Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
File: 0OLajokWkOcem4WVCX2nxgZNpgI.mft (raw, json)
Hash identifier: xUvMn4z+fJ7Oo4DQe3EolNEBTCA1rsTML3woTHOyb0k=
Subject key identifier: A3:81:0C:22:E6:16:A9:76:33:AF:3B:A2:B8:63:2F:7A:62:27:AD:AF
Authority key identifier: D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
Certificate issuer: /CN=d0e2da8e891690e71e9b8595097da7c6064da602
Certificate serial: 0194BC05227009DBF4B230541E5DA83C4268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
Manifest number: 029A
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: 0OLajokWkOcem4WVCX2nxgZNpgI.crl (hash: IP7vM1IsDTedVdYP6Xy/ecof8Uiz9auNZQBS1A/WSoQ=)
2: 1-G5CHegTogIfJOzVSZ12ruOsd1A.roa (hash: WZqBI8pDVZog2pYstlONiupHgRaN9/CPeYVUUMcxtjo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:22:70:09:db:f4:b2:30:54:1e:5d:a8:3c:42:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e2da8e891690e71e9b8595097da7c6064da602
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=a3810c22e616a97633af3ba2b8632f7a6227adaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:9b:53:8f:ac:6f:61:e7:03:ef:53:ee:b9:
12:d8:40:cf:73:9b:cb:d5:50:24:be:d0:1f:61:96:
07:b0:77:49:79:be:1e:87:cc:20:ca:22:b8:29:56:
b0:5b:e2:ec:bd:32:95:fa:18:c1:50:00:59:00:42:
e0:3b:15:62:4e:f4:bc:29:04:16:e3:db:ca:3f:d8:
68:ee:0d:8c:4d:a6:b3:50:f6:81:1a:36:70:62:dd:
a3:8f:3f:18:62:b0:7f:16:cb:1b:3f:71:23:51:f5:
69:4f:ab:b9:f6:6a:dd:9c:b8:78:79:4c:19:2b:e9:
c8:a6:fb:f4:e2:27:9a:e1:e4:37:69:6c:33:80:04:
e7:83:e3:3f:16:ca:96:19:31:48:ca:a9:d8:84:64:
2f:01:01:67:96:a5:37:67:e7:2f:a4:b9:9b:2e:d1:
d0:7c:0d:0a:85:9c:67:80:92:64:59:87:23:65:ad:
ad:38:30:ca:dc:ee:a2:1d:f2:41:7b:16:eb:db:17:
da:f1:1d:7d:9f:d2:d8:22:2e:bd:ee:6f:bb:7f:24:
93:40:a1:9d:40:23:24:29:66:83:24:63:60:e1:ac:
03:89:7d:57:94:bd:08:f6:21:aa:6e:50:22:d9:b1:
46:ab:22:ca:1d:52:08:b3:94:3c:19:4e:e3:b0:53:
00:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:81:0C:22:E6:16:A9:76:33:AF:3B:A2:B8:63:2F:7A:62:27:AD:AF
X509v3 Authority Key Identifier:
keyid:D0:E2:DA:8E:89:16:90:E7:1E:9B:85:95:09:7D:A7:C6:06:4D:A6:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OLajokWkOcem4WVCX2nxgZNpgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f06e2c-97b7-4628-8b69-ec2fbafe4d91/1/0OLajokWkOcem4WVCX2nxgZNpgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:aa:98:86:b2:93:21:9e:dd:ea:cb:4d:b7:ce:fc:80:8e:19:
1a:66:ab:16:0d:fa:0b:36:a8:08:82:82:31:fe:0a:65:ee:ba:
d8:ee:cc:14:51:23:4d:23:bf:94:0f:19:59:40:0c:ea:bc:7f:
23:00:4d:60:47:8f:95:17:f2:28:9f:f8:ba:05:87:4c:e1:e0:
34:40:7d:28:c9:47:6a:26:b2:ea:31:cc:75:b0:8b:e2:6e:d4:
b7:3c:bf:7f:67:43:76:be:dc:04:de:ca:b4:48:86:39:f8:d3:
f1:69:7a:37:86:e9:60:6f:21:ea:04:37:ff:d3:2f:95:75:f4:
b2:5d:f6:26:29:58:f1:76:55:76:8e:fd:69:67:39:a5:de:c6:
35:5d:e1:53:3e:07:c1:b1:53:d6:f2:65:83:f9:61:be:33:30:
c8:ff:c6:63:28:ef:9f:b1:de:b4:b2:ed:c9:65:ad:89:1f:21:
b6:87:88:4e:36:32:f5:74:bf:f3:92:b3:c8:33:04:e0:8f:d0:
82:40:58:d6:cb:4a:fe:bb:03:3b:d3:11:aa:57:8d:66:df:e0:
bc:81:a2:d5:63:d4:ce:07:8b:13:cb:be:92:31:ad:e5:9d:e8:
20:70:77:ad:21:43:4c:5b:7c:ef:6b:16:aa:66:06:bc:52:5e:
3a:35:aa:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:48 2025 by rpki-client