Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
File: oWKOOfRxrdx15xo5G4Ldklx_CB0.mft (raw, json)
Hash identifier: E0ArPEDpMDGkkKhjMFlcvgxXiBxyABZ/AT9aMhR6LQk=
Subject key identifier: 00:50:97:45:49:34:17:6F:D8:37:4B:9A:35:53:AF:06:35:51:4E:78
Authority key identifier: A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
Certificate issuer: /CN=a1628e39f471addc75e71a391b82dd925c7f081d
Certificate serial: 0194BD178371D10EAE9D2DF7843D0048F3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
Manifest number: 0FFD
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: 1-rpUgw0W3sKSFdW3yshaE1HCCc0.roa (hash: c/Tt5N/pZWiN2mpptC/U9LHYusWW/dCE4lcNMT3U+WE=)
2: oWKOOfRxrdx15xo5G4Ldklx_CB0.crl (hash: vptDajQ10FI9SS7SCmFJ05ioweOKwKVQ6WtFZLAIgHA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:83:71:d1:0e:ae:9d:2d:f7:84:3d:00:48:f3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1628e39f471addc75e71a391b82dd925c7f081d
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=005097454934176fd8374b9a3553af0635514e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:04:7e:59:fe:39:13:ec:d7:6f:f9:d5:e2:
39:de:2f:66:ec:a9:a4:8d:dc:50:6e:28:a4:a0:ef:
e9:dc:1a:2e:7e:b4:bc:9b:7b:fe:b4:02:1d:07:e3:
57:36:d2:16:9f:3f:e6:04:83:a9:aa:3e:53:be:f5:
0c:54:c9:4f:b3:cc:a2:24:8a:1f:39:ef:46:72:71:
80:9e:f8:76:c3:3b:b5:b5:66:84:ca:17:fa:98:2d:
df:df:e1:1f:b2:e3:60:a9:d8:5b:d2:67:ef:2b:5c:
19:ec:b6:b5:ba:f6:20:5d:12:64:10:4f:59:5a:32:
f6:7c:83:11:7f:3c:09:71:17:b9:c3:da:6b:07:5c:
47:f0:d5:16:35:a5:05:cf:46:ef:8a:74:5e:f9:40:
6c:69:c0:08:2e:9c:3d:ef:9a:8f:27:72:b7:b3:55:
e1:fc:22:a0:c7:05:b2:62:fe:c0:d0:93:0d:a6:39:
0a:77:ce:82:05:7d:a0:96:7d:d4:fc:16:cc:5b:49:
55:bd:eb:38:0c:b5:14:ba:00:44:fd:f2:36:da:42:
86:97:84:4c:20:6e:1f:7f:7a:aa:fd:81:3a:e5:49:
29:46:a7:4f:32:26:63:27:ef:ed:d6:a2:e7:75:e8:
10:57:23:ec:51:58:d1:b4:5e:60:94:8b:39:8c:c1:
62:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:50:97:45:49:34:17:6F:D8:37:4B:9A:35:53:AF:06:35:51:4E:78
X509v3 Authority Key Identifier:
keyid:A1:62:8E:39:F4:71:AD:DC:75:E7:1A:39:1B:82:DD:92:5C:7F:08:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWKOOfRxrdx15xo5G4Ldklx_CB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/389ed2-1b82-45c9-a70a-025a0e6f05ae/1/oWKOOfRxrdx15xo5G4Ldklx_CB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:da:26:16:33:90:1a:25:22:b5:db:94:9b:fe:ee:b7:a5:5a:
10:d2:48:57:79:f7:49:55:99:91:6a:56:9e:6c:90:38:7a:ec:
69:93:fd:ab:3e:aa:a2:37:bb:f5:9b:16:96:2c:ce:1a:56:3c:
41:9a:f7:4e:db:ef:24:e6:4e:a8:90:a2:50:56:29:75:d8:5b:
37:08:6d:fa:45:26:86:86:e5:36:ba:1a:0a:87:df:e8:6d:23:
a4:9c:44:55:6a:c2:22:c0:51:49:07:68:1a:81:7d:3c:ec:41:
f5:10:28:d0:ab:90:e8:8d:07:28:1a:66:ce:d2:c7:c0:00:7d:
b3:1b:ce:c1:4c:b4:74:8d:9b:94:9f:d6:84:ab:8f:21:ee:31:
7e:7c:92:75:5f:fb:33:38:d5:15:9e:21:a5:7a:fc:c0:5b:c3:
c2:f0:44:db:2b:ce:4d:68:39:5a:44:20:a7:74:5c:d6:f0:8e:
b6:00:0f:9b:1f:97:20:dd:73:ae:71:c4:09:2c:95:25:62:9c:
01:15:1b:95:ad:e3:aa:34:43:6b:df:7f:3a:7d:9e:9d:c9:e6:
49:db:18:65:9c:50:ee:30:b5:33:19:52:27:c2:fc:39:4c:bc:
4c:e4:6a:a7:d0:6d:a1:42:8b:91:71:08:ec:a8:d1:ab:97:a2:
dd:7c:ca:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:34 2025 by rpki-client