Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/b8b7e4-f4cd-4e06-b81c-c5caa7faed7d/1/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.mft
File: oCUXdNbYdJdjkKBWG3ZtQSXv5uw.mft (raw, json)
Hash identifier: qQ03IX7bxF6U47iOSkP4fbj8O7gmhlVl1kLuQzxBdVk=
Subject key identifier: 8E:BC:E8:CB:D4:0B:D6:BA:AA:49:FB:B6:44:31:AA:E9:88:C4:6C:44
Authority key identifier: A0:25:17:74:D6:D8:74:97:63:90:A0:56:1B:76:6D:41:25:EF:E6:EC
Certificate issuer: /CN=a0251774d6d874976390a0561b766d4125efe6ec
Certificate serial: 019559F2D030AE2D879FB08497AB25411B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/b8b7e4-f4cd-4e06-b81c-c5caa7faed7d/1/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.mft
Manifest number: 13C9
Signing time: Mon 03 Mar 2025 03:00:39 +0000
Manifest this update: Mon 03 Mar 2025 03:00:39 +0000
Manifest next update: Tue 04 Mar 2025 03:00:39 +0000
Files and hashes: 1: 5eyDqPyAo9Xd99AUR3yYU66V9rw.roa (hash: MoYh7IaPPg0nfwmEO7sIyivg9TgZy97zyEzoB/AzKYk=)
2: oCUXdNbYdJdjkKBWG3ZtQSXv5uw.crl (hash: QCeil1F8qiWOYBlYmcVP70o35GF7eC7wCoUXfVku9YU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:59:f2:d0:30:ae:2d:87:9f:b0:84:97:ab:25:41:1b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0251774d6d874976390a0561b766d4125efe6ec
Validity
Not Before: Mar 3 03:00:39 2025 GMT
Not After : Mar 4 03:00:39 2025 GMT
Subject: CN=8ebce8cbd40bd6baaa49fbb64431aae988c46c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8e:62:fe:42:81:c2:fe:2a:e1:01:12:f9:ee:
b4:3a:2e:5d:03:92:4f:75:16:b9:44:31:dd:eb:30:
8f:9e:92:2b:ee:21:3b:7d:37:70:6a:ac:17:fd:56:
9f:99:33:d3:20:e9:d8:f4:69:1a:ea:08:69:bb:b7:
bd:d8:e9:1f:5c:6b:6a:f5:c0:94:e9:1c:2d:64:bf:
15:ef:04:ac:35:d8:77:ed:ee:94:1d:c3:d2:c9:cb:
ad:ab:68:f8:e9:9a:4d:6a:50:ae:82:95:09:fc:20:
87:d4:22:e3:c7:89:aa:e6:0c:56:0a:72:3d:d5:f7:
b2:59:a9:c0:46:c1:69:ea:20:0f:ba:16:ba:c6:5d:
c1:f4:fe:d9:af:ea:a9:e5:4d:a1:e8:de:2e:c6:f3:
14:1e:3a:04:22:dd:e1:f7:68:16:c2:09:37:f0:4c:
61:e2:17:fe:e3:1e:1f:15:c0:cf:de:5a:f7:ae:11:
29:02:ee:77:a6:13:ad:52:8b:21:00:1a:ad:e6:d1:
56:a1:03:8d:9f:6c:99:b7:94:ed:12:14:93:ef:5c:
23:49:6a:23:bd:e3:fc:72:cf:08:83:a7:c5:e6:62:
38:02:6f:af:13:14:bb:30:1c:0c:59:8c:9d:f4:4e:
db:24:b7:f2:f3:32:9d:ad:95:a1:37:71:a7:26:16:
f0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BC:E8:CB:D4:0B:D6:BA:AA:49:FB:B6:44:31:AA:E9:88:C4:6C:44
X509v3 Authority Key Identifier:
keyid:A0:25:17:74:D6:D8:74:97:63:90:A0:56:1B:76:6D:41:25:EF:E6:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b8b7e4-f4cd-4e06-b81c-c5caa7faed7d/1/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b8b7e4-f4cd-4e06-b81c-c5caa7faed7d/1/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:14:75:45:5c:aa:27:a0:78:ac:89:e0:af:3c:05:77:bc:1e:
96:1b:9c:5b:07:52:7f:bc:d0:5e:de:cc:4b:5b:fb:78:a5:ec:
fe:4c:53:5f:35:5b:f9:db:f3:f2:21:52:a6:0f:78:97:71:31:
e8:3a:b8:65:c2:7a:17:f3:51:94:af:49:5e:24:24:cd:9b:ac:
a4:c1:4a:46:db:61:3f:37:1b:3c:1b:a4:85:a9:81:07:51:75:
f9:9e:78:1d:a6:26:0b:e5:29:4a:ed:e9:77:f3:56:d9:95:2c:
49:7b:95:50:1f:e1:57:22:db:2d:1a:47:b9:bc:f9:ef:b8:23:
a4:0c:ce:16:4d:e5:3d:b1:94:92:a8:cf:01:70:a5:73:89:89:
b7:8a:c1:83:9b:98:e5:9b:1c:74:8c:bb:a1:cb:73:72:a9:65:
dc:5c:81:8d:97:88:96:64:c6:28:14:51:d3:b4:21:c1:e8:98:
a5:8d:c7:69:06:f5:eb:6d:3d:4f:e9:1f:e2:a3:39:90:12:e1:
fa:03:64:be:8d:f7:11:05:70:53:a6:c3:9d:84:cb:c0:bb:be:
99:f6:31:8a:4a:af:09:58:be:4a:52:9a:6e:83:28:97:50:a5:
94:39:81:de:ed:b0:d0:07:4e:23:b5:76:a8:d8:b1:5b:51:3e:
36:a2:7c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:37 2025 by rpki-client