:5d:02:e1:c8:
9e:a0:30:d0:77:4d:9a:29:93:46:40:e0:ba:62:ef:8a:02:33:
0d:5b:50:c6:3a:9c:67:bb:2d:06:90:90:0b:e7:8d:e7:b1:98:
1b:68:40:57:fe:b8:85:fd:e2:45:6d:ff:d3:cb:ce:34:1e:89:
8c:a4:56:8c:bc:70:46:14:4b:57:fd:6f:ea:f7:e6:5a:1b:26:
5c:03:ac:4e:45:ab:da:eb:db:0d:d2:1c:87:c2:29:3f:91:79:
8b:4f:44:e2:14:a3:a3:59:e5:6b:1b:6d:45:6b:0e:c2:16:fc:
07:7f:93:78:1d:be:a3:50:25:50:6b:38:05:73:df:5c:f4:18:
67:67:59:e5:8a:07:2c:51:e5:4d:65:98:31:d6:46:61:90:bd:
43:d4:ef:dc:3d:45:5b:91:07:39:f8:ed:39:7b:52:58:42:95:
5f:d5:bf:db:fd:b9:28:4b:7b:29:25:aa:af:6f:8d:5c:b0:91:
8d:19:80:50:83:46:ff:64:c5:17:f9:b3:26:d0:01:da:30:3e:
69:80:37:5f:5b:a2:56:6d:85:9c:ac:52:9e:35:8b:05:b3:56:
a2:fb:98:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:19:48 2025 by rpki-client