Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
File: OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft (raw, json)
Hash identifier: YOKfc9PiVhBUi/+Nf6+DOkhkr9J8EXh4CHbjOH0oNlY=
Subject key identifier: 52:32:F6:3B:1B:79:79:A5:16:58:D8:05:11:3E:95:48:FE:13:CC:F4
Authority key identifier: 39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
Certificate issuer: /CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Certificate serial: 0194BD4E751002AAD90750A95FDDCDC3539B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
Manifest number: 19
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: HAUk0L8nWB16tKZ41rvifWUUlnM.roa (hash: z7P8z3hdUqv0dJQpV8Dg51dK3XAE9P4Hf5LV3YuSIpA=)
2: OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl (hash: KbLIffnPuyxfysMhLxQMIBWULP0hEfU67YxDfQ0SMX8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:75:10:02:aa:d9:07:50:a9:5f:dd:cd:c3:53:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a4603b245b1d20849df88f16ee370cc0b4390d
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=5232f63b1b7979a51658d805113e9548fe13ccf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:db:04:e2:e6:2b:8d:80:2b:36:20:70:56:f8:
bb:dd:34:11:c4:ab:a8:21:f9:71:f3:4a:ca:a1:66:
57:30:7c:0b:79:bd:2b:ed:a0:1a:1b:41:08:4e:f0:
b2:cc:5a:17:97:f3:85:37:57:57:ec:43:96:f5:83:
ea:d0:c7:fd:f0:34:1d:25:bd:9e:7c:30:ed:00:b8:
f3:95:69:a5:e0:f9:49:52:d7:c9:4e:69:b7:d3:5a:
cc:b8:49:83:d6:ac:4e:40:2d:34:0a:cd:0b:72:c3:
1d:44:1e:b6:49:51:c3:fe:02:b5:67:96:db:d3:ba:
69:a5:1c:c4:27:a3:79:c8:44:c0:0a:5b:39:1c:1a:
e3:c3:49:f4:25:48:6c:e8:80:54:5e:9a:46:f7:e7:
92:08:04:9e:69:68:f5:46:40:e8:46:16:e1:3f:82:
18:f2:a0:ae:4b:19:d9:75:12:33:4b:41:7b:ef:17:
b2:62:83:a0:0c:3d:1f:2e:56:47:25:6a:9c:a9:01:
24:58:de:26:3d:d2:b8:b6:b1:fe:aa:f4:c1:d3:b9:
f0:50:01:88:49:d4:76:b2:f8:af:57:11:bc:6e:fb:
3c:60:8c:c0:97:01:e5:1a:0a:b5:fd:ae:b4:d7:76:
c6:8b:9c:ff:a7:21:84:a8:49:2e:df:67:09:05:0b:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:32:F6:3B:1B:79:79:A5:16:58:D8:05:11:3E:95:48:FE:13:CC:F4
X509v3 Authority Key Identifier:
keyid:39:A4:60:3B:24:5B:1D:20:84:9D:F8:8F:16:EE:37:0C:C0:B4:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OaRgOyRbHSCEnfiPFu43DMC0OQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5e177f-5f5f-4214-a811-fcf105fd204c/1/OaRgOyRbHSCEnfiPFu43DMC0OQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:82:20:51:bd:06:f2:f1:91:7a:cb:f9:ae:1a:ec:91:1b:2c:
7c:b1:e9:17:c4:13:44:23:85:8c:4e:73:4c:b8:7a:60:fa:64:
37:54:44:72:3d:b0:4b:10:6c:b1:f0:b7:84:d1:d8:be:fa:d8:
7b:88:8b:00:95:a7:e8:95:0e:a6:dc:73:94:d5:df:8b:47:bf:
82:2d:23:cf:5d:1f:d5:fc:3c:b4:c9:99:cf:72:cf:f2:7a:0b:
56:dc:d7:9c:d1:4a:5f:4f:77:17:6f:ea:36:2d:ab:dd:b7:c1:
ce:29:8a:5c:d6:0c:2f:be:f1:03:8f:9e:56:b5:6a:57:13:b2:
c0:a4:2a:e5:6a:65:4d:8c:bf:e2:72:17:f8:40:35:b3:07:e4:
b2:60:d8:74:5d:0e:27:85:fa:f7:e7:8f:bb:9b:6d:43:05:a5:
01:65:72:5a:45:24:a7:e3:c2:2e:44:b9:48:9a:03:34:30:bf:
ee:fc:0e:f7:74:93:97:11:9a:0e:a2:3f:f8:91:83:fa:c4:10:
e5:f8:2c:a2:19:99:ae:91:60:f2:37:d9:e4:ec:31:3e:a7:db:
76:73:fb:9a:3d:e9:23:1b:94:09:00:a3:a1:32:f3:78:39:27:
c7:50:81:58:3c:5c:b3:9e:ac:44:ae:a7:5e:3d:72:01:37:a7:
4f:e1:ee:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:34:15 2025 by rpki-client