Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
File: o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft (raw, json)
Hash identifier: 2bWrei/Lw7uVBPDw2gaCS/3olNOp6V1+XF+Hiztu/Zk=
Subject key identifier: E4:DA:C7:C9:E1:8D:33:C0:BD:D9:51:A0:85:68:D2:0B:12:09:13:C5
Authority key identifier: A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
Certificate issuer: /CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Certificate serial: 0194BC04BB716600B02A36FBE8727B5B5319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
Manifest number: 135A
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: A-6dGixYiVjP5SArd3OOXzF_y94.roa (hash: dHKBVyiR8mv13Z7wTMxDvJhUaTAdj4JJSYSEmomSgRI=)
2: EdyN193XAqCuwUeh3uoqwgMp6YM.roa (hash: aMp83WD7+8DMvO0EZKm2i6yVdt39wHGmWPL1VSmKtjM=)
3: KWzqOLtIWSWtWkByhLp85FW_7rM.roa (hash: +yMm4K7E6517qc0jJ3daW8uChLhsqKi3MVBCXwIyDXI=)
4: ZMT2qJeQlu-C5i0G01EBCNd-g6M.roa (hash: Jul8wggfGDzUNFRFlHhNzs2me0GUF4GTUbIsvxzWDwQ=)
5: adPv80nsAvDoMdbWFhmbQrTYx_c.roa (hash: 4ui5pcCs9o10PJAGBjhy0LQC0IJvn6eEg11QBgbYrhM=)
6: ayrwJOZcqXwPotZkkftDNJvjVWI.roa (hash: u8hehMe3mSy7WRp8JZKZ+vW+iYZYC7RSsKKYne4ZeUk=)
7: dBRyMZmE2MJby6jWlOxwaQP0Xaw.roa (hash: n5MzTBEIB9PdMNKBfe5+OAUwctGrct8tICmAF1a6F9E=)
8: fnuqhATdgk7065LZ-MFpw_mk_Sk.roa (hash: MF0/pFOYDoQu2nRxFXy3gK33SujqFiXhgPkh2E7fsqk=)
9: mPlgxbWD56Le2xy3b_FhRsqSxsc.roa (hash: AfWfwIbPTYGoiVxVmMF6d4mso8lDoU2eXTIxJq7pZSw=)
10: o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl (hash: BiA3lbA2vtSYRyEFKsyb86MfSja60aYfUdTPYmbyy8o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bb:71:66:00:b0:2a:36:fb:e8:72:7b:5b:53:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a389e7035b08e181a341f37eda7343d23f1cafa4
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=e4dac7c9e18d33c0bdd951a08568d20b120913c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:55:16:9e:fd:1b:ea:93:ab:c2:93:44:64:40:
f7:f3:57:54:2a:17:16:00:46:1e:89:41:23:1f:69:
d4:d2:27:82:ef:d8:ae:0d:8c:89:03:fd:00:01:ce:
9f:a1:86:0a:9a:a2:71:a6:4c:5e:a5:1d:04:c7:6c:
04:bb:b9:2d:be:c4:16:a0:6d:26:f7:7e:16:d7:c8:
33:1c:7c:4e:23:b1:38:6f:6e:c6:8d:ea:7a:27:e7:
59:50:8c:34:d5:9c:84:4f:1c:11:61:60:67:26:d8:
28:81:cd:75:8c:96:e3:d9:02:ac:c6:ec:e2:30:ef:
f9:ef:be:23:de:f8:84:eb:e7:2d:7a:bb:da:93:03:
d7:34:6a:29:ca:7a:9f:fc:68:76:9a:2a:61:2e:ee:
28:79:62:37:a4:6b:df:2f:7b:31:7e:4a:1b:7f:38:
3f:17:eb:6f:69:aa:52:c8:da:e5:8f:49:8c:c5:8f:
76:f7:4e:0a:8a:d7:8e:39:de:b8:0c:69:1b:80:37:
ae:5a:48:2d:17:19:08:c9:61:93:78:b0:fd:ca:b6:
05:ff:ed:88:42:93:0f:ac:a9:15:bd:04:36:87:c1:
8d:9e:33:a5:17:e1:71:2e:d7:db:13:47:c4:b1:76:
66:8b:0e:47:dc:f8:86:1b:9c:44:c1:f3:3f:7b:4c:
91:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DA:C7:C9:E1:8D:33:C0:BD:D9:51:A0:85:68:D2:0B:12:09:13:C5
X509v3 Authority Key Identifier:
keyid:A3:89:E7:03:5B:08:E1:81:A3:41:F3:7E:DA:73:43:D2:3F:1C:AF:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4nnA1sI4YGjQfN-2nND0j8cr6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f053cd-1d79-43a1-9aab-0e72416b4dc7/1/o4nnA1sI4YGjQfN-2nND0j8cr6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a7:34:70:ff:91:11:ba:e2:9b:df:27:0c:00:34:19:64:18:
45:e8:37:f5:1e:a0:ce:e5:8b:ba:22:be:55:9c:0f:1d:87:84:
c1:b7:ac:9d:f2:7c:3d:a2:d6:b4:ad:00:c6:ec:db:8c:24:3c:
17:3e:b3:41:f4:e1:5e:7e:0f:9e:99:93:00:f6:fa:e0:e1:14:
41:78:b0:94:a3:0d:c6:cb:4e:87:e9:c4:f8:39:a8:16:1e:f5:
75:dd:51:5b:bd:fd:98:ad:64:d8:64:4f:9f:e3:70:e9:74:ef:
04:59:dd:1f:6b:17:f8:b1:9b:5a:c4:56:eb:08:58:cc:1b:df:
e3:5a:2a:aa:ac:2e:74:95:22:2d:33:6f:94:ae:e7:78:a0:f6:
a3:0d:c9:1f:50:c3:39:ca:7f:ac:1e:25:2d:ff:4c:46:35:7f:
5c:a2:0b:a9:de:45:be:8a:00:f1:dc:b9:6b:19:62:cd:6b:bf:
eb:dd:4e:e0:35:b0:c0:f5:85:75:00:c1:47:13:32:a5:62:1c:
db:a6:df:b7:fe:49:95:7c:a6:de:ac:f1:84:2a:43:ce:5c:d6:
5b:27:c7:42:c3:44:2c:94:5d:2a:8a:1a:c6:54:1b:94:f5:46:
ba:d7:a2:b1:70:f4:e0:0f:50:1e:52:55:a1:5d:ba:c4:f3:2c:
89:91:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:25 2025 by rpki-client