Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
File: obgXVrYRDyp1SVx0yCDg5zTuimw.mft (raw, json)
Hash identifier: iRn8sfKStzOo07qZN9CTpcTKlFg7L6lPOgrVMvFzmHw=
Subject key identifier: DE:88:0A:FF:A7:83:30:98:9C:A7:FB:C3:E1:E3:19:39:8D:C2:32:88
Authority key identifier: A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
Certificate issuer: /CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Certificate serial: 0194BC0522595BF1CF6457388AA04BFE170F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
Manifest number: 0908
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: jYkkOan7rTEgW-xkhgkb5i-JxFw.roa (hash: poFVw3UULivKuh4VYtXegnU+ipzV9NTFXG8a9hkIz1A=)
2: obgXVrYRDyp1SVx0yCDg5zTuimw.crl (hash: DNyHJrgTjfdTM6Upv6IEFucykg+5j8m9ftblnSEaASQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:22:59:5b:f1:cf:64:57:38:8a:a0:4b:fe:17:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b81756b6110f2a75495c74c820e0e734ee8a6c
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=de880affa78330989ca7fbc3e1e319398dc23288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:df:71:a8:25:92:12:58:b0:d0:60:fd:fe:8c:
53:66:27:b8:7f:86:4d:e1:1a:9c:8d:36:57:fd:91:
47:6d:b8:df:5e:c3:96:b0:08:20:1f:6c:ab:cb:4e:
81:b0:fe:8a:3a:35:0f:a2:07:f7:28:52:85:a0:34:
d4:80:a1:49:ba:b2:12:f8:3f:da:db:5b:83:6c:37:
60:65:8d:07:8d:4f:4f:0b:fa:24:84:3e:5d:32:1e:
57:ed:70:c4:1f:6d:ab:89:ef:6c:7b:95:44:cd:05:
c1:52:a1:a6:77:c4:b5:8b:fe:9f:f7:46:1e:91:4d:
f6:84:80:98:25:72:1d:86:40:0c:68:89:59:18:6f:
00:c5:c7:4b:77:3b:61:59:bb:b1:ed:fa:54:a6:96:
de:88:e6:3a:a9:14:fd:ff:98:cf:58:31:97:f8:3f:
c9:74:d4:eb:50:71:03:56:a8:32:64:d8:43:93:ad:
9f:0f:85:96:07:f2:44:b4:18:38:80:b8:84:5b:22:
59:10:62:c8:99:98:fa:6e:86:5b:e4:9f:e9:e4:78:
3d:32:ec:f8:bb:e8:fe:a4:b4:ec:24:9f:7a:85:c8:
32:e7:01:cc:1f:a0:c1:93:b0:1e:28:08:29:ef:00:
a7:76:a2:8d:c1:43:5c:50:50:cc:54:a0:77:e3:46:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:88:0A:FF:A7:83:30:98:9C:A7:FB:C3:E1:E3:19:39:8D:C2:32:88
X509v3 Authority Key Identifier:
keyid:A1:B8:17:56:B6:11:0F:2A:75:49:5C:74:C8:20:E0:E7:34:EE:8A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obgXVrYRDyp1SVx0yCDg5zTuimw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/0817cb-6dd2-4f75-8bb5-abcca2b44e9f/1/obgXVrYRDyp1SVx0yCDg5zTuimw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:31:d5:f9:f2:7b:25:a8:ce:6b:86:82:d4:58:00:7f:13:ae:
fd:e2:d7:e9:c4:f1:8a:e6:ba:17:66:e1:f6:4d:17:6d:a9:bc:
25:d8:06:ac:c0:cf:5f:e0:84:de:0f:6c:c9:7a:0c:9d:b2:58:
0d:9b:ba:a6:a9:c7:8c:a4:04:c1:92:52:55:03:f2:93:a4:d8:
dc:fa:bf:af:0f:63:79:ab:3e:5d:9c:af:75:92:6b:5c:b6:df:
da:c2:56:17:04:61:03:44:e7:69:af:59:3b:c3:7f:0c:a1:22:
cd:5c:9f:77:45:cd:9d:73:38:55:f6:e2:95:a7:2f:cd:9e:ea:
73:e5:d1:f5:26:41:52:3e:ec:bd:e2:ba:6d:09:f2:db:78:92:
68:4b:2e:ac:b9:65:62:0a:ee:f9:fa:13:f5:9e:a3:e5:85:80:
e7:7d:25:00:4a:8a:cb:bb:eb:b9:86:13:3d:40:54:8c:e8:7e:
66:b2:2a:e5:a9:74:2e:d6:89:b4:05:b3:a1:bf:6f:20:31:75:
a6:54:af:32:e3:e2:46:8e:c1:42:a4:d3:57:42:51:e1:71:9d:
08:67:28:be:10:04:5e:bd:29:b4:fb:e7:8a:41:cc:52:83:f3:
aa:85:56:54:6c:96:a9:85:13:c7:f1:2a:34:3b:26:75:c1:e2:
b4:aa:0c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:26 2025 by rpki-client