Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
File: ow3ap0lNabocrLRX75G23NIujdk.mft (raw, json)
Hash identifier: M9frFnvfy4UAZBN4E8rgWPNGaOlHXkdqSY4ITfDElis=
Subject key identifier: CB:A9:7F:7D:B8:3B:28:14:0D:20:E6:63:C2:D0:9F:20:F6:A8:D6:D8
Authority key identifier: A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
Certificate issuer: /CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Certificate serial: 0194BD4E6D0DD5822655C64A959252BE4A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: Fq4kg0SRGVzzVSs9_o69LfwOT3A.roa (hash: 2HbnhpvQtG7vsaYBmi0+gk3Ea1ph0D7Fi3q1e56Ae5s=)
2: ow3ap0lNabocrLRX75G23NIujdk.crl (hash: LlkjGChP2ZPFnO2cEErIeUwOQ5O7qPPQfgj0wAdaCQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6d:0d:d5:82:26:55:c6:4a:95:92:52:be:4a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30ddaa7494d69ba1cacb457ef91b6dcd22e8dd9
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=cba97f7db83b28140d20e663c2d09f20f6a8d6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a3:62:74:64:f2:a9:e0:f7:95:09:fd:53:a9:
04:e8:8c:65:7b:08:50:ea:15:1b:50:6f:98:53:ee:
01:43:b8:4f:04:02:a5:ac:a6:c1:9a:09:86:ff:c6:
45:a2:03:44:6f:78:6e:d3:37:06:c1:62:05:74:0c:
1d:66:fb:8a:3a:68:d5:d2:f1:c6:9f:b7:21:25:e3:
ce:54:e1:98:35:ed:47:02:3d:02:7a:2a:04:2c:25:
46:24:b7:a4:d6:2a:9e:84:cc:1e:5d:ed:c9:48:c3:
8a:e9:11:bb:53:0f:13:47:fe:11:3b:09:56:3a:94:
dd:7a:5a:7a:f9:a9:a2:aa:24:a7:1a:73:e2:d6:4c:
c0:fa:f6:bb:0b:ca:66:99:e8:56:cb:7f:a6:bf:30:
da:4c:ae:08:57:71:1e:37:23:30:98:a2:0a:7a:17:
ce:5b:da:e3:65:2c:4d:b7:b2:23:da:78:b0:c6:8f:
85:54:a8:25:0c:e1:48:6e:54:f5:2a:fa:e7:a1:44:
16:84:0f:35:9e:eb:6f:42:9c:c8:f2:e5:c8:a9:95:
fa:c2:2c:ad:b6:f3:ad:26:41:c1:47:7f:01:21:1f:
d6:ef:97:3c:46:a4:98:da:96:6e:c9:5a:80:31:95:
06:54:d2:ea:fa:42:5a:cb:22:5d:d2:d0:6d:ef:bd:
00:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A9:7F:7D:B8:3B:28:14:0D:20:E6:63:C2:D0:9F:20:F6:A8:D6:D8
X509v3 Authority Key Identifier:
keyid:A3:0D:DA:A7:49:4D:69:BA:1C:AC:B4:57:EF:91:B6:DC:D2:2E:8D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow3ap0lNabocrLRX75G23NIujdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/76112c-f17e-4dc1-ba52-6544a2b99817/1/ow3ap0lNabocrLRX75G23NIujdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cb:f1:d4:05:47:7f:f6:1a:50:f3:57:ba:ff:eb:fd:ae:cd:
42:1e:2e:da:6b:f7:dd:2d:fa:22:a1:26:88:e6:1b:3f:a7:10:
be:10:f6:79:43:b6:66:3c:7c:9e:45:7b:4e:d3:0d:9e:ad:ab:
02:ca:e9:3a:04:f6:5f:8e:b9:39:dd:42:8b:9a:cd:17:0a:83:
f1:22:ae:4b:54:30:9b:89:aa:ce:f6:0d:da:ab:7d:07:ae:95:
36:42:7b:a0:60:0f:c8:34:24:93:f2:94:8c:b4:fa:b2:65:44:
73:19:90:72:92:fd:aa:db:9b:13:3d:24:46:e1:cf:53:23:fd:
3a:78:54:6d:67:c5:a8:5c:28:9a:a4:ee:e0:a5:ae:5a:0a:c5:
f2:67:64:b3:18:54:33:a8:3e:7b:a2:98:f2:5f:49:db:32:d5:
ce:5c:34:25:6d:36:40:d9:30:6f:12:ec:b9:62:ee:66:df:1a:
55:14:fc:24:11:af:db:c7:fd:4f:0d:3d:af:2a:e1:db:2a:12:
fd:03:2c:54:e6:1b:c3:f9:0c:a2:06:d9:c2:79:dc:49:b9:18:
4b:0e:e6:59:f2:cb:fd:41:42:ff:ea:9a:65:e2:9a:c7:c7:ab:
ff:69:18:89:e0:5f:1b:a8:84:a7:74:80:2d:8d:1b:ab:02:45:
47:36:cc:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:05:54 2025 by rpki-client