Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
File: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft (raw, json)
Hash identifier: iiGi+zYPb1RrXg4awKZKRTQC0OdCYJ5Nt89mvLR8UuY=
Subject key identifier: CF:78:C5:0C:1C:88:E1:33:86:61:9C:F6:A5:C6:1B:7D:4E:C3:92:2B
Authority key identifier: A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
Certificate issuer: /CN=a011a02e929c43f0199c8326302e24899c4a4151
Certificate serial: 0194BD4E65DED56EB869C13B0A7383B2B1CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
Manifest number: 1195
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: ZgCbU_j-D8W_yz4NxjG1uIsvyRs.roa (hash: XLCyo6svOneJBnox9Jy1GVfURxAN14ccdkNtugIRAH8=)
2: oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl (hash: LxBS6iHgj36zqCvUxpZBY/cjy9NaLcq5K8cLg9wA7X8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:65:de:d5:6e:b8:69:c1:3b:0a:73:83:b2:b1:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a011a02e929c43f0199c8326302e24899c4a4151
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=cf78c50c1c88e13386619cf6a5c61b7d4ec3922b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:91:80:55:9f:b2:02:fa:9e:b4:04:e9:16:8f:
52:6b:84:5f:cd:dc:49:8d:f3:2c:0b:7f:cf:6f:e3:
ba:19:b1:a3:28:47:01:22:d6:00:09:24:03:dd:a8:
1b:15:ed:5f:1c:d9:de:47:5b:4d:e7:95:10:f3:fa:
3d:09:70:5a:fc:a7:12:45:5b:d2:8e:1f:5b:6d:1a:
5b:5e:0e:5f:21:6b:f8:3e:7a:b3:a9:7f:f0:ba:d5:
c9:65:dd:60:32:ad:ac:7f:cc:63:d3:38:5f:a0:bc:
16:39:ef:48:0a:ce:1b:2e:77:f2:73:c8:d6:d3:ed:
17:c6:9b:26:b8:85:e8:2b:61:39:48:a7:c8:ba:21:
96:8e:84:42:dc:9f:c0:20:ef:dc:82:e3:c3:c5:7d:
33:25:44:9d:a6:b4:a2:43:89:35:21:26:e7:5d:82:
ab:2f:03:d1:ff:7a:d3:1f:28:5f:98:70:b0:2b:9d:
4c:02:c5:a2:53:15:b6:eb:24:d3:60:45:1e:3a:02:
2f:f7:6d:d4:f3:18:5a:6a:e0:f8:83:fc:46:4a:64:
31:c5:f2:e7:f0:a1:de:86:f7:d0:59:d9:20:9e:69:
87:b1:c0:dd:3b:3e:3d:62:68:be:2c:85:ae:2d:04:
72:f9:b0:2e:b5:f9:ec:45:65:c4:68:65:42:37:bb:
55:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:78:C5:0C:1C:88:E1:33:86:61:9C:F6:A5:C6:1B:7D:4E:C3:92:2B
X509v3 Authority Key Identifier:
keyid:A0:11:A0:2E:92:9C:43:F0:19:9C:83:26:30:2E:24:89:9C:4A:41:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f97d7e-8078-4cee-af76-9f6d0bfd2058/1/oBGgLpKcQ_AZnIMmMC4kiZxKQVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fa:f4:5a:c5:35:42:f0:c8:83:33:21:36:80:29:6f:3e:9b:
9e:db:a1:d5:a0:8c:d5:cd:ff:06:a9:34:bb:7b:db:01:46:38:
42:46:fa:9d:52:49:92:a1:1e:44:1d:e5:a6:25:ac:20:0b:77:
4b:1f:66:d9:92:99:45:89:97:8e:e0:d4:43:25:2a:a5:35:b5:
f9:88:9d:41:af:f9:f2:e0:f4:a8:e6:f2:2f:74:e5:8d:96:24:
6d:4a:51:40:ed:0b:31:1f:06:2a:8a:9c:94:61:18:c2:d0:a1:
a7:2e:a4:94:9d:53:d1:c8:a3:9c:38:af:69:d2:a9:a5:03:03:
dd:dc:4a:ad:b9:1d:da:23:ec:f0:19:d9:45:92:42:d4:2f:bd:
3a:de:3a:a5:26:48:18:59:6a:90:88:8f:bd:97:7d:db:c5:b2:
cc:b5:75:38:c4:f0:61:30:6e:6b:ff:c8:a9:aa:06:e3:77:35:
c1:e4:a1:14:02:ba:b8:07:e4:08:8c:41:9d:5c:ba:02:af:ce:
cf:37:a6:40:d5:75:bf:da:bc:7e:74:ae:2e:4a:6b:62:93:1c:
88:f5:5d:c0:3e:5d:37:b7:18:b9:19:38:21:3a:59:f7:54:1c:
d3:9e:07:de:0f:c9:10:a8:fc:8f:fb:ad:f7:2d:a1:8e:87:f6:
d4:fd:7d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:31:27 2025 by rpki-client