Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
File: lKOAb3QqvNXbEgT1KPTKbd6x6do.mft (raw, json)
Hash identifier: +5jcUDaT7BDnw6UJ7wOLJbg/eX3lTAL9dgAMRrXAPs0=
Subject key identifier: 0A:EF:08:00:FE:49:82:07:2B:3E:36:39:99:A5:E4:9E:FE:D6:3F:D7
Authority key identifier: 94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
Certificate issuer: /CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Certificate serial: 0194BC04CECA25572D5E136B0B2E0E833BBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
Manifest number: 0B6F
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: ZmObsjMWeB9ecv8Y-alGgZTX2vA.roa (hash: sKxCzrP68EEiJiVgfkANI2KkD6xerh0joHKgW2snD88=)
2: lKOAb3QqvNXbEgT1KPTKbd6x6do.crl (hash: kwCEu10zQ1DbNlWWrB/2r8AAgBrXrtULONOKY4mnYBA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ce:ca:25:57:2d:5e:13:6b:0b:2e:0e:83:3b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94a3806f742abcd5db1204f528f4ca6ddeb1e9da
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=0aef0800fe4982072b3e363999a5e49efed63fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:36:95:f1:c8:7b:09:65:d7:65:85:67:eb:
27:f7:1e:58:45:09:19:cc:35:b5:50:e5:d0:f8:46:
3c:a9:ef:ac:43:4b:4c:62:eb:4b:9c:cd:f1:74:ad:
c7:16:97:47:3a:32:a0:aa:9a:58:3a:33:32:b0:4c:
ac:a2:77:74:ed:38:b5:39:8c:1f:bc:af:eb:ed:e6:
2d:81:bd:25:51:9c:88:a3:ee:68:a0:52:b5:5c:48:
0a:00:6d:51:62:94:0e:ae:86:49:15:ee:19:91:ad:
4e:70:cc:4a:d4:70:c2:47:a0:4c:0f:30:5e:1b:82:
3c:ae:cf:96:fb:45:9e:1b:4c:e2:b9:22:62:3e:ed:
e8:65:0f:f2:79:cb:8e:06:28:d7:1c:4b:3c:3c:d9:
16:81:56:9a:20:a8:91:79:91:2c:ea:bb:5a:0c:e0:
70:7e:b5:78:c5:d5:b7:ef:dd:a1:1a:69:b5:2b:bd:
59:c3:3d:43:fb:fc:00:d6:b5:47:9a:a0:41:1d:13:
fa:4d:60:ce:76:ad:0a:78:8b:a6:0d:f9:88:3b:a8:
7d:d9:aa:16:5d:70:c3:8a:10:91:68:5d:f1:ee:d2:
75:f6:6e:69:b3:21:8a:48:2f:c9:9e:5f:4f:a8:c2:
56:8e:68:27:a9:31:89:24:d2:2c:0d:3e:b1:06:16:
2e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EF:08:00:FE:49:82:07:2B:3E:36:39:99:A5:E4:9E:FE:D6:3F:D7
X509v3 Authority Key Identifier:
keyid:94:A3:80:6F:74:2A:BC:D5:DB:12:04:F5:28:F4:CA:6D:DE:B1:E9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lKOAb3QqvNXbEgT1KPTKbd6x6do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c7b524-c4d9-41a4-88fa-d8bf521b26b0/1/lKOAb3QqvNXbEgT1KPTKbd6x6do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ce:68:2b:d9:81:71:24:e2:56:88:79:28:e8:06:18:6e:5b:
86:bd:20:dc:1d:63:dc:50:c8:16:92:04:54:d1:2d:61:5e:8c:
4d:1c:08:85:19:58:eb:d9:ee:8f:99:24:29:75:c5:4d:d3:e2:
52:93:6f:9b:49:63:d5:57:e9:e4:d5:50:b0:f7:5a:a3:ca:e8:
0d:ed:64:c2:f5:86:18:c5:de:a2:23:e1:6d:1f:f3:22:fe:a8:
dc:46:42:d6:14:1f:06:30:dd:c4:9b:68:8f:f2:8f:13:dd:7b:
05:2f:39:35:48:d7:22:a2:b6:b5:6d:28:40:09:73:76:e8:ff:
b8:86:6a:d2:9f:8c:14:18:4a:99:e7:48:49:f2:0f:99:a3:77:
f6:c2:d9:2c:e2:88:1b:ee:d9:05:0f:59:cc:65:fb:af:86:17:
f9:fd:da:4c:69:bd:2d:10:e1:09:86:bf:c3:e9:f4:64:65:d0:
1d:b8:8a:f8:11:b8:ce:46:8c:4e:96:95:e5:16:b8:7c:7d:be:
ba:6f:ee:92:75:98:80:ca:db:60:f5:84:50:2d:47:44:9d:ad:
6f:30:8a:40:b2:00:96:32:88:2f:4d:cb:6c:26:8e:f7:b3:21:
b4:99:7e:aa:b3:60:46:78:35:29:70:b5:46:9d:84:af:7b:d9:
eb:f0:75:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:41 2025 by rpki-client