Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
File: 0KpKGno60j-q4q6un6YZTwISgSk.mft (raw, json)
Hash identifier: 285HFA+PSusnaRP6XHv9Eus/1QShxtV+J2tkAFZUbmo=
Subject key identifier: 1A:65:FD:B2:9E:4A:E4:A5:0B:21:5E:30:99:31:91:B5:19:0C:C8:89
Authority key identifier: D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
Certificate issuer: /CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Certificate serial: 0194BD4E7DB7748BC672D3E9E6C114BBF06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
Manifest number: 46
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: 0KpKGno60j-q4q6un6YZTwISgSk.crl (hash: PofLkkSrq3rhlzrllwvm7ybBQQCTJMeQrKBY/CwscgY=)
2: BPcKYotNA4ZeZvm82W73v75zPQs.roa (hash: oHpWOGTj/PoKbHsHCYFs8uXPSnbHGEoV8KY7k9zJBk4=)
3: GkxGrjdz0A7AWmifnWDimQZWI38.roa (hash: tHXJR2KGAG4wHE8bdFOYoF9Jdtd+4jQD2aXhMHJzWK8=)
4: OFO40pbXY33B4_R6m0vxzmJtlaE.roa (hash: OKgJmR90SzKnzfJWjgu0f1y4g1wd7HW3UjBatZfs5A8=)
5: ief4j2bb-cAvwzzS1T0xB8OgxGk.roa (hash: cv2vWMrY2M65pVapU15+XFEE8tVsd4Na8PnjBxEQRuA=)
6: wkwsgzJc2eo9ng8QQ8kvMc3qjbc.roa (hash: +iuoTytPo6r5GmeijHeI4hmWR8iJmhnqPLAkE9k79sI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7d:b7:74:8b:c6:72:d3:e9:e6:c1:14:bb:f0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0aa4a1a7a3ad23faae2aeae9fa6194f02128129
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=1a65fdb29e4ae4a50b215e30993191b5190cc889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ce:8f:fb:70:8d:58:a5:d8:15:11:ae:dc:90:
8c:7f:63:97:2c:90:c3:9d:05:26:47:21:7b:6a:34:
c1:8c:0a:fe:bb:2a:7a:a6:df:21:ae:a2:e7:12:b8:
7f:de:de:5a:69:ae:f0:5a:6c:c5:ce:77:a7:c2:0d:
5e:3d:a0:9d:c0:7f:50:e8:35:7a:cb:a9:8d:c4:47:
28:81:8f:aa:d2:74:3a:f0:9b:b3:df:7b:01:97:3a:
2b:90:5a:c3:62:14:70:29:c4:78:b5:57:1f:48:0b:
83:08:68:5c:19:69:d7:33:e2:ea:5b:ee:0d:21:e6:
71:b3:bb:dd:79:73:3e:ca:08:0d:46:78:0f:1e:b2:
7d:dd:ad:ef:a5:8c:35:da:f6:0d:93:ca:37:0a:51:
5f:be:29:f9:4f:f8:64:39:d9:f4:3f:68:54:f2:41:
99:73:27:89:2f:89:5b:39:b9:b4:7c:8e:29:66:91:
30:bc:5e:e4:36:44:f6:28:a0:39:16:ea:d0:d6:a5:
69:af:c6:91:fe:14:c4:76:ff:a4:b3:3b:fb:cf:05:
c8:8a:02:86:0b:3e:18:18:78:f5:d8:47:ce:12:ff:
9a:5f:c6:31:7f:26:45:1b:d7:e6:72:f0:bf:56:db:
4b:59:3b:d0:08:1c:1a:38:3a:f0:a0:4f:73:9a:62:
33:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:65:FD:B2:9E:4A:E4:A5:0B:21:5E:30:99:31:91:B5:19:0C:C8:89
X509v3 Authority Key Identifier:
keyid:D0:AA:4A:1A:7A:3A:D2:3F:AA:E2:AE:AE:9F:A6:19:4F:02:12:81:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KpKGno60j-q4q6un6YZTwISgSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/76556e-a1d8-4e0a-8468-2214f18eb329/1/0KpKGno60j-q4q6un6YZTwISgSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ad:d5:e6:d2:32:01:ec:ec:99:82:a4:5b:4d:ed:04:28:90:
20:0c:93:12:35:9e:3b:be:9a:91:42:cc:e7:94:69:c4:aa:a2:
f5:24:d3:da:1c:ba:28:da:e9:8c:dc:08:9c:9f:2b:28:94:7b:
0c:fa:ca:09:22:94:56:31:df:a1:90:ac:9d:0b:7a:34:80:3e:
31:96:ac:e1:3b:47:a9:11:c9:65:32:5f:04:00:0f:9e:c7:14:
92:82:1f:54:f6:87:30:f2:4f:9a:45:50:94:88:78:95:96:d6:
33:66:03:6d:35:e1:d7:1a:fa:90:e9:9c:7b:02:09:fb:3b:aa:
0f:91:e9:a8:ae:5e:dc:cc:2d:df:8a:22:2f:82:76:cd:37:88:
4a:7c:ab:ee:8a:a5:22:22:d7:56:f3:fe:09:03:1f:f9:04:e3:
70:fc:56:38:90:d2:f4:d3:6b:74:b2:5d:11:4b:67:44:e0:75:
c3:15:22:54:bf:59:8d:50:a3:ef:ff:71:7f:3b:15:e4:bf:7c:
33:95:03:66:09:0d:9d:22:8b:7f:8c:d0:3f:25:59:e8:9c:19:
b6:90:3e:e1:ea:c5:27:68:18:01:af:03:7f:e3:ef:c2:ae:50:
e1:06:84:c1:45:b8:e3:1d:fb:e2:0b:e8:e5:c6:9a:d2:2d:8a:
5c:a1:d2:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:25:02 2025 by rpki-client