Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
File: ogAYZIx6-hREZNR7seLLK6eG67E.mft (raw, json)
Hash identifier: +fS7NWL9cfirMwGU/S9SQDe4orjVK/CCrrODuCITfvo=
Subject key identifier: 81:D9:D4:39:91:1B:8C:98:58:C2:1F:6E:E2:AD:52:67:58:B7:3B:BF
Authority key identifier: A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
Certificate issuer: /CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Certificate serial: 0194BCAA16A34F8C63DE58F52EB294255656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
Manifest number: 0133
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: Hg_LuWwF2PqnDP--QEmiR8s_JMw.roa (hash: pTVkg9vcSnhojGDdhaJdcSnTn9EzuAwvN69LeVjj+eI=)
2: ZyIFjDXNoQmTUrQTfRFil604EkI.roa (hash: w5vJh9LGNygfKftlkH12Umx5kIPwjNAoWDXEhQaobKc=)
3: ogAYZIx6-hREZNR7seLLK6eG67E.crl (hash: 2CcYF6BRw51lgrQqmpncCw2vTlVkDhJggq3A+sn3aCY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:16:a3:4f:8c:63:de:58:f5:2e:b2:94:25:56:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20018648c7afa144464d47bb1e2cb2ba786ebb1
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=81d9d439911b8c9858c21f6ee2ad526758b73bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:ba:93:9e:84:c1:f5:f5:64:ed:0d:bf:26:
4f:49:2b:97:b1:e8:c5:53:28:67:27:94:7a:70:50:
8c:14:9c:49:88:e7:10:54:f1:8e:bf:77:ac:70:7f:
b9:b8:ea:86:86:fc:c2:35:2b:51:e4:b8:59:04:fd:
bb:fb:80:2c:9b:ba:8d:32:8d:da:37:8b:fa:89:8a:
2f:4b:fd:2a:98:e7:2f:f1:95:a0:3e:06:35:77:92:
88:a1:cd:ba:3f:0d:1c:db:12:ff:93:d5:fd:2e:16:
07:0a:2a:3d:a4:b2:71:22:cd:0b:5c:61:65:de:22:
77:c5:82:0b:be:95:74:4c:e7:a2:5e:45:e7:81:10:
5c:64:15:8f:44:d2:46:9d:9f:50:9f:9f:59:82:ec:
0b:bf:dc:96:10:bc:d6:ae:af:33:bd:7a:c0:d4:dd:
fe:0e:e0:fa:41:05:cd:fa:c7:7a:ff:46:51:69:84:
aa:20:45:37:31:f3:7c:a4:df:86:cb:b2:9f:cd:a2:
6c:7a:c0:16:fa:7e:1b:b2:20:ca:07:de:93:21:c7:
92:91:28:d9:22:c9:8f:fa:81:61:4a:57:8e:db:4c:
4f:f5:1a:57:60:e6:41:c6:23:29:8b:eb:b8:7b:6b:
91:3b:51:e8:c3:06:95:6c:a5:d9:47:c2:a5:85:28:
00:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D9:D4:39:91:1B:8C:98:58:C2:1F:6E:E2:AD:52:67:58:B7:3B:BF
X509v3 Authority Key Identifier:
keyid:A2:00:18:64:8C:7A:FA:14:44:64:D4:7B:B1:E2:CB:2B:A7:86:EB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogAYZIx6-hREZNR7seLLK6eG67E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/83a77d-9cad-40de-abed-c4d42b7f6270/1/ogAYZIx6-hREZNR7seLLK6eG67E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:6e:b7:ab:56:9a:a6:77:de:c4:c9:c7:82:eb:bc:82:92:a3:
e0:05:93:fd:b3:cc:92:95:f5:89:59:1a:03:61:e8:89:5f:1f:
9a:51:cb:7f:e0:e5:9c:ed:fc:e7:dc:28:d0:11:32:a0:32:97:
74:34:ab:10:d0:d7:37:d9:cf:8f:7c:85:62:31:2d:43:7b:15:
3b:11:39:43:3c:4c:b8:59:48:18:b8:88:b8:74:10:87:7c:8e:
f3:e1:f0:e7:2a:e7:3e:c0:43:93:45:82:d1:ee:96:66:47:64:
c9:b5:40:71:d9:81:44:6d:8f:69:5d:a3:0e:2f:d7:5a:c3:be:
a1:77:e7:fc:87:09:21:99:40:8f:ce:51:00:05:02:25:4b:e7:
14:0c:40:68:ee:c8:fb:28:fb:51:c0:63:e9:77:63:ed:3b:64:
fb:e4:df:14:27:2d:20:68:67:ee:a6:93:b9:9a:5f:34:5f:5e:
e4:6c:c1:ee:b9:c8:0f:e7:71:9b:10:14:ca:36:e2:4b:2a:34:
48:cc:3c:da:6a:8d:74:f4:3a:75:19:11:d6:01:02:84:be:2e:
0e:cb:a6:df:43:e2:2d:88:04:31:79:56:22:05:56:26:11:60:
45:52:90:c7:9d:47:c8:e4:e0:48:be:09:71:00:04:26:a5:37:
2c:fe:90:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:52:14 2025 by rpki-client