Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
File: oum7stw2HxSLUadQgNjgtPeKH4I.mft (raw, json)
Hash identifier: vT7JCiPY7dJHdI14kIGm01GR4sGEIychYQJe3o54+o8=
Subject key identifier: FB:05:7C:36:E7:11:77:2B:19:AA:D9:C1:C9:D7:4B:D6:00:40:D8:9D
Authority key identifier: A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
Certificate issuer: /CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Certificate serial: 0194BBCEB2192BCABA9DE6743999EB948FD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: f_wGHHPcfp4gWwowZYMDfcJ1Mog.roa (hash: An25AbmP3oyWt72GnalaU42kIKjPDFrI7RZhZqfvEO8=)
2: oum7stw2HxSLUadQgNjgtPeKH4I.crl (hash: BMtFmXpK0zo92ZGiGjIdWKqauUXKrqwU3G2E92W4Mow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b2:19:2b:ca:ba:9d:e6:74:39:99:eb:94:8f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2e9bbb2dc361f148b51a75080d8e0b4f78a1f82
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=fb057c36e711772b19aad9c1c9d74bd60040d89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c0:8b:cb:1a:35:f6:0e:23:6e:e9:3b:41:dd:
21:40:95:9a:7b:56:26:54:ef:2f:a8:a7:9f:de:92:
21:ad:1a:31:e9:6d:7f:ed:f2:30:c7:d2:db:d1:55:
c8:78:93:69:56:99:e8:c7:4e:b4:e9:02:3c:a2:8b:
0b:29:6d:c3:25:8f:d0:db:eb:62:96:55:e9:92:2c:
fd:fd:13:c8:1b:b8:21:9d:9a:71:69:b0:0d:a9:78:
9e:61:dd:08:23:1a:5c:e7:97:41:f3:5a:63:5f:96:
14:93:30:e5:17:13:b8:b0:2b:56:33:d1:8d:19:f8:
e7:9c:30:b3:8c:bc:6e:7d:4a:f9:0b:6b:d8:2d:49:
65:10:4c:c2:fb:76:ef:1a:06:f7:ce:e5:2c:0b:8a:
7b:80:31:ae:3d:49:9e:99:9c:ee:de:52:34:8d:43:
30:ad:6b:63:72:ed:8d:41:83:06:77:5d:07:79:8b:
db:f2:38:bf:52:c3:5a:0d:81:3c:30:45:cc:53:48:
74:ad:2b:5e:3a:0d:75:48:d4:ef:61:7f:89:32:ba:
95:c2:9f:1e:f0:61:e9:4f:3f:db:19:7a:5b:bc:b6:
07:22:4c:15:2e:48:7a:fb:7e:e1:1a:f0:31:d1:52:
8f:a6:2b:b8:bb:69:f7:52:df:f9:e6:16:79:0d:49:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:05:7C:36:E7:11:77:2B:19:AA:D9:C1:C9:D7:4B:D6:00:40:D8:9D
X509v3 Authority Key Identifier:
keyid:A2:E9:BB:B2:DC:36:1F:14:8B:51:A7:50:80:D8:E0:B4:F7:8A:1F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oum7stw2HxSLUadQgNjgtPeKH4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/aa9922-e92c-4105-8365-040129aeb0bf/1/oum7stw2HxSLUadQgNjgtPeKH4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:83:7d:8b:d3:b7:d1:b8:c8:e7:27:3f:b8:86:c2:d5:f6:8d:
03:23:e0:17:6c:36:e3:39:97:8c:c9:ce:df:08:a2:9e:7f:10:
a8:84:bb:41:38:8e:64:74:17:3a:c0:23:7a:e4:7a:74:66:14:
18:33:a3:97:94:e5:a3:8e:da:e2:5a:2f:49:f9:c1:ea:0c:7a:
ef:c5:8b:69:f1:f3:99:df:78:f5:95:78:ac:fb:d3:e9:cd:74:
77:26:a0:e3:8b:9c:54:79:3b:86:4b:08:31:f5:8f:65:ff:37:
59:23:51:dd:6d:c5:cf:6b:8d:2b:9b:c1:e3:cd:d8:1a:a3:8b:
86:4a:35:c3:5e:aa:f0:8e:8d:41:b7:3b:6f:4e:ec:4f:7c:e4:
57:b5:18:7c:4e:5a:3c:a1:2d:31:58:0d:34:d0:44:0a:cb:52:
24:21:91:f8:64:06:91:63:ed:d2:0e:be:0b:45:50:c4:d8:1f:
44:50:44:73:6a:5e:40:29:21:ef:e7:13:61:7d:58:58:5a:b2:
bc:da:3e:ea:d0:06:92:3f:14:4c:87:c3:59:22:fe:fd:ab:bf:
26:50:4e:47:93:6a:c2:e7:c7:a5:12:02:78:17:e5:c8:95:bd:
ee:45:9d:25:80:92:00:a5:83:f0:46:54:95:78:88:66:9f:ab:
90:2f:59:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:13 2025 by rpki-client