Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
File: oKFURB35Yj7rWhlhONIb71gktEE.mft (raw, json)
Hash identifier: p+ndL91yrv/BYjCs8mv8i7olZK4Bu7HRy7GlM4Sx7iU=
Subject key identifier: 21:76:A9:3A:A9:8A:79:A9:31:AB:6D:F8:9C:64:90:A5:84:55:1A:C7
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 0194BC04D628BC460CA0C8C60A517C78F4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 11:00:20 +0000
Manifest this update: Fri 31 Jan 2025 11:00:20 +0000
Manifest next update: Sat 01 Feb 2025 11:00:20 +0000
Files and hashes: 1: cqMIZbZG_XjFMjyio64LoSb9JEM.roa (hash: xBYH5ZrjKUuPI62l0z0GQBA4FW4u95fkTkxgETr+i9Q=)
2: oKFURB35Yj7rWhlhONIb71gktEE.crl (hash: 7z2nYCWGlmX2cs0cMJaq29Clt1R/dRiNwLJ3ypjLtdM=)
3: wlqxE5iuLQB304PN7hVNM4_5h14.roa (hash: xdHQ2e13Tky6CrFmxy2+w5Er25IzDfQGHtx/iyo+wSA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d6:28:bc:46:0c:a0:c8:c6:0a:51:7c:78:f4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Jan 31 11:00:20 2025 GMT
Not After : Feb 1 11:00:20 2025 GMT
Subject: CN=2176a93aa98a79a931ab6df89c6490a584551ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:ce:90:c9:05:90:6f:24:bc:5b:f9:03:a7:
42:05:57:9c:96:ce:40:7d:91:75:61:e9:40:6a:1d:
44:90:24:3c:a7:5c:5e:4e:1d:e8:2d:e4:3a:bd:0e:
39:96:32:9e:86:04:35:2c:9e:13:f9:8a:4c:83:1f:
43:e2:d9:d8:3c:17:e3:ee:c7:2a:af:70:02:85:f7:
db:7f:a4:75:19:4b:8b:32:2f:f7:9d:5c:67:23:0a:
dd:4e:15:5c:94:a4:f0:6e:bc:34:5d:2f:b8:b9:48:
29:f5:0c:b2:ba:18:b2:24:c4:c0:f3:0b:d0:f3:60:
42:f1:5c:f0:31:a4:15:55:26:b4:28:b1:8f:06:c7:
fe:7b:a0:b6:26:a2:5f:d5:9a:6d:b2:69:e5:2b:e9:
08:b5:21:81:19:f4:6b:83:69:25:b7:53:9e:17:00:
a9:84:3c:d2:41:10:34:79:80:01:e8:03:57:43:75:
99:2e:af:57:86:21:51:88:58:dc:ea:f4:e0:99:62:
fa:fb:b2:5f:2e:4f:c0:7f:5c:04:95:91:3c:da:9a:
81:9d:f8:e4:04:ce:4d:0c:c1:2a:d4:76:13:98:c2:
81:72:26:55:59:6d:52:25:45:e1:d5:83:39:ea:a5:
2c:fd:41:ee:b4:66:36:8b:2a:e3:0a:06:44:fc:b1:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:76:A9:3A:A9:8A:79:A9:31:AB:6D:F8:9C:64:90:A5:84:55:1A:C7
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:71:9f:4a:98:bc:10:b7:de:ae:af:e4:21:2b:ef:76:58:54:
12:2e:15:87:5a:5a:73:f5:a2:2b:db:18:00:1c:05:35:44:55:
0c:95:e6:6b:9f:ba:9a:21:9f:e6:87:17:e8:62:bd:bd:43:d1:
63:58:6b:d4:ec:e2:d2:38:da:ce:65:1b:55:35:f5:00:5f:d5:
6c:12:33:5a:b5:5f:49:aa:f4:51:e6:21:8d:2f:a7:61:a3:ef:
fd:15:b8:49:f0:fb:82:2b:23:81:29:b2:5d:00:72:1f:d5:89:
83:d5:dd:72:82:b8:31:46:08:d5:56:77:d7:ad:1c:14:37:b6:
11:83:a6:45:38:d6:51:3f:52:f2:a2:54:b8:89:2e:df:c6:71:
e9:eb:38:c4:53:53:9c:4c:3f:76:ac:a8:e6:a4:34:d5:6e:c8:
88:c9:7c:a2:4c:98:98:bc:b0:7c:f0:c9:38:38:95:25:d3:b7:
1d:87:2b:69:09:31:f5:68:c9:2e:50:d6:eb:83:a8:a8:3e:2c:
c4:74:93:c5:54:c7:41:18:c6:df:55:bc:5a:fb:6e:16:d1:f2:
2e:da:ae:38:d5:55:dc:e4:94:a1:e0:bb:5b:fe:1d:f7:a9:77:
04:96:ed:68:a8:8b:9a:6b:cf:0c:57:07:81:92:a2:47:f3:d2:
b2:3d:71:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:22:56 2025 by rpki-client