Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
File: oaLWN8sKzPhyH0PiZs4hP47d0mo.mft (raw, json)
Hash identifier: +tXo7zijiNacTEKSg28xyS/WuYMKg7SQbLjggkD7Pag=
Subject key identifier: 2F:66:1D:5E:CE:72:FA:2A:AA:D1:33:31:5F:A3:20:A0:E3:0A:01:B7
Authority key identifier: A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
Certificate issuer: /CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Certificate serial: 0194BC3C86C6FF0B841367C44C161900C432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: 4VXryZNlGszOvVCrHsnCqJ1trsE.roa (hash: k+VFLGrGtXyTFaFbYpVCIVsEOX3gC2kjUfFrAgtlCzk=)
2: EzrvXLF-MmLybEmZJ2eW2xEONHs.roa (hash: RF6Dl/sCu3vkVuvkH1yCtoGTVf/6WBZmKUrbuif2lko=)
3: oaLWN8sKzPhyH0PiZs4hP47d0mo.crl (hash: +pLsp2PNOsPlJmey9yAx4XgN+VuGXqCNnzSAf711OUM=)
4: ruIwqLknbql4jBEA51u8Ov6Q1Tk.roa (hash: Z0E5RF1yfzZZiEr9zy9z5xXvvb8+Wc07OPz1Qm4MGWM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:86:c6:ff:0b:84:13:67:c4:4c:16:19:00:c4:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a2d637cb0accf8721f43e266ce213f8eddd26a
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=2f661d5ece72fa2aaad133315fa320a0e30a01b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:a9:ef:57:66:cd:77:6c:ad:b1:dd:59:d8:
b3:9a:f0:8e:5d:74:ef:dc:1d:56:0f:8c:da:6f:00:
59:67:0e:a9:f2:ae:20:77:e0:35:29:f9:13:ad:56:
6a:e0:a3:1f:28:70:55:cc:ca:21:d8:b1:1e:8e:b8:
68:c3:80:4b:e6:07:81:64:3a:53:f0:ff:04:0f:b1:
59:d9:bd:aa:a6:b4:17:08:00:62:67:3c:d0:98:13:
2b:37:9d:3a:21:ec:84:35:99:14:a0:d9:70:df:3b:
0b:31:0c:41:d0:2e:79:be:cd:60:a6:67:d8:f8:a6:
c1:47:df:95:f1:3a:aa:34:c9:8d:35:3e:d4:5a:95:
55:00:5e:7c:92:2b:bb:c6:3d:37:78:28:37:82:c9:
1f:36:2c:fb:78:68:f8:2d:3c:b1:e3:c9:6f:3e:e0:
4b:1c:2f:49:37:a4:3c:b1:7e:af:fb:cc:a5:29:46:
5d:91:33:80:8f:cf:9c:c1:df:80:51:61:9d:44:a1:
8f:ed:91:fc:dd:d5:ee:05:8b:78:d5:46:68:b8:93:
06:cf:10:ba:69:98:77:c7:c0:83:1d:5d:fd:16:d7:
a1:e5:5a:8a:4d:aa:79:98:de:c3:60:81:43:79:84:
2d:a8:85:08:8c:72:95:9d:25:d4:9f:2b:9c:8b:aa:
dc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:66:1D:5E:CE:72:FA:2A:AA:D1:33:31:5F:A3:20:A0:E3:0A:01:B7
X509v3 Authority Key Identifier:
keyid:A1:A2:D6:37:CB:0A:CC:F8:72:1F:43:E2:66:CE:21:3F:8E:DD:D2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaLWN8sKzPhyH0PiZs4hP47d0mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/edbf44-3732-44ff-a944-e21974a294ba/1/oaLWN8sKzPhyH0PiZs4hP47d0mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:88:86:70:68:ad:44:9d:3d:9b:4e:66:0f:dc:a8:ca:06:b9:
d9:60:d6:7c:a9:61:36:21:b4:bb:2a:a8:c3:95:93:1f:3a:34:
64:95:fe:b7:28:42:51:0e:36:ac:e7:7a:05:bb:36:90:b5:df:
43:5b:5b:8c:a2:13:66:64:bf:c0:3c:3d:2e:3a:46:7c:b6:cd:
87:0e:b9:5c:3c:b9:e7:5e:fc:bd:1b:89:ff:9a:71:22:42:69:
62:24:b5:41:78:46:c1:fb:63:1d:fa:f0:cc:13:ae:d2:a3:15:
88:2a:2f:f7:0d:d0:67:07:0c:28:50:dc:ed:88:ef:16:57:bb:
9b:19:21:4d:ab:aa:3e:37:7b:75:51:be:92:27:b6:df:fe:d0:
2c:3b:e6:ac:13:b2:c9:02:4a:3b:f6:39:62:11:40:1c:2a:74:
d1:c0:c5:c3:be:9c:cc:05:d1:03:fa:4f:9f:8f:98:ba:56:39:
70:f3:6a:97:e8:99:45:42:74:39:e0:2a:59:0e:49:9b:62:04:
fd:f9:ec:a0:21:10:b6:74:ca:e6:2a:22:83:53:ed:74:d6:6c:
38:f3:3e:fb:5b:30:3d:68:71:7d:99:89:6a:1f:64:fb:62:39:
e6:1a:37:40:2f:d7:44:42:1e:61:8c:b1:6f:82:e0:31:54:d0:
a8:70:cc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:01 2025 by rpki-client