Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File: oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier: eou9fcj/YtT9a2goxV2Eiews/RgbXkc1TdCEMN53PmI=
Subject key identifier: 86:93:B8:B1:70:B1:D2:37:0E:9B:F6:BF:93:C7:7B:B7:81:63:09:FD
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer: /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial: 0194BC3C1285BEAB034BB168E09356CBB23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number: 0C05
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: o9hMDi-VrcUI4pB3FZBa-_jIwnc.roa (hash: avmrJ2rsXtwjFy7tu4gv+fivfWYGTorP5jQUfY03fLE=)
2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: oipF8IWfl95jH3Fwk8uMSKhgfuBNqXjkc5ZiyyP9/k0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:12:85:be:ab:03:4b:b1:68:e0:93:56:cb:b2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=8693b8b170b1d2370e9bf6bf93c77bb7816309fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:79:88:f1:9e:40:e5:2a:28:b4:1e:ab:b4:6a:
13:a2:48:71:11:75:fd:b6:d5:c9:d6:da:62:f4:45:
01:f3:d6:7f:b1:8c:58:10:ae:b7:5e:bd:98:14:b1:
2f:63:8b:15:ba:55:27:8a:bb:e0:5a:d7:92:6d:d6:
dd:28:4d:d1:87:82:de:9e:d9:6c:2e:5f:cf:c0:b3:
96:38:d8:d1:36:0e:f2:0e:c5:e7:3f:cc:78:84:8b:
a9:62:9e:cd:95:3e:b3:34:26:3a:11:ce:90:14:d9:
66:51:ee:be:ef:c1:6e:09:68:fa:34:34:04:6c:9b:
d5:73:ec:86:be:24:ac:c4:ab:60:b2:fb:84:9a:b5:
a5:4c:ff:ba:83:f9:29:8f:89:40:4f:97:32:f4:41:
e4:98:c2:7a:90:08:8d:22:c0:bd:1d:ae:4f:7b:22:
34:dd:b5:a0:e4:06:1a:32:94:c0:c7:c1:e0:4e:8e:
e9:d3:11:f9:b0:f4:55:07:19:01:9b:e5:30:e4:dc:
1b:43:e1:77:29:af:08:59:bd:df:8e:7e:a6:4c:03:
a2:80:22:10:0e:2f:b5:1b:84:49:c4:b2:07:80:8e:
88:7b:4e:2c:5d:14:43:0d:21:e9:41:77:98:b6:22:
e1:e6:ad:1b:ce:6f:e6:bd:42:61:2d:93:fa:93:29:
8e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:93:B8:B1:70:B1:D2:37:0E:9B:F6:BF:93:C7:7B:B7:81:63:09:FD
X509v3 Authority Key Identifier:
keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e8:51:c6:34:c3:b3:a5:fb:43:03:e5:a0:c1:b8:f5:a7:d7:
32:b8:5a:d1:49:72:90:80:c0:c6:ab:62:12:cb:e8:59:30:cd:
fe:97:8f:8c:61:40:b5:47:bf:a7:22:41:0c:0b:ec:7d:05:77:
b1:5a:44:f6:20:dc:74:40:62:a8:79:6e:5c:dc:8b:71:da:20:
13:c9:a2:03:a5:41:3c:74:a6:d2:90:31:e6:95:6d:5c:0f:48:
8a:fe:13:e2:c4:55:32:df:df:40:e6:59:62:f1:20:e1:fe:24:
50:72:fc:d2:ed:d3:33:34:88:ef:bd:60:51:db:37:cc:45:eb:
e9:81:f1:a7:58:b1:01:78:bc:53:82:21:aa:a5:c2:19:75:74:
4e:50:4d:1b:a1:51:38:04:fd:5f:62:97:7b:98:3e:3b:eb:3e:
62:58:bf:db:db:8d:42:7f:49:bb:80:5b:45:2d:db:1c:13:ac:
a5:38:90:1a:db:01:9b:06:cd:25:76:be:f9:ae:31:72:5f:40:
4c:84:d9:d0:b3:48:30:28:f1:49:69:86:15:65:e0:d1:a6:e1:
37:31:c7:15:bf:8b:ce:f0:2d:ec:e3:b8:b3:97:1f:c7:54:79:
a8:e5:f5:62:f3:fa:15:cc:b1:cd:38:f0:b9:cb:ad:1c:3c:39:
66:f4:83:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:52 2025 by rpki-client