Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
File: obceuN8XHmQvGyuQQZAB8fxEXk0.mft (raw, json)
Hash identifier: g3bEn5DuxKxBHqr5ZDgitxynioVzBaSka9ZYOpoyGLI=
Subject key identifier: 07:AE:2F:9A:78:1B:A1:49:61:EE:42:1B:EF:3C:CC:78:BF:F2:45:1C
Authority key identifier: A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
Certificate issuer: /CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Certificate serial: 0194BC3BE82E7898839058C2FC7E58DE6D80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
Manifest number: 0CF0
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: cGMojoHA_ji4dpM9uQ1afR_tOH0.roa (hash: i1gFi8NRL0iquVx1S2o3krHyHH6AFrbXa2Ge0Nqnor8=)
2: obceuN8XHmQvGyuQQZAB8fxEXk0.crl (hash: 2BnVKcvIufz6VBbAO7l2YnYKculMcxAcuGkQgtAND/0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e8:2e:78:98:83:90:58:c2:fc:7e:58:de:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b71eb8df171e642f1b2b90419001f1fc445e4d
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=07ae2f9a781ba14961ee421bef3ccc78bff2451c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5b:1c:62:72:3e:ef:f9:1e:48:0e:41:4c:8b:
1b:de:d8:19:3d:f3:1e:ff:8f:0a:8c:9b:06:27:21:
44:7e:d9:e3:fb:2b:7b:67:84:2a:cb:6f:0e:c5:7b:
d4:b6:e6:7b:4f:b8:3e:75:c0:a4:f5:c8:ca:4e:60:
b5:73:b9:db:8c:1c:fa:19:5a:cd:90:3a:0e:f7:fc:
13:2e:a6:5d:df:39:9c:65:06:9d:fb:41:8f:12:55:
50:1a:ef:c9:65:48:00:f4:20:d8:da:46:0a:2d:23:
26:57:f7:ce:78:03:5d:bd:b7:bd:9c:9f:dc:9e:a7:
db:7a:37:f6:c8:b8:b5:df:0a:24:0e:ed:82:f7:f3:
e2:97:f5:ff:b5:42:f9:24:8a:4a:11:07:7d:00:5a:
32:f7:ed:20:a8:61:7c:0d:d1:3b:c1:89:e9:3f:ee:
22:a6:ed:5c:e4:69:c6:04:0e:43:fa:ef:e8:0c:f3:
10:41:94:4f:1d:23:65:a3:f8:17:06:cd:df:10:9b:
a0:18:6f:7e:d9:fb:1b:a4:7f:1d:d5:ec:f2:26:48:
04:b9:7d:95:09:03:fb:62:b4:db:e8:b7:50:58:7f:
29:96:17:d9:2a:54:b4:21:a1:73:d2:f0:ea:be:3b:
f0:12:86:cc:7c:7a:29:ee:f1:51:b4:9e:04:8a:c1:
9b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AE:2F:9A:78:1B:A1:49:61:EE:42:1B:EF:3C:CC:78:BF:F2:45:1C
X509v3 Authority Key Identifier:
keyid:A1:B7:1E:B8:DF:17:1E:64:2F:1B:2B:90:41:90:01:F1:FC:44:5E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obceuN8XHmQvGyuQQZAB8fxEXk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f088bd-5029-4903-9616-0672ea0440bb/1/obceuN8XHmQvGyuQQZAB8fxEXk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:28:f4:57:e8:c3:b8:cf:8e:85:91:e8:44:bd:60:bb:c3:a7:
9b:a3:7f:8e:3e:b2:25:d8:c3:59:0f:f1:1c:79:47:31:1a:c2:
69:ba:c1:7e:89:e3:38:18:c1:6c:ee:c4:b1:f7:10:b2:f4:cb:
2b:50:d9:36:ad:9d:ee:01:3e:f3:94:d8:e7:14:33:ad:29:11:
0a:3a:86:ec:aa:59:5f:14:dc:6e:e7:7a:de:9d:a2:a7:0b:76:
8c:53:7d:05:fc:3c:5d:35:e7:b6:46:ce:19:4f:ab:9b:45:b9:
c3:5b:19:97:00:cc:8a:ea:a9:bc:ce:88:d5:b4:73:b3:2a:a1:
77:48:6c:19:68:55:4e:53:8e:28:cc:f3:00:5c:ce:a5:a1:34:
9f:76:32:08:ad:24:4e:a8:c1:37:ff:31:5f:cf:85:73:de:b2:
3b:31:20:1a:8c:c0:36:b0:2a:3c:d8:d1:e0:97:e0:27:1d:e1:
bd:e0:7e:6a:d1:3a:8b:44:27:61:0f:bb:a8:55:ea:3f:f2:d9:
c8:cc:e4:0b:50:6a:c2:25:dd:db:d9:70:c8:8b:34:ea:a3:0c:
9c:b2:2f:1e:6c:fe:77:0e:07:48:21:ec:38:77:d4:bb:6b:84:
04:1c:b8:a1:df:de:39:3b:93:22:56:3d:02:0e:e4:f2:b6:2d:
c6:d4:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:12:53 2025 by rpki-client