Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
File: oheIwIqkN9EWXOy9aP2xlaFd-gg.mft (raw, json)
Hash identifier: w9XPcPu69K03rGHRzxVitDXLIhOHzeR930hHQusn5vw=
Subject key identifier: F4:3F:9A:22:B6:33:74:C8:67:6D:05:D9:4E:51:61:80:3E:C5:A6:ED
Authority key identifier: A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
Certificate issuer: /CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Certificate serial: 0194BBCDB1FA704B5F5AC80E1B4DB670668F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: 3hcLMvc25IMPdhmKQEHCMZTqIjs.roa (hash: SEybTz+/cd8wiIccvdujur1jHcT09AAEthIXnDu/BtA=)
2: oheIwIqkN9EWXOy9aP2xlaFd-gg.crl (hash: lyndAD55ksTbMnex0B7EzzH3kjfY/n72DfbZNY4Xk9s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b1:fa:70:4b:5f:5a:c8:0e:1b:4d:b6:70:66:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21788c08aa437d1165cecbd68fdb195a15dfa08
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=f43f9a22b63374c8676d05d94e5161803ec5a6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:e2:1a:52:da:64:2e:68:8e:e1:09:29:7f:
cc:13:35:fc:b7:85:4f:db:b8:37:f0:c3:21:31:0d:
c5:8d:cf:4d:6c:d7:1a:06:bf:a2:23:2c:ed:93:63:
af:39:f3:c9:c0:eb:a5:1d:07:c1:5b:ba:7f:db:83:
8e:4c:79:b1:88:55:a3:96:db:96:d7:7e:02:aa:ad:
c5:27:ec:75:bf:93:c3:8b:9e:86:e5:4b:d3:71:ec:
9e:df:40:45:fd:44:fc:00:61:2f:2b:50:57:27:ed:
69:19:e0:f9:2d:e8:a9:5d:93:4e:8e:4b:c2:2c:c8:
5d:8b:3c:93:9d:85:b6:ab:b3:cc:74:a9:4e:e1:5b:
33:49:7a:0e:5c:fe:18:d1:48:0b:d2:29:98:f4:6f:
72:0e:4a:a5:23:24:f9:10:84:31:d2:76:b8:b0:c4:
66:ad:b3:fa:32:d8:a0:1a:c1:d5:01:4f:9a:ef:ca:
96:b3:f9:ed:59:92:52:4e:bc:0d:76:49:b2:fd:e8:
a2:b2:50:f2:a0:5d:29:5d:f8:69:30:f6:59:64:d3:
b5:42:c1:db:84:01:c9:0c:3b:45:44:62:ae:c7:ea:
09:20:35:18:51:5f:fc:c3:92:c0:4f:e5:64:1e:80:
fc:a0:17:1c:4d:2f:a7:cf:d4:c0:ff:c5:d2:9e:7d:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3F:9A:22:B6:33:74:C8:67:6D:05:D9:4E:51:61:80:3E:C5:A6:ED
X509v3 Authority Key Identifier:
keyid:A2:17:88:C0:8A:A4:37:D1:16:5C:EC:BD:68:FD:B1:95:A1:5D:FA:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oheIwIqkN9EWXOy9aP2xlaFd-gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a0c7c-f2ca-4aa9-87c5-77f4fd53425e/1/oheIwIqkN9EWXOy9aP2xlaFd-gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:44:57:8d:82:93:43:6d:42:6f:7c:5e:9d:80:5c:c4:29:a0:
b7:70:17:bf:9e:d2:92:20:fd:b4:67:59:70:48:da:63:65:87:
56:ff:ee:00:36:93:78:98:12:ec:da:4c:a8:b9:da:47:44:6d:
93:b4:3c:16:a2:b1:eb:dd:45:ac:e3:5b:23:c7:6e:33:ad:22:
1a:bd:4c:81:da:79:46:f2:6f:b7:e5:3d:f0:29:5a:9a:af:90:
38:dd:40:fb:cb:61:04:ed:74:4f:2f:25:96:6a:e1:f8:cb:71:
6b:59:88:e6:e6:f7:c5:e7:84:62:6a:4c:ce:04:36:d6:9f:19:
03:d8:54:1a:21:32:98:0c:99:90:5a:b3:6f:a9:94:b9:f0:cd:
c1:07:13:d1:cb:3f:07:22:b8:2b:11:1a:28:72:10:79:89:72:
84:f0:15:81:05:b6:a6:b7:18:13:fc:07:df:d9:10:af:23:f0:
b3:03:ad:d2:fc:88:e6:c5:f3:a0:81:cb:f8:db:3c:a3:9c:39:
b3:4c:87:00:fb:9f:cf:33:e9:c3:88:4e:26:75:95:7a:4d:34:
15:36:b3:c0:21:ef:bf:ef:3e:b3:06:f4:12:8a:01:b6:1c:79:
4e:df:04:de:bd:01:44:d1:bb:75:94:3e:b5:0e:53:40:ce:4a:
93:0b:33:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:12 2025 by rpki-client