Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft
File: o2CNaw6ApkMPtq9D-uFooOgBH-4.mft (raw, json)
Hash identifier: mlp5apunAY05+aiSi5TgdqeD+ZDh24DMjffDP7YwCwI=
Subject key identifier: C7:3A:9E:46:50:01:F3:DB:2F:7B:C6:ED:E8:18:1E:05:44:ED:EF:3B
Authority key identifier: A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
Certificate issuer: /CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Certificate serial: 0194BBCDFCF5DC590C3B465E38B1331B24D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft
Manifest number: 09CD
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: 1-zT9mAEBlOTW17BpRdhhq5CBopo.roa (hash: fOlZL/jmt7x24Mq2vq6+5+VHvePQon8h2vdvdk/CniI=)
2: 2jdvbPuVX3DvnSLzJ7PbPhY084M.roa (hash: TmyuM6Y9MB09UaiU4ubKUXZL1rxE4bCb1tGRI62YtN0=)
3: BjXm0XT4BTtEmIMPFFa63S__K7c.roa (hash: ETSjvpbNZrkoFW+0i09JYHs/YF4PfB7NXGdhRYyZxZs=)
4: Y8I7Cdrc3qJFqRL0cpCQD0-SJXM.roa (hash: kJVt9rCeoDhUmKwMAQa4mtxvjszoPS2OFInBbvhBp0I=)
5: o2CNaw6ApkMPtq9D-uFooOgBH-4.crl (hash: mtP89VoyxcX2mmyJmMVDflBQipaH8ihPl/jOhStfGC8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fc:f5:dc:59:0c:3b:46:5e:38:b1:33:1b:24:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=c73a9e465001f3db2f7bc6ede8181e0544edef3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:14:7c:56:2e:b1:aa:2a:f8:96:54:05:c6:71:
68:85:60:52:74:23:0c:ba:73:cb:29:c2:2f:72:24:
c8:b1:a3:b3:d4:e5:59:e9:65:6f:b8:1c:ec:62:b3:
96:98:f4:15:92:0f:00:7b:74:80:dc:26:1d:9f:23:
fe:7f:e8:71:e9:e7:6f:60:ed:e1:72:2f:aa:43:28:
a7:44:65:85:85:02:9b:ca:d0:3d:28:9c:c8:ff:d0:
83:b3:99:90:8e:25:ed:24:6f:bd:21:3e:d1:3b:41:
b6:cf:cd:e9:05:e3:50:5d:16:7b:70:9d:d3:6e:d9:
ce:5d:dc:8f:56:39:2c:b2:70:34:72:07:74:da:df:
5f:e8:bf:51:64:ce:7f:8e:a3:49:b0:21:dc:b9:ca:
f6:3e:df:dd:9e:ca:4a:ec:44:ca:b7:3e:43:16:25:
eb:14:8e:85:a5:3a:7c:88:42:d5:c2:38:72:6a:7e:
a6:e8:47:18:b3:fe:66:2c:23:38:a5:f5:99:ad:c0:
e4:9c:d9:a7:51:66:35:3e:ee:03:00:72:f6:07:c8:
5e:6a:0b:45:c0:59:65:b0:69:05:0c:61:ed:bd:f0:
ea:c3:28:aa:24:46:02:de:8e:57:55:f2:58:6f:bc:
01:89:68:75:8c:c5:29:bf:06:0e:70:d3:b0:f7:8b:
87:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3A:9E:46:50:01:F3:DB:2F:7B:C6:ED:E8:18:1E:05:44:ED:EF:3B
X509v3 Authority Key Identifier:
keyid:A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:81:12:9c:a0:21:06:f1:6a:2c:ae:4f:3e:6d:95:ed:c6:af:
1f:0b:2b:82:e0:ec:f9:f5:6e:62:bd:ca:1c:75:31:c3:af:ab:
30:73:a2:91:06:61:e7:be:b2:c3:fc:1c:5f:47:db:f3:66:f5:
8e:9a:f3:42:86:11:b1:77:7d:fa:92:4b:5b:f0:be:92:43:ec:
84:7f:bd:39:35:d8:41:15:76:4e:8f:01:60:18:42:6e:16:56:
d0:b6:cb:5d:5e:e0:93:4c:d5:fa:86:73:00:4e:97:b5:28:8c:
a2:73:9d:09:ba:c9:f1:83:af:0c:5a:88:59:0e:74:8f:48:fb:
82:6b:3f:1f:17:c2:a1:6d:ce:7d:9a:59:f1:53:7c:57:64:d2:
a7:df:4d:42:23:af:92:2e:2c:69:ec:f2:e0:8f:b7:77:7e:1c:
20:0e:7e:cc:43:5d:ef:ac:e6:0c:d4:31:74:bf:35:5d:ca:05:
21:55:f3:51:e2:27:aa:af:c1:5a:5a:75:5e:7d:80:d7:13:9a:
79:ac:ee:26:2f:4d:74:cf:60:7e:8a:60:ab:1f:b5:bc:86:eb:
62:b8:35:06:03:05:a7:12:9c:61:1a:04:35:8c:0b:e4:da:2f:
2c:fa:8c:ad:6c:1a:88:a1:1d:56:4a:cc:37:20:34:34:e3:44:
d0:e8:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:31 2025 by rpki-client