Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
File: oI5By_3vrQuw4pckeswaIB0t9KA.mft (raw, json)
Hash identifier: aQpFEhiFmjnjM7fGa64oYI3QtiW+3bIRn1RKh2nBiUk=
Subject key identifier: F5:B5:E3:FB:74:4D:9F:56:F8:3E:CD:F5:34:FC:26:6C:B6:E9:07:0E
Authority key identifier: A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
Certificate issuer: /CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Certificate serial: 0194BC7338C4FE8E216E5C70D07129ACE739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
Manifest number: 0FBE
Signing time: Fri 31 Jan 2025 13:00:55 +0000
Manifest this update: Fri 31 Jan 2025 13:00:55 +0000
Manifest next update: Sat 01 Feb 2025 13:00:55 +0000
Files and hashes: 1: kaGph50MrnZk9_Ae5Md0JZHkmEM.roa (hash: KOuavh84jne4Oayx4KsSyaMHm/sNkEEba6rU0bPnEbc=)
2: oI5By_3vrQuw4pckeswaIB0t9KA.crl (hash: kngORABW+1jEFProx/HhTmbRt7U/rM6yiSMlrcL853M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:38:c4:fe:8e:21:6e:5c:70:d0:71:29:ac:e7:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0
Validity
Not Before: Jan 31 13:00:55 2025 GMT
Not After : Feb 1 13:00:55 2025 GMT
Subject: CN=f5b5e3fb744d9f56f83ecdf534fc266cb6e9070e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:40:58:32:4f:fe:b5:82:31:d5:b9:07:e6:6f:
fa:d7:04:28:c8:15:41:3c:5d:17:0e:c3:0c:b3:4b:
f6:fd:2a:ea:f0:42:a4:72:5a:00:44:32:f7:dd:bb:
df:ae:c6:9a:d8:12:42:88:3a:d6:eb:74:0d:26:0c:
bc:6d:b1:b3:78:ee:00:96:38:8d:20:82:82:13:a9:
44:9c:41:1b:fb:62:b3:af:11:4a:17:80:1a:17:ea:
d7:46:f7:d4:13:ec:41:ec:46:2b:48:ca:3d:13:de:
89:2c:19:df:a8:d9:63:98:35:be:57:07:91:d9:2c:
19:60:2c:61:4f:f8:25:bb:73:5f:9d:49:10:71:5f:
54:50:8d:a9:ac:fc:6f:50:38:c2:5d:a6:73:a0:00:
10:53:3e:c1:4e:ee:0b:58:b6:41:52:d7:5f:9d:a9:
6b:fd:29:51:6a:f7:dc:47:56:6c:7f:6b:b2:fc:b7:
da:f5:d5:7f:06:e0:92:2e:c1:31:67:e6:7d:87:35:
db:65:6e:be:fb:23:42:ed:b3:97:23:dd:e4:a4:c9:
05:96:ac:ce:5d:08:f0:c0:d1:14:b3:16:d3:94:08:
9c:e1:dd:84:d0:e7:f9:5a:3b:f3:51:65:c4:f3:88:
52:89:ed:cb:11:ac:04:2f:27:c5:be:e8:0c:88:82:
59:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B5:E3:FB:74:4D:9F:56:F8:3E:CD:F5:34:FC:26:6C:B6:E9:07:0E
X509v3 Authority Key Identifier:
keyid:A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:de:d7:f0:2e:29:44:9c:67:1c:9a:56:5d:cd:a8:9b:34:dc:
5c:04:73:28:30:7d:ad:4d:5e:15:a9:41:70:67:af:ca:0d:db:
62:c4:9e:dd:f4:0e:8b:4b:ae:e7:e0:b6:1a:88:cd:cd:dd:2f:
a4:5f:59:14:d8:06:a5:5e:1b:d7:4b:95:72:c4:3d:12:64:3a:
32:b5:08:b6:a9:c7:63:1f:32:b0:53:00:fe:3e:8e:ee:a4:48:
9f:e5:dc:c9:b6:1b:c3:35:27:ee:d7:36:d9:f1:58:db:b0:d0:
4f:0b:17:46:51:ee:b9:3e:7c:66:3c:cd:fb:e5:c0:d7:df:38:
5a:96:b0:c6:db:5d:1a:31:2c:8a:53:e9:6f:f5:ee:be:b2:92:
51:60:85:85:75:57:34:cc:b5:5a:02:95:8f:7f:e6:20:00:19:
08:18:23:43:7b:c2:7b:f7:10:65:e6:ea:20:25:02:86:62:d9:
6a:14:19:60:b0:26:a2:30:fa:ea:03:6f:f8:2a:3c:4c:4b:7e:
7a:97:5c:6e:fc:e0:d5:84:55:5d:55:6a:c3:93:b9:bb:40:2b:
31:01:2c:43:a2:dd:da:3c:25:7f:37:e5:69:5c:18:f2:cd:3a:
26:dc:85:2d:27:1f:a7:fe:f3:29:de:e1:72:cb:07:f8:7c:44:
bb:f7:15:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:01:16 2025 by rpki-client