Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
File: o95MO22qWmmL8wfMORKCqymH1hc.mft (raw, json)
Hash identifier: KKFHeykiat8whA2ML5lhnxFHWOjrKEa3MxFtkmVporw=
Subject key identifier: 4D:AC:34:9B:01:59:4E:B8:A6:F7:C0:95:DC:BA:95:D8:92:47:4F:7B
Authority key identifier: A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
Certificate issuer: /CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Certificate serial: 0194BD85B1AE6C5989107FC790FB890AFC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
Manifest number: 0975
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: aaz13NJRzQSWik1cFJTAx8gsPnU.roa (hash: CsCDTEtayCoWB3zZSGEuzJzCmVEA7r5a08XAY8x/Hbg=)
2: o95MO22qWmmL8wfMORKCqymH1hc.crl (hash: 7Ux3hds0M4Ux8wHV0c6Oj4b6JHRozuZmVnk1zpusgR4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b1:ae:6c:59:89:10:7f:c7:90:fb:89:0a:fc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3de4c3b6daa5a698bf307cc391282ab2987d617
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=4dac349b01594eb8a6f7c095dcba95d892474f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2f:a1:88:82:f3:cd:58:25:3b:65:3a:79:1f:
6b:9c:09:d2:ad:45:bc:95:58:07:ca:0a:37:87:c5:
bf:92:5e:ff:5e:25:a5:1c:73:d0:9d:6b:f0:29:16:
e5:2b:73:be:5a:d0:97:c0:bb:2e:e7:1e:fc:fb:ff:
93:4f:50:63:5c:cf:41:81:09:0a:24:f9:d1:77:7a:
85:26:28:0f:4e:a4:2a:72:bf:84:4c:a1:ee:fd:b8:
a0:fd:e1:37:2b:49:36:74:9d:35:c4:b7:c9:da:95:
5c:e0:52:87:a2:3b:55:01:52:32:13:af:14:cf:12:
24:68:a9:a6:47:53:23:c4:10:d9:50:27:9a:55:d9:
32:e7:ef:d1:3e:ac:e3:91:88:a1:d9:57:83:59:15:
85:d5:f2:3b:0a:31:6f:a3:bd:9f:d6:ff:cd:e6:a1:
ec:49:fe:20:e2:66:3d:a0:01:2c:dc:c6:f2:ba:5b:
c6:2a:a7:c6:0a:ea:01:8d:13:cb:43:6f:6b:d5:ff:
03:20:29:63:d1:b8:18:f4:5a:59:e3:6f:1b:17:ce:
f8:db:f5:c0:d8:b0:b8:f3:54:08:45:e9:7b:b0:46:
22:c6:3a:c0:67:d7:a8:70:5f:cc:0c:c4:82:87:eb:
60:1f:49:c2:1f:81:55:42:e0:b7:71:f4:f6:fb:6b:
78:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AC:34:9B:01:59:4E:B8:A6:F7:C0:95:DC:BA:95:D8:92:47:4F:7B
X509v3 Authority Key Identifier:
keyid:A3:DE:4C:3B:6D:AA:5A:69:8B:F3:07:CC:39:12:82:AB:29:87:D6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o95MO22qWmmL8wfMORKCqymH1hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4c9fbe-1725-4116-9ef3-0af2c5c4cc0f/1/o95MO22qWmmL8wfMORKCqymH1hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1f:29:18:53:3f:14:d2:27:61:ca:33:5d:fa:cb:34:e8:e4:
d0:53:88:c1:d5:57:47:b1:18:2e:a5:27:90:b0:c9:e5:fe:5c:
a1:cc:1a:fc:b8:88:6b:17:a6:36:23:52:af:44:0b:56:1e:c3:
70:86:b6:fe:c5:c6:5b:bf:5c:c5:cf:d4:76:8a:76:2d:8f:dc:
f3:54:a7:58:40:29:9e:ae:e6:c4:b3:2e:8c:84:61:75:36:5c:
9f:ba:5c:f3:fb:e8:f9:73:f4:ca:dc:e7:92:31:82:5f:28:52:
4e:a9:39:3b:33:5c:44:04:e5:1a:1f:5f:93:e3:4c:7d:7c:0d:
1e:e4:7b:a3:5f:4a:35:e9:c9:01:89:94:94:fa:58:5e:10:7f:
aa:73:6f:54:ca:a6:4d:d6:d4:07:bc:21:0c:91:82:45:9c:9a:
06:92:33:61:d9:93:5f:73:21:c6:d0:53:61:7c:d6:d7:38:24:
6a:d9:f7:fa:80:82:0e:0d:91:be:64:11:80:d7:dd:be:f1:f1:
91:2e:aa:8e:47:07:ae:26:c8:1d:d2:69:d9:f3:35:7a:f2:e4:
18:e5:7b:3d:5e:b6:d3:c7:5b:0a:8a:4f:9c:61:fa:42:c8:41:
55:51:5a:1d:b3:4b:e3:23:57:00:31:6e:9d:69:a7:df:68:fe:
9b:8f:de:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:36 2025 by rpki-client