Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
File: oUEfVodbTLeljO5stgfuJRy9-YA.mft (raw, json)
Hash identifier: tFpZ5/ka3pjEnPSAImAHcBH5rQk4Iz5Fy6aO8ceXOSs=
Subject key identifier: EC:05:C9:E1:A7:91:9B:5F:F5:38:88:81:4B:D3:03:2C:BB:99:13:0C
Authority key identifier: A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
Certificate issuer: /CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Certificate serial: 0194BC3BD889BAB9A265B658E55F7B201252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
Manifest number: 0970
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: 6uRuEC7JoCUPPlfzfq6SUK7xUvo.roa (hash: zYNo9c9drvS3wANkMRjjuuNlAVle3l3m/ueKMaH/pb4=)
2: oUEfVodbTLeljO5stgfuJRy9-YA.crl (hash: yd367xNfQXnb31/8VOr9mwWuyOFqkaKPsY/aFvQtSdM=)
3: xwYkLak0tseV-cTQ1ic58KIpdCM.roa (hash: wf8j4jNXQvlA5zsVKqv6eAbllDMh+Scu3BghD9yeir8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d8:89:ba:b9:a2:65:b6:58:e5:5f:7b:20:12:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1411f56875b4cb7a58cee6cb607ee251cbdf980
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=ec05c9e1a7919b5ff53888814bd3032cbb99130c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:22:d4:2e:e9:9e:9b:2d:aa:fa:23:78:19:
a5:28:1d:85:64:5e:85:68:61:f3:68:7b:e7:34:8b:
d6:81:87:b5:a9:3b:91:de:bc:ad:5a:7c:60:f9:1b:
cc:49:39:a5:89:10:5d:ea:88:1c:6b:50:6d:84:00:
ae:ba:30:f4:29:bc:77:72:c6:e9:51:2e:74:1f:1c:
3e:ab:cb:eb:ca:d8:1a:33:98:fb:ac:7f:5a:f4:2a:
ff:8e:ce:a4:74:6c:42:6b:10:aa:f6:82:5b:b5:b3:
9a:86:54:cf:8e:19:b1:15:09:46:2f:77:81:85:45:
69:ef:dd:da:4d:6c:0c:8a:ce:0b:bf:87:3c:a4:eb:
a7:4a:83:17:ab:53:21:dd:f5:ba:c1:40:0d:6a:bd:
bf:76:07:23:c7:03:b6:30:eb:ad:eb:ec:da:af:52:
6e:71:79:ac:65:73:45:e8:69:82:7d:05:07:c0:11:
6b:2b:c7:32:e5:36:23:08:df:c2:19:99:da:cd:bd:
b0:71:79:5f:16:a7:e6:e8:2b:50:33:04:5d:6b:72:
91:20:31:c9:4f:d8:80:86:ae:7c:59:0d:cb:b2:51:
3b:18:32:cb:09:c5:3a:4d:3d:fe:bf:e0:31:91:42:
3a:f8:b7:81:34:ae:e9:fd:72:af:c0:e4:c4:98:a1:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:05:C9:E1:A7:91:9B:5F:F5:38:88:81:4B:D3:03:2C:BB:99:13:0C
X509v3 Authority Key Identifier:
keyid:A1:41:1F:56:87:5B:4C:B7:A5:8C:EE:6C:B6:07:EE:25:1C:BD:F9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUEfVodbTLeljO5stgfuJRy9-YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c98b87-1857-44bd-8b0c-78d833e4146a/1/oUEfVodbTLeljO5stgfuJRy9-YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:44:37:8a:ca:1e:f7:70:46:24:17:db:c8:86:4c:eb:33:e1:
ea:ef:b3:2e:99:c2:79:6f:30:c4:9b:29:06:12:38:38:d4:88:
cb:97:91:3a:4b:36:15:a6:b9:5d:f7:ad:58:11:4b:bc:be:0a:
24:de:29:f9:90:aa:e7:88:d9:21:43:78:7f:e2:34:77:70:30:
97:fc:88:79:d3:51:ce:9c:db:49:95:92:aa:d6:73:4d:09:6f:
1c:80:90:5c:01:d1:2d:03:35:a2:f5:9d:40:b9:28:74:ad:0c:
c7:0a:ad:73:5b:40:cc:0c:4e:14:3a:31:24:12:11:38:4e:2e:
2a:cb:9f:4a:a0:02:7f:af:79:49:04:3a:d8:fd:ca:16:4a:9d:
d4:4d:c6:48:77:ca:c6:1c:f5:b9:26:b6:8c:ec:e6:2e:e6:8a:
32:92:e4:09:8d:b6:06:8e:37:0c:bd:2f:ab:f6:ea:22:f2:89:
6f:ac:8a:49:b5:7d:e8:fc:06:cf:6b:62:53:95:e2:46:65:6a:
2d:6f:83:98:b9:89:13:03:e6:bc:d7:40:8f:4c:11:6b:d6:87:
a5:17:9b:7f:fc:5e:5b:a8:e2:16:47:8a:ea:92:b5:49:6a:c1:
e0:3f:f3:83:21:4b:9b:f8:6c:5c:a9:51:0c:38:10:72:98:fb:
71:d8:ca:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:58 2025 by rpki-client