Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
File: oJfWos9CiA2-v0KjJRkHohyRpKU.mft (raw, json)
Hash identifier: CSA9d+ZLJZUItsi7d5If4GXafRRCHZkMRs1eyLUOlw4=
Subject key identifier: 03:92:D6:B4:0C:A6:C0:81:69:E9:4E:B9:9C:33:B1:11:CC:AC:9A:B8
Authority key identifier: A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
Certificate issuer: /CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Certificate serial: 0194BC729ABD049C988F90A97BDEF81CF672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:14 +0000
Manifest this update: Fri 31 Jan 2025 13:00:14 +0000
Manifest next update: Sat 01 Feb 2025 13:00:14 +0000
Files and hashes: 1: 9xc32CvuOjNWHQB-PWYWWQOY_yA.roa (hash: PjbNQ/Rs2a2yPfO42XDBv2ntO3mtq/Wj2Yqgz9eO9jA=)
2: oJfWos9CiA2-v0KjJRkHohyRpKU.crl (hash: aAGGKPiQ9/ByN9C/hfsgw/dzzrE09Cv0dUpZgMkPLyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9a:bd:04:9c:98:8f:90:a9:7b:de:f8:1c:f6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a097d6a2cf42880dbebf42a3251907a21c91a4a5
Validity
Not Before: Jan 31 13:00:14 2025 GMT
Not After : Feb 1 13:00:14 2025 GMT
Subject: CN=0392d6b40ca6c08169e94eb99c33b111ccac9ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:fc:57:87:73:98:ab:0f:48:3c:0b:a3:0b:13:
19:a7:5a:ee:f3:34:5d:93:3a:c5:f9:32:8d:7f:e3:
cf:3a:81:cd:9b:69:f8:c4:33:44:9b:68:c3:f9:00:
81:34:2a:7d:8e:74:75:d7:e2:ef:aa:2b:35:70:e1:
f0:32:37:bc:37:cd:d8:f8:27:f6:5a:03:6e:e5:d3:
56:ba:33:33:f9:2b:1a:38:18:ac:bc:26:0a:ff:e0:
71:8a:3a:73:c8:30:c3:b2:7b:b8:64:85:76:49:31:
e2:81:02:64:d3:a8:e9:ee:30:a3:f4:cf:5d:e5:bc:
a9:d3:c4:fc:a8:92:83:19:01:0a:00:9a:e5:c1:63:
08:e2:e3:a8:d3:29:58:54:4e:2f:96:03:fb:71:82:
59:1c:4f:f5:7a:72:13:3e:97:5b:24:fa:76:05:d2:
8a:2e:32:8d:ac:f4:da:92:98:cb:80:db:67:09:4b:
ba:af:29:86:81:95:c6:8a:0a:ff:81:6c:62:65:f0:
35:ce:69:80:df:ec:71:2e:91:64:05:08:bc:1f:d8:
82:e1:4a:9a:3e:7e:8c:90:5d:a7:3a:81:92:1f:77:
52:32:41:13:2c:70:2c:93:4d:d1:d4:dd:5b:63:4c:
64:bf:be:24:49:96:df:8c:9a:45:8c:3d:36:ba:55:
af:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:92:D6:B4:0C:A6:C0:81:69:E9:4E:B9:9C:33:B1:11:CC:AC:9A:B8
X509v3 Authority Key Identifier:
keyid:A0:97:D6:A2:CF:42:88:0D:BE:BF:42:A3:25:19:07:A2:1C:91:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJfWos9CiA2-v0KjJRkHohyRpKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c2b68-818b-4902-b42f-6fcaf2729be5/1/oJfWos9CiA2-v0KjJRkHohyRpKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b8:be:09:80:bd:bf:45:6d:0e:fe:25:4b:bb:fb:a4:f4:57:
e6:81:1b:03:1a:4f:c8:d5:74:b4:6a:1d:72:bc:be:43:27:28:
82:60:d3:f0:c7:c3:53:4d:e5:1b:ae:03:57:81:fa:f4:80:9a:
9f:80:6f:44:b9:1f:f3:f7:a2:2b:8d:13:9f:d3:96:71:b9:0b:
71:90:32:e7:de:e6:8e:56:cf:86:31:97:b4:6d:4f:33:85:d4:
5b:cf:bd:3c:25:af:56:23:ad:58:c4:f3:8d:a7:b1:29:71:7c:
aa:34:c8:c5:69:b7:44:83:51:8c:1c:ef:c7:c5:5f:90:41:d1:
0b:6b:6a:97:bd:ec:9b:bb:bf:77:be:38:d0:ad:d3:b7:9e:b4:
7c:57:90:1a:35:49:e6:cf:7a:2a:64:db:bf:8f:42:c2:42:dc:
7e:99:91:da:c8:71:15:57:15:01:33:8a:b4:bd:d2:82:28:51:
43:1f:74:61:ae:1f:87:40:b3:ee:51:9c:84:6e:b7:97:76:80:
fc:0b:68:eb:29:a8:46:dd:06:22:e2:20:ae:0f:2c:b0:c2:1d:
37:4e:a7:9c:63:eb:0e:d1:11:4f:c3:f8:cc:38:b6:a4:8e:df:
61:fa:95:a1:a9:0d:9e:a9:b3:a8:12:7b:7d:1f:78:d0:c0:74:
40:8d:77:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:12:37 2025 by rpki-client