Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
File: oZUhxzUtHKw_mMdW_HprSzrpdT0.mft (raw, json)
Hash identifier: ea6I97aw0Iq/5+Qj+FB5u2WbdmQFOPkYyFY/RMWRyeY=
Subject key identifier: A6:60:9B:EF:F4:B4:63:B7:0A:64:E5:35:08:93:E0:9C:13:B0:85:3D
Authority key identifier: A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
Certificate issuer: /CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Certificate serial: 0194BD85B915DC305403CF00C5B00F23CFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
Manifest number: 0E7C
Signing time: Fri 31 Jan 2025 18:00:44 +0000
Manifest this update: Fri 31 Jan 2025 18:00:44 +0000
Manifest next update: Sat 01 Feb 2025 18:00:44 +0000
Files and hashes: 1: Bo1myrpN4GYHDeA8eZrww4v2MYk.roa (hash: iX1wfmXvs8NDvW8ILAABxp5yjw4VCOGlhTOgUXPFMOo=)
2: oZUhxzUtHKw_mMdW_HprSzrpdT0.crl (hash: 1wb12C4bRGfzhXCzdw7T0+Yh5aD9Q9Hc7Ry9WAISdpA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b9:15:dc:30:54:03:cf:00:c5:b0:0f:23:cf:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19521c7352d1cac3f98c756fc7a6b4b3ae9753d
Validity
Not Before: Jan 31 18:00:44 2025 GMT
Not After : Feb 1 18:00:44 2025 GMT
Subject: CN=a6609beff4b463b70a64e5350893e09c13b0853d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:60:0a:e8:00:51:95:7f:de:6a:d8:62:eb:
70:15:49:ee:97:1b:40:91:4a:ca:f4:4c:52:0e:db:
25:42:98:f3:52:ae:06:86:7c:f0:3f:6d:af:94:f6:
ab:7e:f2:d8:19:35:e7:10:84:99:6a:74:db:c7:7c:
a9:b9:08:45:32:64:72:04:8e:f0:e1:99:16:13:06:
d7:1f:4c:5f:7c:9c:e6:ba:59:e8:f3:84:86:b0:0f:
1b:31:a8:87:20:d6:d3:ee:bd:3c:77:b3:0e:3d:6f:
1a:2b:df:2d:0f:71:58:64:e6:4c:91:ee:ad:50:07:
b4:8c:b8:2d:75:42:65:79:c7:89:05:07:16:87:55:
f7:7e:4b:f3:96:e7:3c:43:2b:86:47:87:0e:29:1d:
5a:45:61:cb:40:a9:13:ee:d5:a3:43:9e:72:6f:ba:
54:4b:08:c3:b0:5c:c1:8e:a0:bc:29:87:89:40:3b:
c0:22:38:1d:b8:fe:40:be:92:53:d0:ca:92:47:2c:
53:a4:c9:5d:db:b2:8b:51:03:55:13:24:8b:5c:93:
87:31:98:db:70:1c:9a:70:40:09:36:3d:9d:88:16:
ea:1b:45:4c:70:9d:0e:86:b4:8e:eb:dc:6b:89:f1:
e9:c7:0a:a7:4a:61:dc:e2:39:5d:d8:d6:87:d5:ba:
ea:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:60:9B:EF:F4:B4:63:B7:0A:64:E5:35:08:93:E0:9C:13:B0:85:3D
X509v3 Authority Key Identifier:
keyid:A1:95:21:C7:35:2D:1C:AC:3F:98:C7:56:FC:7A:6B:4B:3A:E9:75:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZUhxzUtHKw_mMdW_HprSzrpdT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2b7dc2-c1de-4970-ab53-e5ada36fa1f3/1/oZUhxzUtHKw_mMdW_HprSzrpdT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:45:c5:6c:b7:4c:62:1d:97:e2:92:25:cf:51:a7:1b:93:6f:
64:90:b9:79:5a:86:c3:39:f5:70:9f:4d:39:29:b2:7b:9b:e8:
6b:26:eb:2a:b7:0f:13:3a:26:c0:be:fc:64:99:d3:65:53:3d:
1b:6b:bc:40:7b:ff:23:cd:53:27:c0:e8:bb:1a:b0:11:76:da:
04:27:c1:55:2a:4b:de:fe:2d:63:26:2f:b3:43:9c:a8:d5:6e:
90:90:dd:22:e0:3d:7b:db:af:58:ca:56:cd:d4:41:c5:af:b4:
9f:dd:91:fd:ca:fb:e5:5b:dc:21:4c:49:07:b0:91:dc:b4:f7:
4d:6b:37:79:02:5a:ec:30:bd:79:3e:24:57:24:23:55:38:21:
80:ac:a3:c8:ca:23:d6:9d:54:77:92:f5:c1:9e:a5:45:1f:a4:
06:4a:30:b1:ed:2d:a3:7d:ee:d1:06:ba:aa:ff:d9:02:b7:87:
24:46:74:b2:04:f8:99:9e:59:b2:a5:bf:8b:2a:92:b2:89:f1:
17:b8:80:59:3a:52:b3:b6:76:31:16:e6:43:24:77:34:e3:15:
9c:c6:8c:20:1f:f3:f8:0c:b5:ce:ea:e9:71:0a:fa:32:9a:66:
1a:fd:2d:8b:d6:b9:91:d4:33:80:2b:c6:73:05:c0:e8:20:43:
34:60:19:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:29:04 2025 by rpki-client