Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
File: o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft (raw, json)
Hash identifier: JPEoUMFrzVV8wuxrtDOBv35R3pcV7S4iQ7p1QOWM4AA=
Subject key identifier: 88:B6:98:FE:94:63:73:81:51:E6:9D:AF:93:73:1F:7B:41:79:41:F3
Authority key identifier: A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
Certificate issuer: /CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Certificate serial: 0194BCE09204782A7EBF88DFB2C77928C3ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
Manifest number: 031B
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: Vsv3YCDw5vfXgq3TQuqdpudyKe4.roa (hash: x3+JtaVQNzIHFJZhtlaWx3hND6UzdPujPEcBiZLbG+Q=)
2: o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl (hash: EsALmKXghiWAa+tKsSwBG39XFpj2V2ns4Z0yFi4rNks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:92:04:78:2a:7e:bf:88:df:b2:c7:79:28:c3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35309368a8ad13bb08264497fc2e43151e6d5a6
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=88b698fe9463738151e69daf93731f7b417941f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ef:ba:b0:99:ec:be:6b:9d:b5:9b:b4:2d:c8:
c4:75:5b:38:cf:d1:d9:1a:7e:42:fc:7f:78:1c:3b:
81:db:5b:c2:b2:b2:69:ba:53:48:9c:1b:05:b6:80:
a6:31:99:cb:4f:2b:ef:b9:a4:46:db:80:eb:67:7a:
a5:aa:f6:94:52:cc:38:a3:be:b8:bc:9d:3b:29:cd:
9f:89:9a:17:69:4b:fb:a1:a4:bc:2c:c1:51:ed:59:
db:4d:a3:dd:2f:9b:13:02:cd:e3:42:4b:85:82:e3:
6c:e9:0d:75:7f:76:20:cf:e6:9f:01:21:20:25:ea:
97:2a:54:5e:7a:e7:28:54:c6:5b:60:31:4a:23:0b:
77:79:d1:a5:95:74:1d:6c:34:9b:da:f8:98:d3:55:
7f:9b:69:bf:6b:1e:c9:c4:43:fd:f5:53:c8:c4:38:
29:ea:f6:97:30:4e:17:51:66:05:28:4b:cd:48:88:
25:48:c5:47:73:76:e2:b6:3a:a4:ea:43:59:cc:df:
e4:6c:d6:4f:87:97:47:dc:c7:09:ae:0a:50:fc:b6:
80:1d:c8:b3:c4:e3:56:70:16:84:9a:10:f1:4f:8d:
b2:93:e1:39:b5:0a:1b:65:74:90:0a:f9:4d:3b:71:
77:4e:3f:30:7d:2b:0f:14:d1:d5:43:c1:c5:8a:c4:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B6:98:FE:94:63:73:81:51:E6:9D:AF:93:73:1F:7B:41:79:41:F3
X509v3 Authority Key Identifier:
keyid:A3:53:09:36:8A:8A:D1:3B:B0:82:64:49:7F:C2:E4:31:51:E6:D5:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1MJNoqK0TuwgmRJf8LkMVHm1aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/ee6fd0-2792-49c4-b2d2-1714223b949e/1/o1MJNoqK0TuwgmRJf8LkMVHm1aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:fc:00:89:ff:41:f8:7e:34:ad:b0:8a:13:a4:6a:de:ab:ec:
4e:85:1e:1e:fd:71:cb:6b:04:d3:10:44:b4:d0:53:5a:3a:a0:
2a:96:84:7e:b4:e9:7b:5a:bb:bf:cd:5a:72:d5:8a:99:6e:32:
c8:63:0a:ff:dd:61:6b:24:78:95:ba:e8:25:cf:38:62:8f:79:
7e:de:bc:43:e3:f4:89:a3:c4:bc:88:df:73:22:ec:3d:cf:7e:
3a:da:b5:9d:3b:c3:3a:7a:b9:94:6c:16:4f:a6:10:be:37:64:
88:74:92:93:b7:da:22:75:d3:4b:20:79:62:69:9d:79:eb:a7:
6c:fd:97:f0:07:c1:79:b0:7d:ae:ec:e0:d1:f1:c4:70:ba:6b:
a2:24:f7:76:02:db:e4:d7:ca:1f:13:f7:ca:05:9d:f1:ad:39:
1d:43:e6:76:a6:5a:b8:eb:df:d2:5b:64:1c:bf:ed:73:06:1c:
fa:ae:0f:34:bc:41:d9:01:93:06:4a:55:38:2d:dd:41:da:f1:
ce:96:7e:8b:6e:00:17:e0:e6:4e:4d:de:84:68:d7:99:8a:51:
19:e4:3b:1d:99:65:14:05:91:65:d4:96:32:a6:3c:74:8f:6a:
e2:e6:31:1e:1e:b6:f9:4c:21:1b:d9:d2:75:3f:23:51:89:ac:
8b:f8:c3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:08 2025 by rpki-client