Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft
File: oNki4v4kvSzaeToqrcEzYlAM2bE.mft (raw, json)
Hash identifier: NnQcuZ/B+9gbYbYNLgLBv4guWRD3jpjoDpxWeeORWvs=
Subject key identifier: 31:7A:8D:51:FD:4E:4A:DD:F5:F3:A2:5E:A0:3B:04:81:09:30:C6:BF
Authority key identifier: A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1
Certificate issuer: /CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1
Certificate serial: 0194BC72DC18C5A2E172640D1756BCEAD2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft
Manifest number: 0A2D
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: QU8GopeOlHwkTprCT-S3aTgX93c.roa (hash: wdEn+nBxYgSylw1Zt9va3XXWns8S/pGLaLLxEZ/5irY=)
2: oNki4v4kvSzaeToqrcEzYlAM2bE.crl (hash: R4MR1CTy3rzUEQ7pqn906CkPT7AkEc3m4qDBJaoibKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:dc:18:c5:a2:e1:72:64:0d:17:56:bc:ea:d2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d922e2fe24bd2cda793a2aadc13362500cd9b1
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=317a8d51fd4e4addf5f3a25ea03b04810930c6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:11:0b:7c:70:be:2b:f5:18:3e:a9:ec:5c:
c8:64:ae:09:de:c5:5c:27:57:a8:58:37:12:ed:b9:
7b:cc:01:d7:65:d5:51:7e:3f:ef:9a:40:2a:1d:9d:
79:5d:ae:de:85:7a:5b:3e:2c:f5:b3:7e:cf:c5:bd:
36:17:b5:94:33:47:fd:f3:b9:27:1c:1a:68:d8:a0:
9d:b4:af:75:09:14:d3:47:4e:f5:1e:fc:8a:d0:a9:
13:e9:58:f8:28:f4:6a:c4:f5:77:c7:74:cc:f6:17:
5f:04:e3:ac:ac:78:f9:ca:d5:93:b2:13:3f:d4:ad:
3d:4a:1a:57:33:a4:53:b3:30:a5:92:78:8b:73:54:
0c:d5:a2:41:07:01:bf:37:39:bd:f7:dc:40:18:96:
7a:d0:fc:0d:0b:d4:b1:89:cd:bc:be:f7:6d:54:31:
8b:30:82:05:cd:2c:41:80:87:b5:90:d6:d6:8a:2d:
ee:67:80:9e:9c:24:2b:54:db:af:ba:fd:8a:93:a6:
d3:ec:e1:da:bd:4b:25:6c:9e:b4:48:dd:f7:e7:98:
53:6d:20:a3:cb:2a:cc:19:7f:b4:c8:be:16:4e:5d:
7b:71:97:0f:15:cb:5e:58:77:38:7f:59:de:aa:c2:
3e:b0:92:5c:cf:4a:a3:f1:9c:f7:ea:0b:4b:04:63:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7A:8D:51:FD:4E:4A:DD:F5:F3:A2:5E:A0:3B:04:81:09:30:C6:BF
X509v3 Authority Key Identifier:
keyid:A0:D9:22:E2:FE:24:BD:2C:DA:79:3A:2A:AD:C1:33:62:50:0C:D9:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNki4v4kvSzaeToqrcEzYlAM2bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d4fc4c-4815-4e56-bf73-4a6ace26b972/1/oNki4v4kvSzaeToqrcEzYlAM2bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:f4:ae:3b:b5:7d:22:ed:7c:06:d9:f7:41:b9:67:dc:70:1e:
21:77:95:ed:cd:b6:7f:21:3a:43:e8:36:ab:ee:31:d9:3d:8d:
ee:82:40:58:36:af:28:0b:bf:60:f0:d6:19:6d:9b:7d:b7:ae:
7b:a3:00:45:c9:bc:07:9e:38:72:65:a5:27:1a:83:b2:22:6d:
36:29:d8:21:70:02:6f:55:03:fa:f0:c0:03:9c:ed:a5:70:6a:
b0:e6:a2:69:f5:62:d7:38:9c:d1:43:e8:99:b0:ca:b1:6c:bf:
19:ea:7f:61:56:cf:6a:d7:a1:a5:36:6b:19:c8:40:2c:a0:f0:
20:81:a0:87:e1:68:98:4b:06:1b:14:3f:3d:c2:4e:a7:d9:4d:
a5:22:5a:97:f5:c9:09:15:0d:84:26:22:1a:43:03:36:c4:b6:
2f:bf:4c:46:d8:fa:d6:6c:ed:e3:17:3d:59:47:31:98:ac:1a:
b6:97:29:83:83:2a:8e:f5:5c:0f:d5:c8:c6:e6:6a:50:9a:f3:
df:2b:46:8e:e2:14:39:17:3f:42:ac:c3:e2:c4:be:3e:16:cb:
0d:57:ce:7d:7d:c8:3f:6b:29:97:6f:a9:59:49:0c:5c:b5:91:
37:ef:fc:2d:59:5e:fa:90:4e:bd:8b:9f:69:5d:14:77:b9:3c:
ad:91:d6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:52 2025 by rpki-client