Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5e9df7-1c88-4449-93da-b6427395d29f/1/o3QjR8c-ez1QD2D7ZQuCoBwh90k.mft
File: o3QjR8c-ez1QD2D7ZQuCoBwh90k.mft (raw, json)
Hash identifier: 729zQEmR4iek5eWQ4VUWXJSc58t2oqzcEwWMRlD8O48=
Subject key identifier: 81:4B:B7:39:5D:D7:7C:A8:E6:01:1F:60:63:7D:6E:31:02:FF:60:61
Authority key identifier: A3:74:23:47:C7:3E:7B:3D:50:0F:60:FB:65:0B:82:A0:1C:21:F7:49
Certificate issuer: /CN=a3742347c73e7b3d500f60fb650b82a01c21f749
Certificate serial: 0194B55DE029CEB809ACB3E7DE9C2733002B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3QjR8c-ez1QD2D7ZQuCoBwh90k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5e9df7-1c88-4449-93da-b6427395d29f/1/o3QjR8c-ez1QD2D7ZQuCoBwh90k.mft
Manifest number: 13BA
Signing time: Thu 30 Jan 2025 04:00:15 +0000
Manifest this update: Thu 30 Jan 2025 04:00:15 +0000
Manifest next update: Fri 31 Jan 2025 04:00:15 +0000
Files and hashes: 1: K3KyZfEtYbTHdXEOghKoXhk1m_8.roa (hash: dTX42V4AaNdh3/aam3z5j/mByurbzoPSaCPKTtCXu0o=)
2: o3QjR8c-ez1QD2D7ZQuCoBwh90k.crl (hash: SLEx+WC+MQ+tmRl/Oo2DsiinmG9rRFrCxo7+Iny05MY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b5:5d:e0:29:ce:b8:09:ac:b3:e7:de:9c:27:33:00:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3742347c73e7b3d500f60fb650b82a01c21f749
Validity
Not Before: Jan 30 04:00:15 2025 GMT
Not After : Jan 31 04:00:15 2025 GMT
Subject: CN=814bb7395dd77ca8e6011f60637d6e3102ff6061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:29:79:a5:cc:51:72:e2:2e:b4:7d:19:07:ad:
31:3a:a5:d5:56:85:88:35:e5:49:5e:44:6a:96:4a:
d9:aa:a0:dd:78:15:3f:b7:e8:52:18:d5:e9:36:c3:
60:80:df:48:d2:53:72:ab:9b:d8:eb:c9:ad:ec:4a:
0b:25:3a:f5:3e:cf:53:dc:df:53:0a:2e:6d:b8:33:
7c:d5:77:96:6f:19:4b:bb:43:2d:cb:db:8d:b0:22:
1b:4f:6a:94:bc:32:f1:b9:4f:cb:aa:10:84:d1:e9:
18:ae:3b:e7:3e:41:8f:11:16:1c:67:9b:bd:78:73:
e2:bf:8f:7a:b7:55:6b:a2:e7:5a:85:9a:de:bc:dc:
86:47:43:1a:91:4d:f8:10:8c:f9:c6:ea:70:0c:2d:
5b:f6:de:8a:ef:27:b7:f6:82:da:61:28:e7:03:e0:
0a:be:aa:6a:1c:d8:b2:09:a0:60:3b:18:c1:a7:b2:
2c:e0:ce:1a:00:d0:cf:f0:e4:d2:5c:1d:89:2f:57:
c6:a3:93:83:83:86:31:46:6e:50:57:68:d2:25:53:
19:10:bf:5d:e2:c6:2c:4f:74:51:c9:a2:ce:42:1f:
d0:c3:e6:48:90:12:39:f7:35:f7:4b:ff:08:1f:7d:
91:6a:21:77:ac:b5:9d:b2:30:cd:61:5f:ef:27:4f:
32:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4B:B7:39:5D:D7:7C:A8:E6:01:1F:60:63:7D:6E:31:02:FF:60:61
X509v3 Authority Key Identifier:
keyid:A3:74:23:47:C7:3E:7B:3D:50:0F:60:FB:65:0B:82:A0:1C:21:F7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3QjR8c-ez1QD2D7ZQuCoBwh90k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e9df7-1c88-4449-93da-b6427395d29f/1/o3QjR8c-ez1QD2D7ZQuCoBwh90k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5e9df7-1c88-4449-93da-b6427395d29f/1/o3QjR8c-ez1QD2D7ZQuCoBwh90k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:87:26:5b:a1:6e:cd:7a:46:1b:93:4b:e7:20:7d:12:d9:eb:
62:80:a7:29:e8:68:1d:4f:1c:82:7b:af:eb:df:9a:e0:c7:88:
1c:c0:f5:d9:f3:7a:50:ee:7b:51:77:d6:ad:b5:f9:b4:05:8e:
41:ae:60:44:29:ba:fd:36:c2:ef:06:5e:9e:f5:85:3b:4f:47:
18:48:ed:dd:9c:e7:de:14:55:3c:0c:a2:f4:43:44:59:53:c5:
cc:1c:57:37:d9:6f:77:03:45:41:2f:6d:07:dc:95:cb:7b:07:
c7:7e:21:d7:81:47:90:6f:cf:26:50:fb:71:b6:1b:64:cd:87:
5a:e0:5f:f7:87:65:63:09:e9:7a:43:43:da:07:c9:c2:f2:91:
29:e7:8c:63:9e:19:a5:19:c8:d4:14:ac:e0:7f:54:dd:10:69:
e1:62:71:5f:7b:12:4d:26:28:24:89:e0:28:c5:18:34:5d:55:
4d:c6:5b:63:7a:ae:f1:00:e5:c9:d9:42:52:cd:a0:7b:d3:12:
0f:71:9d:0e:73:db:6c:40:14:6d:94:07:86:5e:02:ab:56:74:
ec:2a:af:da:a0:39:2b:aa:fa:b4:be:c7:7f:09:aa:57:6d:5c:
be:d8:4d:33:85:91:9a:ed:35:1e:6d:6b:b1:42:0b:73:11:3f:
fd:fb:cf:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 08:08:56 2025 by rpki-client