Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
File: iOpSVfiNS5VxicFC-KxWgcUMaKY.mft (raw, json)
Hash identifier: weqLR7TAMW1NXTBmcjqp+UUo0oyh9raeVQc/eTk2yE8=
Subject key identifier: 0C:0F:DA:0C:E6:CA:36:02:88:0B:A1:59:A3:2C:72:4A:02:8E:56:0F
Authority key identifier: 88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
Certificate issuer: /CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Certificate serial: 0194BD855F5EB0425C0845FE6AC8F8CBCD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
Manifest number: 06AF
Signing time: Fri 31 Jan 2025 18:00:21 +0000
Manifest this update: Fri 31 Jan 2025 18:00:21 +0000
Manifest next update: Sat 01 Feb 2025 18:00:21 +0000
Files and hashes: 1: OdavAlmZTVSUEn8DEUG0x7Aup4c.roa (hash: zvm6Bet4M7SswbKtgyqQXpZEDV7VAUhO/RsUj5lDxjA=)
2: iOpSVfiNS5VxicFC-KxWgcUMaKY.crl (hash: 6/A47TmH6oCoD88DB1tTbU6Lxbt2TxouPePRi/ODIqw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5f:5e:b0:42:5c:08:45:fe:6a:c8:f8:cb:cd:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88ea5255f88d4b957189c142f8ac5681c50c68a6
Validity
Not Before: Jan 31 18:00:21 2025 GMT
Not After : Feb 1 18:00:21 2025 GMT
Subject: CN=0c0fda0ce6ca3602880ba159a32c724a028e560f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:88:71:3a:0e:56:66:7c:0a:ea:ba:23:e6:58:
0b:86:b0:89:1c:de:a6:28:3a:45:f7:b2:93:2c:41:
bb:ec:da:d1:88:9a:73:1d:fb:ec:13:24:43:9e:d7:
e7:b6:4e:73:9a:5d:b4:9a:00:e3:bb:23:c7:c1:a4:
db:14:82:5a:c3:7f:74:3b:15:0c:58:63:30:82:3b:
01:2f:04:04:96:71:29:92:52:1f:0c:59:80:02:0f:
fe:a9:a6:76:66:9e:c8:cb:64:23:77:c6:f9:93:25:
be:b1:fc:cd:94:4f:67:0e:41:cc:fe:9d:2e:ab:a0:
68:cb:b7:77:1d:32:1e:a2:63:72:63:64:3b:bc:2a:
26:e6:e9:72:de:ff:ca:50:01:93:44:45:a0:e7:95:
46:cd:e3:16:84:66:f6:e7:84:5d:27:8d:b4:76:2c:
91:c6:b9:b5:a8:18:c4:de:bc:bb:e1:9d:7f:9d:78:
d0:72:6f:70:e3:7b:86:1e:f1:e4:19:0c:bb:81:64:
d6:83:03:2c:7a:c0:10:13:53:54:c1:63:24:40:3a:
35:64:1c:60:c2:bc:21:04:39:c5:74:c5:ec:31:5b:
b8:b1:18:a9:3c:e5:eb:09:88:31:20:f9:c6:53:65:
36:72:19:d3:88:b0:b0:97:73:cd:20:97:7b:a5:86:
16:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0F:DA:0C:E6:CA:36:02:88:0B:A1:59:A3:2C:72:4A:02:8E:56:0F
X509v3 Authority Key Identifier:
keyid:88:EA:52:55:F8:8D:4B:95:71:89:C1:42:F8:AC:56:81:C5:0C:68:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOpSVfiNS5VxicFC-KxWgcUMaKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bb8727-78f7-401f-9339-e7ce26884be6/1/iOpSVfiNS5VxicFC-KxWgcUMaKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:7f:28:6b:e2:14:59:e3:fa:3a:68:df:5d:e6:81:40:39:04:
14:cf:45:8c:30:b9:b6:df:93:aa:99:78:eb:66:60:5f:09:9e:
10:c1:2e:84:2a:a5:79:d1:0b:c4:18:99:84:b0:91:13:d7:53:
17:a1:b2:4b:cc:8f:0d:91:15:1a:b6:5e:15:e7:58:1c:56:21:
87:42:70:2a:2c:17:09:04:12:35:22:df:60:88:8f:8d:00:30:
d7:06:d5:9e:46:67:9a:65:77:9c:07:e2:8b:4b:cb:dd:c2:1c:
1d:f0:ef:9d:ed:49:2f:b7:d0:39:14:88:84:13:b4:43:79:9b:
84:89:48:aa:f1:49:2d:93:2b:70:f7:7c:4a:8a:c2:ab:d7:f7:
24:5b:cc:cb:cb:db:56:2f:21:4f:4f:ed:8d:bf:82:da:d8:44:
77:d2:b7:af:9a:cf:1d:42:64:94:53:3d:ae:33:46:8d:15:6d:
4a:78:60:a3:aa:00:01:7e:01:18:41:a0:34:6a:93:e9:08:c2:
9c:c4:c1:d8:f9:ed:80:d4:0b:f0:5a:08:a2:4e:28:e7:0d:90:
f6:49:94:42:e0:66:eb:ab:c9:dc:12:d1:43:a2:f6:e1:f0:f6:
39:a0:e4:f5:ed:d8:bb:26:d4:ab:a4:6c:7c:02:8a:1d:67:f0:
5a:a3:c9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:18 2025 by rpki-client