Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
File: ouRVapV54gL1TBWTRUWLySRfkOQ.mft (raw, json)
Hash identifier: WdqHjtdh7zP3qNMKzw8AcY9sZHanG6YPEb0EGcudAqA=
Subject key identifier: 62:64:43:6C:E6:5E:CC:E8:9A:DD:F7:FA:39:41:AC:0F:28:73:23:6D
Authority key identifier: A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
Certificate issuer: /CN=a2e4556a9579e202f54c159345458bc9245f90e4
Certificate serial: 0194BD4E3E77CC351E0A1AD8B5D0FECC17F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
Manifest number: 04ED
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: nEVE0BDUqp5M1Cg6_Jesy_01Zpo.roa (hash: GMRhVws0KpXuhusMgH6+dybXDc5BG6EQU71bIEXKHws=)
2: ouRVapV54gL1TBWTRUWLySRfkOQ.crl (hash: D9E3a9c2983txNitENVYHtgwNrRyZf9tAOI2bvxkRfM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:3e:77:cc:35:1e:0a:1a:d8:b5:d0:fe:cc:17:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e4556a9579e202f54c159345458bc9245f90e4
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=6264436ce65ecce89addf7fa3941ac0f2873236d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d7:4b:ec:a7:74:c4:2d:69:4f:99:7d:fd:a7:
aa:ed:f9:77:a8:bc:f9:90:86:19:98:40:6d:a1:2c:
60:41:eb:16:a8:ab:df:f8:2a:4a:e6:b9:d8:0a:a4:
06:7c:54:d7:2e:0b:0a:2c:41:12:d0:37:60:a9:3a:
8e:f1:2c:06:63:44:a7:89:ec:20:22:44:f7:17:e7:
76:7f:2b:50:10:d2:19:6b:f0:1e:6c:e2:9a:df:ed:
38:f9:95:dd:0e:6f:b8:d7:24:69:27:33:68:c6:97:
1b:1e:d0:85:26:67:08:8b:69:82:ad:bd:26:7b:73:
5e:3e:4a:f9:6a:3e:6a:a7:05:63:bd:08:64:ed:db:
cc:85:ea:cd:2a:25:15:04:c3:47:74:f7:c5:b9:a1:
2e:91:a5:2a:1a:81:d5:00:fc:64:43:19:64:c7:65:
af:6c:1d:e7:59:7b:82:05:50:f7:05:d9:23:00:86:
d3:10:ec:a7:74:3f:70:20:54:d0:af:6e:fe:3c:d8:
e7:82:25:c6:84:4c:cd:28:8c:d5:9c:0d:cb:41:32:
86:fb:dd:58:e1:9f:40:7a:fd:35:09:78:d3:eb:7f:
ec:99:0a:f7:92:9a:c5:dc:d0:19:f6:dd:ab:56:c1:
a3:d7:82:95:b8:91:48:dd:fa:ec:96:aa:69:03:00:
9c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:64:43:6C:E6:5E:CC:E8:9A:DD:F7:FA:39:41:AC:0F:28:73:23:6D
X509v3 Authority Key Identifier:
keyid:A2:E4:55:6A:95:79:E2:02:F5:4C:15:93:45:45:8B:C9:24:5F:90:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ouRVapV54gL1TBWTRUWLySRfkOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/86e9cc-36a0-46f5-ba1e-c559e0971ee0/1/ouRVapV54gL1TBWTRUWLySRfkOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1c:9f:4d:56:91:56:dd:a4:56:00:03:6c:06:af:5b:b4:44:
0e:c7:a1:73:64:87:04:95:29:17:36:a3:b6:3c:1e:81:16:23:
01:96:a7:67:b2:39:16:b4:bf:0f:ff:d9:2c:88:ba:c7:ea:51:
8c:21:39:d9:11:a3:21:6b:a5:52:a1:f4:8f:56:c1:8a:b9:c5:
95:88:f7:ba:40:89:b3:74:9f:3a:16:4f:c6:db:b5:38:d4:a1:
ac:d5:6b:75:df:46:b0:4d:0e:5f:a5:35:1b:4a:8e:77:9a:c5:
e4:7f:fd:60:4d:07:11:ca:b8:73:91:c8:65:e8:30:83:26:4b:
9c:da:07:de:2d:d8:9b:13:42:62:f1:22:fd:b6:0e:a4:bd:ae:
94:3f:5e:26:e0:8a:6b:29:c7:72:06:7d:26:b1:de:cc:b4:06:
52:61:43:d0:8f:3d:26:78:95:61:e3:78:8e:6f:5b:9c:20:15:
d9:66:bc:69:51:8f:85:e8:47:ac:8f:d9:9b:1c:1d:e2:02:56:
1f:c6:e2:3a:b3:b9:ee:ec:5c:5b:2b:99:57:85:23:f9:ce:c5:
89:e9:bc:e0:b6:91:a6:fb:d9:d6:fe:17:9a:d4:e5:f3:02:85:
8a:9f:46:3a:ae:6e:f5:31:10:da:e2:39:d6:a4:15:13:36:5c:
f6:6a:6a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:21:35 2025 by rpki-client