Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
File: o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft (raw, json)
Hash identifier: yFChIEecGCnCv22YgPhEP238+yPjBTx9oInfmOAg9vE=
Subject key identifier: 51:AB:9A:2B:90:E6:F9:D3:0A:F4:A0:0D:38:C5:2A:37:8C:21:AA:67
Authority key identifier: A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
Certificate issuer: /CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Certificate serial: 0194BC3CBF3E44CBA9A818C7C2610E37FE26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
Manifest number: 0F2A
Signing time: Fri 31 Jan 2025 12:01:25 +0000
Manifest this update: Fri 31 Jan 2025 12:01:25 +0000
Manifest next update: Sat 01 Feb 2025 12:01:25 +0000
Files and hashes: 1: 29zZRujAn8DGdUDp5utUkmVO-uo.roa (hash: pdGXIGI1eFN6x7W6e3AuHm1Q9j3iH8yigptYTm3P3QA=)
2: o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl (hash: EEHDmXWDKq+3HS6R/nCWEnGry6EUCtF1NHwZg6K1wdw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:bf:3e:44:cb:a9:a8:18:c7:c2:61:0e:37:fe:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3688305fed5c99760aec7c894c6ba21e4ead675
Validity
Not Before: Jan 31 12:01:25 2025 GMT
Not After : Feb 1 12:01:25 2025 GMT
Subject: CN=51ab9a2b90e6f9d30af4a00d38c52a378c21aa67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:af:bd:33:8a:a4:8a:6f:f4:c7:e7:d7:be:7b:
9d:b2:80:e4:22:9d:fb:7f:46:f9:c4:44:87:6b:a0:
4d:9e:4e:ad:44:94:ae:36:f4:ac:63:fb:18:5a:01:
15:ec:4d:47:d5:2f:e0:9a:30:33:46:2c:55:60:5e:
24:24:bb:8b:5d:b4:91:3c:ed:2b:96:1a:26:47:cd:
17:33:b3:e8:e2:88:41:e1:07:67:e8:f4:87:20:9c:
e7:2c:e6:e3:ba:c1:be:d6:de:a4:73:8b:14:fd:e9:
19:34:aa:86:2f:75:b2:bb:7d:eb:a1:ac:61:05:f6:
d9:7d:10:10:35:c6:67:94:2a:b5:c9:c0:f4:07:9d:
db:2e:c1:92:ac:7e:8f:8d:e8:31:43:8f:4e:34:e1:
24:72:42:91:46:72:e0:f2:b9:e2:5b:2c:51:69:cb:
f6:13:a0:31:55:33:7d:5a:55:22:fc:6c:5c:74:7c:
2a:9a:67:60:c1:0d:73:89:66:e9:32:2c:9e:59:81:
fc:3d:e4:5a:c0:26:27:bd:87:c4:c4:1b:b0:d8:00:
db:6c:bf:ac:c3:c8:3d:eb:05:ed:b4:ba:7d:f0:3a:
77:54:a4:d6:18:ef:c6:1b:b0:f8:36:83:09:51:8c:
bc:f9:5c:ff:45:16:a1:c0:32:1b:c7:f6:b1:b1:81:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:AB:9A:2B:90:E6:F9:D3:0A:F4:A0:0D:38:C5:2A:37:8C:21:AA:67
X509v3 Authority Key Identifier:
keyid:A3:68:83:05:FE:D5:C9:97:60:AE:C7:C8:94:C6:BA:21:E4:EA:D6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2iDBf7VyZdgrsfIlMa6IeTq1nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/f9e257-0162-4def-96ad-dec9796f6223/1/o2iDBf7VyZdgrsfIlMa6IeTq1nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:87:82:61:5a:f7:d0:a2:45:84:1b:b5:81:68:bb:13:cd:d9:
9f:56:23:ed:aa:95:82:3e:16:f4:4e:39:c1:d7:01:42:c1:ce:
b3:4d:97:27:9b:aa:f2:35:58:0c:4d:8e:5c:a7:30:30:7e:2d:
29:83:84:0f:79:eb:e0:68:01:b4:80:b1:25:c2:d2:e5:6b:43:
0d:42:aa:ca:d9:9d:f4:5a:9c:fd:ac:dd:a2:cd:90:70:70:f9:
5c:b8:71:0c:72:bd:20:25:13:75:84:55:d2:6c:61:74:01:8f:
a3:f4:b6:28:78:d6:80:f1:31:c0:06:0a:a9:2a:b5:13:98:1b:
6c:55:37:fb:66:52:06:e3:5d:73:6b:e9:a5:4a:dc:20:02:db:
a3:31:99:93:49:d4:23:f3:7c:a0:52:25:a5:20:1f:8b:61:20:
89:b0:ae:d2:b5:f6:a8:b7:d7:f9:53:7c:2f:b6:ee:6d:63:ae:
ed:58:90:d1:c7:fa:7b:6a:24:79:03:fc:a5:4a:be:f4:b8:38:
2d:98:1c:09:ee:33:cd:95:99:8b:58:39:af:ba:97:cb:f7:15:
5c:75:a2:bd:73:3e:a2:7b:8c:b2:03:6b:02:88:ab:3d:bf:44:
b0:4c:16:79:69:9d:df:4a:b3:cb:61:44:e1:5e:60:ca:2c:8a:
a7:10:a4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:52:33 2025 by rpki-client