Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
File: oR8gWXnS-96VdWpGoPJznXgW1Fk.mft (raw, json)
Hash identifier: MJmFgLewjMNwhn+3Nb66yxncgvwu1PCrx0QEtGQmgJY=
Subject key identifier: 1F:B0:5D:FD:49:EF:B4:B4:0A:C5:9F:D7:CB:ED:D3:1B:6C:C9:6A:62
Authority key identifier: A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
Certificate issuer: /CN=a11f205979d2fbde95756a46a0f2739d7816d459
Certificate serial: 0194BD4E86B627D4A95F8027A598C273CB14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: 6vbfFj5TD4fDaSTru2yjQXF2OFk.roa (hash: oXfLAfaVHKOErMTF1H2nSkxbh4csWsQNcGxt19vZDpM=)
2: oR8gWXnS-96VdWpGoPJznXgW1Fk.crl (hash: /3Dh++gpXCCzBkbSQLLaMZPli4Gi3qrAbkCBjjHlemI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:86:b6:27:d4:a9:5f:80:27:a5:98:c2:73:cb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11f205979d2fbde95756a46a0f2739d7816d459
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=1fb05dfd49efb4b40ac59fd7cbedd31b6cc96a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:39:9c:ed:93:e6:e3:a7:c1:81:38:be:f2:8d:
b3:93:a7:5a:60:2d:a9:03:f5:d3:68:91:d5:2a:53:
69:19:38:41:de:d5:bb:0f:92:1f:45:d4:23:62:cc:
7b:33:4a:38:60:18:36:cd:77:1f:6c:84:12:77:a6:
0b:a3:d2:4c:86:dd:2c:be:0d:d8:98:62:f1:9b:2b:
5b:b9:71:1b:fb:1e:24:44:85:1d:4d:8f:63:20:49:
f3:1d:28:3d:03:59:03:a6:f2:5a:8c:25:cb:39:35:
ca:a4:d4:e0:22:2b:71:29:e7:26:ec:0a:92:60:22:
7e:4e:00:e0:54:6f:5e:2c:72:3b:cc:16:de:e2:02:
c5:a5:49:be:9e:b6:bc:ef:be:16:aa:cf:28:d2:50:
e3:d3:60:33:4f:d2:a4:7f:4f:18:50:1d:b1:39:06:
56:33:2c:e1:ae:f6:55:ed:7d:44:07:b6:d6:3e:12:
7d:bc:14:1a:e5:71:38:11:37:b0:4f:c8:4b:61:61:
15:c4:7e:fd:5c:2b:d2:1b:b3:cc:09:8b:38:9c:5a:
72:1e:9f:e8:ac:20:40:b2:93:d7:e8:ae:b8:fd:2e:
95:04:67:84:3d:a7:ea:5e:f9:83:68:05:5c:4e:b4:
85:6e:f8:5f:f8:79:2c:25:95:31:2a:f7:90:6f:81:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B0:5D:FD:49:EF:B4:B4:0A:C5:9F:D7:CB:ED:D3:1B:6C:C9:6A:62
X509v3 Authority Key Identifier:
keyid:A1:1F:20:59:79:D2:FB:DE:95:75:6A:46:A0:F2:73:9D:78:16:D4:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR8gWXnS-96VdWpGoPJznXgW1Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/19f229-a90f-42c4-980b-1550f2ac87b3/1/oR8gWXnS-96VdWpGoPJznXgW1Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c0:c5:78:35:63:80:5b:4d:23:5d:1d:77:a4:00:f4:a6:8b:
bc:5a:34:ca:27:dd:e5:7f:e9:3e:cc:12:ec:46:62:68:31:f2:
35:96:fd:b4:72:6b:b5:b2:d3:5b:ed:06:7c:3e:6f:d5:6e:05:
06:4b:51:9e:c6:d4:3b:51:2e:aa:b6:fb:8c:b9:64:a2:60:0a:
b1:72:06:aa:a2:3b:4d:d1:4a:34:b4:88:9a:cd:57:61:6e:47:
d1:d7:aa:bb:6b:a7:6f:c2:6d:dd:d2:c0:7d:52:e1:a0:c0:96:
c7:dc:83:ef:29:eb:27:88:10:29:99:20:3a:fa:63:94:97:46:
95:07:05:16:5b:1f:1a:5d:3b:79:b7:6b:19:b6:30:d9:6b:0f:
c6:07:29:b9:ac:39:f3:72:a6:09:a7:3a:f9:bc:6a:40:fe:7b:
bc:c9:6d:d3:74:21:91:7d:5b:e6:11:63:fd:69:65:96:e0:ab:
ac:da:9c:eb:b5:f2:4d:cb:54:86:28:11:13:f3:39:28:82:27:
6c:fb:31:91:29:b8:3c:c0:69:41:05:c4:35:f0:87:84:d1:5f:
42:16:5a:db:e6:9a:d4:a7:9d:80:2a:6f:e9:d4:c3:72:47:94:
1b:0d:8c:4b:8e:d3:11:2e:2b:df:35:9d:2c:a2:f9:23:87:79:
e2:79:68:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:48:23 2025 by rpki-client