Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
File: mOL0q6C8mz46sYVkl6QAcZcbcEo.mft (raw, json)
Hash identifier: Q3UmUlvs2tLqljIl2wKGPN2x3o8win1didxbtPF2/F8=
Subject key identifier: 0C:69:30:82:9A:08:95:47:F3:BA:11:4C:91:26:49:CC:06:18:4D:91
Authority key identifier: 98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
Certificate issuer: /CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Certificate serial: 0194BCA97B6AD1370EBC7B1D6F0C9444398C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
Manifest number: 1124
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: 5iyAYLxEjuNDAzPUPss-1f8MNx4.roa (hash: DwD9yg+Jbaq0kQcfaNLg8ZPxn9j3dTfYmSMH1xU6vYc=)
2: J7XTvcN1MW518JWo3pumgkIR1Qs.roa (hash: SdCNBkFRyN5y9hoeTIHABB2iuWEfHwlmwXNsAfXpH+w=)
3: mOL0q6C8mz46sYVkl6QAcZcbcEo.crl (hash: 98JwHTm7ObuE14USIWjAtY9dPAXMfl+zDfGG35RVIB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7b:6a:d1:37:0e:bc:7b:1d:6f:0c:94:44:39:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e2f4aba0bc9b3e3ab1856497a40071971b704a
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=0c6930829a089547f3ba114c912649cc06184d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d4:f4:b3:c8:dc:be:29:16:c3:32:ef:6c:ab:
8c:b2:d5:7b:ed:bc:31:b1:63:66:63:3e:a6:ed:68:
b8:99:aa:15:74:9f:4c:af:2c:8e:7e:48:c3:30:8b:
79:f1:9a:56:4b:c1:e8:2b:87:d3:0c:0d:42:4b:c6:
6e:2f:8d:68:ff:06:a5:b8:6d:b6:fc:2a:b5:fa:83:
a1:8f:b1:19:4f:d3:84:7b:b9:ca:92:d8:b0:be:f1:
14:d9:5c:cd:b6:3e:b6:98:a6:c9:e3:84:5e:e0:7e:
f8:72:bf:6d:e2:a9:69:f0:ab:c0:5e:c7:13:6f:7a:
8d:32:df:53:98:d4:da:6f:0c:6f:48:0f:10:a6:3d:
71:b0:5d:e0:39:59:13:68:b4:76:05:37:5b:c8:a9:
87:c3:6e:4e:8f:88:dd:f2:42:7f:41:5c:9f:71:9c:
6d:b6:35:22:ac:b0:87:e5:14:50:67:f7:c0:23:0d:
12:3b:f0:b3:20:fd:ca:4f:88:6e:5e:cb:73:dd:93:
ae:90:3f:fb:22:08:4f:cc:ce:b2:82:f6:3f:e8:0a:
09:f2:1e:15:55:b8:11:e5:2a:47:8c:40:e2:6a:9b:
9a:f4:75:d2:54:eb:03:b7:b6:35:94:0c:a5:f4:cc:
fa:7d:05:af:76:84:60:ff:c3:cf:25:6c:4b:6c:23:
fe:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:69:30:82:9A:08:95:47:F3:BA:11:4C:91:26:49:CC:06:18:4D:91
X509v3 Authority Key Identifier:
keyid:98:E2:F4:AB:A0:BC:9B:3E:3A:B1:85:64:97:A4:00:71:97:1B:70:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOL0q6C8mz46sYVkl6QAcZcbcEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/92d564-5d09-428e-af80-8882199bccb4/1/mOL0q6C8mz46sYVkl6QAcZcbcEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:07:85:2c:02:40:bf:95:ce:11:63:fe:f4:fe:88:7d:09:68:
a0:c8:e9:44:67:35:0a:c2:9b:84:cc:95:74:4f:17:77:04:b9:
14:4b:5f:f0:49:94:76:33:60:2e:95:85:08:a0:75:5b:bd:27:
56:06:05:74:0f:de:3f:b8:66:61:dc:f2:ee:1b:df:cb:bd:bb:
86:0e:ff:83:3d:41:5b:ac:43:d9:48:97:ba:fc:0c:f5:c0:7f:
f2:51:2e:07:68:48:e4:24:ed:69:67:16:94:1d:ce:f0:a3:a2:
32:70:d5:aa:d9:f6:93:d1:a4:87:27:91:5d:bf:d3:09:29:7e:
aa:6c:98:42:ab:da:2b:ec:23:cf:d3:c8:72:72:07:18:0a:e9:
e6:13:71:62:0f:47:ac:72:b9:ce:50:9e:be:36:86:5f:e8:bb:
24:41:ca:21:2d:23:24:bc:b0:6d:45:76:14:8a:67:c7:d3:90:
62:2d:ac:e2:d4:e0:ad:f5:59:10:f8:3d:41:7a:3f:03:92:54:
36:27:ae:4b:98:8b:d8:4a:53:98:76:5f:c5:9a:6a:58:3a:3e:
d3:d4:9f:a1:42:cd:2f:d3:5f:a5:e5:96:ed:5e:4d:e1:bd:66:
9c:3a:3b:6d:ca:d3:b2:4e:a1:5f:06:80:4b:30:32:c7:d5:21:
6b:1a:28:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:41 2025 by rpki-client