Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
File: oNvV0fht2d1mYGoU0x1kyw6qyDs.mft (raw, json)
Hash identifier: zWVInT7g6vXc5l29PM1ahJ3Xg5urQtKzn0My18SRLY0=
Subject key identifier: F9:86:FD:39:DE:0B:97:48:B0:05:A0:D2:8A:54:95:2E:D4:3A:73:50
Authority key identifier: A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
Certificate issuer: /CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Certificate serial: 0194BC3BC075D316C001DB7D025639CA571B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
Manifest number: 0ED1
Signing time: Fri 31 Jan 2025 12:00:19 +0000
Manifest this update: Fri 31 Jan 2025 12:00:19 +0000
Manifest next update: Sat 01 Feb 2025 12:00:19 +0000
Files and hashes: 1: AItoBBXTr3JSVEunHoKYVScHBBA.roa (hash: bQ8pPRnSjhK+OHhk4/Jjzl0/46sUTmdeipylWtU4pOg=)
2: oNvV0fht2d1mYGoU0x1kyw6qyDs.crl (hash: gk9zptmHQmYdI2t/fATweJnqWEAOo8bRf1FqB6VzEGc=)
3: ublcR1AG8bTtIDegIl4XF5yKZ2U.roa (hash: EReps1m4UdW66UXSYxPeRRxVic46xc68n57xt40fmWk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c0:75:d3:16:c0:01:db:7d:02:56:39:ca:57:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dbd5d1f86dd9dd66606a14d31d64cb0eaac83b
Validity
Not Before: Jan 31 12:00:19 2025 GMT
Not After : Feb 1 12:00:19 2025 GMT
Subject: CN=f986fd39de0b9748b005a0d28a54952ed43a7350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f8:ed:b5:5b:4e:7b:87:74:b3:93:c3:9e:45:
99:81:a1:50:6d:34:eb:af:5e:6e:9b:7b:d8:28:dd:
26:1e:71:ae:68:f0:87:69:8f:60:d8:06:d5:7b:9c:
80:43:04:04:7a:51:85:94:d4:1c:ca:27:09:3e:00:
70:c1:86:f7:6d:ab:a2:68:0e:82:bc:2b:de:6f:c9:
40:03:e2:49:05:4b:e7:9e:1c:0c:84:15:09:d0:2b:
a5:47:cc:ca:e9:11:09:1f:7c:3b:02:46:2b:26:54:
0c:35:14:80:64:14:5a:02:0f:9e:a4:f9:83:1d:ec:
32:58:8f:6d:d5:04:03:21:13:4c:e8:2a:c6:18:43:
1a:b9:52:47:c3:b2:bf:21:6b:27:2f:76:3b:62:3e:
c3:2f:56:7c:3a:e1:11:66:12:9d:3a:ea:7a:4b:01:
a1:90:50:ce:02:2c:d6:d6:9a:81:e3:a5:2a:e7:08:
dd:8e:83:83:ca:6f:56:80:db:cd:48:a5:8a:7f:51:
73:08:71:dc:37:e6:fe:07:72:0c:f0:d6:de:3a:71:
87:3c:98:1c:14:d6:65:6b:96:e8:dd:ec:40:f7:e0:
84:2b:d4:c7:fb:4e:8d:b5:d5:14:04:18:e3:d2:e9:
83:37:c5:c2:1c:6b:2d:d1:59:5d:b1:48:91:a2:db:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:86:FD:39:DE:0B:97:48:B0:05:A0:D2:8A:54:95:2E:D4:3A:73:50
X509v3 Authority Key Identifier:
keyid:A0:DB:D5:D1:F8:6D:D9:DD:66:60:6A:14:D3:1D:64:CB:0E:AA:C8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNvV0fht2d1mYGoU0x1kyw6qyDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/1d4cfc-8e5c-457c-9620-135c91ec199e/1/oNvV0fht2d1mYGoU0x1kyw6qyDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7d:98:34:9b:c6:2f:09:9b:b6:9d:9e:7f:72:9c:07:f7:d5:
73:78:fb:59:46:22:8f:35:e8:c9:20:a5:77:1c:81:57:97:5e:
0d:67:b1:30:f3:c6:46:c9:bf:dd:c0:67:da:7d:12:5f:ec:16:
4d:ec:bf:cf:eb:a7:bb:d8:72:37:83:d7:bd:62:a5:26:8a:07:
70:f3:44:a3:b0:5a:4a:e0:a2:ac:15:85:06:08:09:cb:58:4c:
de:f3:43:9b:4c:73:cc:58:05:a9:9e:80:92:12:4b:90:d2:32:
11:77:8f:87:76:06:d7:12:09:f7:b5:ca:9a:d4:87:b3:c3:c7:
b2:ad:cd:00:31:6c:55:84:7a:8c:dc:50:45:46:b5:18:65:ec:
7e:a8:61:9e:77:2c:e2:d9:92:2b:fc:d3:ec:b2:28:3d:f1:c7:
d2:1d:34:b5:6e:00:72:f0:2c:64:6a:5b:23:07:fe:61:0f:bc:
74:f8:b8:ff:bc:85:a5:0e:13:3b:3a:cd:7c:e3:24:d7:df:3b:
f1:81:87:97:98:82:9c:26:59:b5:c6:94:70:20:10:70:5e:6c:
09:0f:2d:26:0f:ee:05:af:28:12:c6:87:91:cd:a5:0b:49:f4:
ad:0d:57:09:e6:ae:15:50:97:a7:1d:c4:4e:da:b2:53:03:80:
cd:95:99:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:57:38 2025 by rpki-client