Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f5f918-494d-4f95-ac71-8172a18dda10/1/o3xDPWF21qvC2wPnQQYyzScim5M.mft
File: o3xDPWF21qvC2wPnQQYyzScim5M.mft (raw, json)
Hash identifier: xCHDb8mCgZJ/kRFAIotE6wtdMq3/Q7PYA52CKVME3RA=
Subject key identifier: E7:1F:AC:6F:15:7C:06:8A:BF:03:2C:E4:D2:7D:8F:F6:D0:4D:62:CB
Authority key identifier: A3:7C:43:3D:61:76:D6:AB:C2:DB:03:E7:41:06:32:CD:27:22:9B:93
Certificate issuer: /CN=a37c433d6176d6abc2db03e7410632cd27229b93
Certificate serial: 016DF116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3xDPWF21qvC2wPnQQYyzScim5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/f5f918-494d-4f95-ac71-8172a18dda10/1/o3xDPWF21qvC2wPnQQYyzScim5M.mft
Manifest number: 01E0
Signing time: Thu 31 Mar 2022 22:21:37 +0000
Manifest this update: Thu 31 Mar 2022 22:21:37 +0000
Manifest next update: Fri 01 Apr 2022 22:21:37 +0000
Files and hashes: 1: IPf5yvDjV2f1bbaxGM7S0CTHqbs.roa (hash: lZZjVDCgRRngTPPYXCAjBtzsl4lRNgLvCB9Tw1XBuqk=)
2: o3xDPWF21qvC2wPnQQYyzScim5M.crl (hash: pgon4nchWROTUXmxNyu8KuEhRnQMLMWDYud09kyALFw=)
3: ylRk5kEpqXJTr7CZjo83RR2zO4s.roa (hash: t97wySJNQFUTXiOSgzAMwr3btygtANKW48z3JbQ0uSY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23982358 (0x16df116)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a37c433d6176d6abc2db03e7410632cd27229b93
Validity
Not Before: Mar 31 22:21:37 2022 GMT
Not After : Apr 1 22:21:37 2022 GMT
Subject: CN=e71fac6f157c068abf032ce4d27d8ff6d04d62cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:e1:24:19:36:1c:8b:34:11:58:a7:71:ea:
66:58:40:b3:78:f9:d6:41:4b:4e:b7:8d:24:1d:5c:
3e:3d:5c:cd:45:c2:79:c0:c9:d6:35:90:e3:d4:23:
89:13:88:be:bf:fa:46:2b:db:c4:d6:30:37:5c:48:
66:30:13:22:d9:8e:b1:ca:da:0b:4b:a6:25:d9:ec:
eb:25:bf:2c:47:bb:e9:db:d0:9a:c0:fb:2f:53:bc:
98:58:b2:01:8e:7b:2f:78:10:f2:3e:eb:73:d7:b4:
ac:3e:8c:ff:ac:3a:e7:21:68:9a:66:12:f8:71:73:
32:48:d9:dc:40:f2:24:8c:ce:74:48:18:eb:14:5c:
c4:1d:3c:d3:cd:55:e5:88:be:db:7e:b8:38:6a:8e:
fc:8e:dd:63:f3:c0:bf:b0:c8:b3:30:ae:f2:d9:5a:
1c:82:23:75:c3:07:79:17:dd:a3:b7:6d:e3:0b:f9:
ac:36:b3:5d:0c:c6:86:19:f6:52:ab:84:ee:fc:20:
8f:a9:4a:d0:2f:7e:cc:00:13:c5:14:73:88:47:da:
0f:66:6a:03:b9:7c:44:07:8d:49:73:60:8d:5a:b0:
6b:97:ba:e6:4d:74:13:5d:7b:f5:29:35:bb:3e:75:
27:76:26:0c:e9:54:b7:f9:dc:74:96:85:d4:80:df:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1F:AC:6F:15:7C:06:8A:BF:03:2C:E4:D2:7D:8F:F6:D0:4D:62:CB
X509v3 Authority Key Identifier:
keyid:A3:7C:43:3D:61:76:D6:AB:C2:DB:03:E7:41:06:32:CD:27:22:9B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3xDPWF21qvC2wPnQQYyzScim5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f5f918-494d-4f95-ac71-8172a18dda10/1/o3xDPWF21qvC2wPnQQYyzScim5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f5f918-494d-4f95-ac71-8172a18dda10/1/o3xDPWF21qvC2wPnQQYyzScim5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:51:bb:d0:ae:fd:e4:50:52:4e:ef:18:cb:f0:1e:76:d1:bc:
64:a5:69:c5:99:14:fa:9b:5d:7b:28:6e:e2:79:bc:25:f9:6e:
60:7d:12:13:8d:1b:09:6d:c5:60:24:61:32:3a:6a:5d:f0:dd:
36:1a:c5:53:dd:61:32:80:37:35:29:62:75:85:af:60:e9:91:
ee:6c:5a:21:c6:97:75:1f:4b:41:60:85:f1:2a:bb:92:54:e7:
da:a0:ef:0f:28:ae:91:c7:34:72:61:02:20:0b:e1:b5:62:1a:
89:a3:9f:02:dc:2a:80:f9:a1:4d:f9:e7:8f:e9:e9:91:0a:87:
3c:98:52:16:53:01:f3:1a:9c:bb:9c:cc:72:ff:02:65:85:57:
8a:c0:1f:8b:a7:08:a8:2c:56:b7:ce:13:bc:e7:ed:70:c4:bd:
f5:29:68:37:0d:2d:f3:16:ca:c6:e4:5f:34:0f:5e:71:44:01:
81:b4:e6:f8:a7:4f:b9:e7:31:e9:54:10:3e:7a:93:83:d9:a6:
1c:36:1c:63:c9:a8:e2:cb:4a:44:89:f2:01:8a:2c:ff:8f:a0:
14:3a:23:df:5d:fe:8f:ab:58:80:a1:03:cb:4d:ed:d2:d7:2f:
51:f7:6d:a9:89:05:20:80:3e:ce:a8:2b:ba:c9:82:e8:63:b4:
54:e0:4c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:26 2025 by rpki-client