Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
File: kOphmXVeYwDwQCwqCO1DegpzAB4.mft (raw, json)
Hash identifier: Zn6FmpNIcnozDv2G5lEISbi9O8OfzT1A5Rz9hQXUQfw=
Subject key identifier: E7:EC:DF:D4:2E:82:36:4E:0F:44:D1:4C:CD:BE:32:C8:7F:91:0E:5F
Authority key identifier: 90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E
Certificate issuer: /CN=90ea6199755e6300f0402c2a08ed437a0a73001e
Certificate serial: 0194BCAA386EDE7622CF160FAA43768F13FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: KatNB724uDRt0-ZiwLjIS5tNdSI.roa (hash: 44IwgAiGyeQdbyG6MSKbubj3iGudNdrcCJvguuMAbNQ=)
2: kOphmXVeYwDwQCwqCO1DegpzAB4.crl (hash: WOosWS+FMaBPHRLq91Inae5ySCgMrIpNQpFNx5l34XI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:38:6e:de:76:22:cf:16:0f:aa:43:76:8f:13:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ea6199755e6300f0402c2a08ed437a0a73001e
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=e7ecdfd42e82364e0f44d14ccdbe32c87f910e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:a0:31:e9:90:fd:26:0d:bf:3f:7f:ae:97:
2a:0a:20:9f:1c:2a:98:c3:5d:6b:ab:50:e0:b0:05:
1a:b4:70:99:d9:fc:c7:31:18:6a:d0:a7:10:67:d5:
25:b5:67:38:74:7d:8e:3f:23:88:20:02:3d:3e:7a:
75:28:31:60:eb:91:03:29:83:82:44:31:64:fc:10:
0a:46:09:de:f2:cd:ff:cd:4f:16:b6:5d:b0:76:b6:
b8:31:be:9d:9d:04:d6:c7:0a:8f:51:16:30:cf:b3:
0d:d7:f7:29:de:5d:e8:e4:f5:fc:e9:49:c9:0f:f7:
4d:36:e7:0b:49:5b:87:d9:ea:58:21:da:0d:68:af:
b7:d0:aa:80:f4:01:eb:d6:b6:19:7c:75:81:e6:20:
d6:c2:a5:12:e9:eb:73:84:81:f1:55:48:ed:1a:b9:
80:fd:c2:92:80:0d:63:fb:7a:fd:72:d3:b9:cd:24:
0d:79:ad:51:23:74:c0:ae:5c:df:36:01:f7:48:0f:
4a:e1:39:fa:da:d8:62:0c:e1:39:fa:d2:df:e8:67:
3b:68:4f:48:08:c4:44:3d:43:3d:af:1d:fa:ee:51:
18:6c:4e:f9:8c:6b:3f:2b:9a:52:7c:98:00:36:84:
36:55:fa:bd:74:2f:4e:4e:8b:71:08:5c:88:ef:cf:
c4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:EC:DF:D4:2E:82:36:4E:0F:44:D1:4C:CD:BE:32:C8:7F:91:0E:5F
X509v3 Authority Key Identifier:
keyid:90:EA:61:99:75:5E:63:00:F0:40:2C:2A:08:ED:43:7A:0A:73:00:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOphmXVeYwDwQCwqCO1DegpzAB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6d2a8f-cf90-46fb-8259-c39808d03a18/1/kOphmXVeYwDwQCwqCO1DegpzAB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:77:01:58:5f:0a:98:90:1e:88:06:16:c7:f7:f7:35:23:10:
e7:98:85:2b:3b:35:a3:70:fe:e7:64:8d:b9:5e:ff:bd:d0:4b:
81:e8:d9:d5:24:d1:41:6c:70:2b:b6:8a:fc:4d:e1:30:f9:2c:
bd:58:95:89:55:70:96:2d:4b:83:8f:70:70:a7:71:dc:69:9c:
de:1c:2e:c7:85:40:d0:ec:f0:e8:31:c7:6e:37:07:d2:21:99:
fe:40:f8:d1:9b:e9:67:3c:2e:c5:88:14:c9:85:c8:64:08:c9:
9b:11:1c:a5:94:b2:31:5c:5c:95:38:5c:c6:40:42:91:19:c4:
e0:8b:b0:2b:e8:44:66:16:a0:05:8e:c4:5c:e9:aa:e1:55:62:
15:99:38:ac:33:0f:12:0a:46:db:e4:e0:c4:74:70:c1:a0:86:
6f:df:58:8e:55:1b:c8:c6:74:d9:12:19:a4:17:35:a9:b1:70:
9a:7a:34:35:d7:7f:5f:55:f6:a8:83:f5:15:fb:ca:1a:1d:3b:
74:7b:34:69:da:27:b3:7f:4c:df:99:d9:eb:79:8a:14:6e:c3:
2a:1c:a3:a0:f0:92:c2:65:36:75:4c:fc:cb:c0:89:1d:b0:6a:
d6:73:77:f0:55:e5:53:67:ce:15:00:4b:de:39:ea:30:f3:27:
c9:cb:0b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:14 2025 by rpki-client