Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
File: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft (raw, json)
Hash identifier: IBgnCHtqdgaCrby9HU3mFPluUZV4bptSSmlfXu3arjA=
Subject key identifier: CB:F7:2E:88:D2:78:EB:92:B4:AB:4C:83:37:07:30:30:1B:8D:B7:F7
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Certificate issuer: /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial: 0195E046B3FC26A61FD79E2E1F642E9DA332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
Manifest number: 13BE
Signing time: Sat 29 Mar 2025 05:01:24 +0000
Manifest this update: Sat 29 Mar 2025 05:01:24 +0000
Manifest next update: Sun 30 Mar 2025 05:01:24 +0000
Files and hashes: 1: 8XFeAW4Hh2hiz0E_ab2pPciaX2E.roa (hash: BSu5h2EM4QjO3Lopd7DgZosh9ln/mIeDCpEg8qWTiLw=)
2: 9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl (hash: m42b5GpFJZUOhuARgrmSNRdrUe2X7f2NMYyGHyRK6sU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:b3:fc:26:a6:1f:d7:9e:2e:1f:64:2e:9d:a3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
Validity
Not Before: Mar 29 05:01:24 2025 GMT
Not After : Mar 30 05:01:24 2025 GMT
Subject: CN=cbf72e88d278eb92b4ab4c83370730301b8db7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f5:e5:9e:3f:dc:a5:45:92:51:cd:34:9e:c5:
93:d9:ea:26:9e:99:4c:8a:15:a6:fa:34:d6:36:24:
8f:2f:23:2f:42:78:21:b2:bb:48:7f:69:af:93:d4:
de:22:7a:8e:25:03:a1:6f:f2:47:f0:32:0d:ca:fd:
cc:ae:93:70:4e:cc:61:04:3a:27:3a:b5:09:54:ef:
0b:f0:bf:5b:6b:d1:af:5a:61:a5:4e:ef:46:1f:5d:
52:de:c0:d8:bd:b4:6b:78:ec:0e:d7:85:b7:63:ab:
40:93:e0:23:06:d1:6e:5b:26:a2:9e:c5:c9:de:11:
18:28:7e:2d:87:e9:18:a8:6e:b1:16:be:1a:02:36:
24:9f:d9:8e:25:5f:14:fe:db:da:a3:3e:d3:97:cc:
7d:88:27:cf:38:ae:36:0f:42:b8:0b:80:c3:7f:a8:
02:c7:c1:2c:99:92:07:e6:da:7d:7c:41:0d:1f:67:
3f:19:d9:3e:fe:76:d0:e0:ec:3d:2d:c8:1f:9c:5d:
7b:ec:b1:7e:e9:c9:bb:e0:97:28:b4:8d:2d:ba:f8:
4c:b2:95:ac:3b:d1:d9:07:06:80:96:e8:b0:8a:28:
96:0a:58:48:75:69:ef:5e:aa:5d:1b:cf:3f:9b:00:
d0:af:5e:25:77:1f:b0:d5:f2:a1:05:28:c0:24:36:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F7:2E:88:D2:78:EB:92:B4:AB:4C:83:37:07:30:30:1B:8D:B7:F7
X509v3 Authority Key Identifier:
keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c0:df:3d:2f:80:95:be:f4:a7:6d:cd:91:29:03:02:51:4b:
19:31:bd:9e:c2:c1:28:f7:28:c4:90:bd:a2:69:d9:5c:70:df:
ca:9c:9b:36:f7:2c:5b:37:16:5a:23:68:5d:91:dd:52:06:3c:
3e:ac:bb:2f:a0:08:4f:60:2f:23:11:a9:45:8d:0d:50:fd:e7:
6a:a5:c3:88:3c:d1:7d:58:13:65:5d:73:42:f7:62:a4:91:bc:
80:08:c8:b9:98:e2:11:a8:27:b8:2f:77:bc:15:25:58:d5:2c:
ff:ea:97:b2:5d:ba:17:e7:ad:03:69:3f:88:56:f0:ac:e5:5c:
30:42:a7:18:16:31:44:d4:b6:b2:49:c2:06:42:5d:e3:bb:44:
5a:c4:45:c2:59:ba:f0:72:3f:0a:c0:8b:70:34:d3:84:7c:1e:
f8:54:dd:2f:b9:75:1c:73:4c:2f:62:78:e8:06:f6:0e:41:0b:
42:5b:5b:92:7c:91:9a:f6:b1:62:db:79:dc:f9:eb:b7:4c:43:
94:5e:62:65:e2:75:b9:6f:6d:3a:8b:c1:a8:cf:86:bd:56:cb:
ce:08:97:e4:97:41:fa:0a:46:03:d0:71:20:95:b2:d6:20:5b:
78:75:50:2e:c6:16:72:ef:25:fd:30:a9:5f:42:00:42:28:a3:
6e:83:43:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:47 2025 by rpki-client