Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
File: oZstcCM-Dlve9tv72pGIbSe2pa4.mft (raw, json)
Hash identifier: FFSFwC95CUPx2JEvht8mrKJ/0r/+ok5sXGD/ui1xz1U=
Subject key identifier: 11:68:68:1A:07:15:17:5F:35:E4:19:86:89:E5:99:8F:14:1C:65:73
Authority key identifier: A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
Certificate issuer: /CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Certificate serial: 0194BC050EF7558254510EFB2817CB1692C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
Manifest number: 02CA
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: n41NhtFJXuy7O2MsnhnPAfCr2kE.roa (hash: ArC6Jxqpsmc09lGw1ULuf3dsi0Is5INs5UU1G0NJkHU=)
2: oZstcCM-Dlve9tv72pGIbSe2pa4.crl (hash: RJLblsYTp865I0cTnp0vai24a6ZIHaa6dTXc4eFB6Ac=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0e:f7:55:82:54:51:0e:fb:28:17:cb:16:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19b2d70233e0e5bdef6dbfbda91886d27b6a5ae
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=1168681a0715175f35e4198689e5998f141c6573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:d0:15:a3:09:da:71:50:1d:e5:35:6f:b7:
ac:80:53:87:6a:4a:33:cc:91:c4:2a:81:f7:b1:20:
53:54:c9:9f:88:c5:c6:9e:4a:8a:53:53:d4:f3:22:
23:26:43:34:23:5d:9d:20:01:8d:52:d4:73:94:82:
25:9a:a6:3b:32:f0:b1:42:33:a9:7f:4f:b5:30:b3:
28:fe:96:5d:5d:1f:b6:12:46:29:04:3c:11:5c:5f:
c0:34:87:2c:2a:be:c6:cf:de:4b:73:c6:8a:6f:cc:
1a:ee:80:4b:3e:19:b9:dc:95:f9:1e:f2:0e:8e:3b:
33:21:f1:cb:d6:ac:ad:2e:4d:e5:64:6f:2a:cb:c3:
e2:65:d1:24:5b:09:ef:68:63:b1:fb:1f:40:8c:f1:
66:60:4c:dc:a6:ac:c3:34:ca:77:89:4f:f6:a1:b8:
fe:53:41:10:35:0b:d6:b3:9e:32:3f:01:b5:1a:f1:
af:30:cb:ff:d8:69:83:61:60:45:7f:be:bb:51:99:
88:97:f2:81:0a:fc:0c:f6:25:85:f7:d4:67:5d:12:
13:7f:8b:ba:18:32:5b:e2:9f:5c:a7:05:54:74:00:
46:6c:b1:84:fa:a2:6b:81:2d:60:9e:83:a0:75:03:
c5:0a:9b:68:18:50:ff:c5:1c:f4:3a:f0:8d:6b:a9:
6c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:68:68:1A:07:15:17:5F:35:E4:19:86:89:E5:99:8F:14:1C:65:73
X509v3 Authority Key Identifier:
keyid:A1:9B:2D:70:23:3E:0E:5B:DE:F6:DB:FB:DA:91:88:6D:27:B6:A5:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZstcCM-Dlve9tv72pGIbSe2pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c1c11c-2161-4afc-97a5-3f1a7c4f51b5/1/oZstcCM-Dlve9tv72pGIbSe2pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:6e:75:e5:a6:8f:74:01:99:3c:47:15:32:8c:53:e0:22:2a:
16:ee:6a:e5:2c:2f:c4:fa:48:43:7e:0b:4e:15:92:45:23:4a:
f9:40:db:18:cb:c8:21:90:45:ae:ab:e6:2b:32:90:f4:14:0b:
e2:da:4b:51:0d:95:89:54:b8:44:21:60:f2:da:a7:08:8c:a7:
9a:a1:6d:98:37:a3:0e:b5:b2:17:6a:3f:dd:b0:8a:75:f4:b4:
d2:1d:1f:4a:cf:3f:9f:8f:2c:b6:c0:44:05:37:d0:e8:c0:04:
a8:96:8a:6a:f3:ad:4f:f7:da:b5:19:b5:82:d8:16:46:75:90:
ca:bf:ae:24:ab:df:83:7a:85:99:e6:92:e4:74:52:55:bc:64:
3a:0f:e2:dd:47:18:e2:71:1c:e1:45:ec:10:2c:32:7d:44:eb:
62:eb:44:20:bc:36:0a:00:bb:0f:02:39:81:b9:4b:5a:c1:26:
37:62:67:ce:cc:11:3e:17:28:2b:99:a3:16:a8:34:df:78:e1:
af:f2:64:be:b3:37:39:17:b6:31:f1:80:5f:66:dc:f5:e6:00:
d5:e0:78:11:d7:9d:6a:64:12:8b:a5:d8:9e:90:a0:8d:a6:38:
97:e2:11:bc:db:99:30:53:57:6f:22:84:3d:61:58:5a:32:3d:
f4:62:ed:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:33 2025 by rpki-client