Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json)
Hash identifier: EafgE/FPp3RjdCjx7YoGrKvXzyL1Xzna5N19pyEX5z8=
Subject key identifier: A8:1D:45:8A:6A:D9:5C:C2:A9:4C:BB:3E:CF:1C:BA:83:FB:E5:9D:F7
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 0195E0EB19E94425528385850BF9E5C4A849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
Manifest number: 0BB6
Signing time: Sat 29 Mar 2025 08:00:58 +0000
Manifest this update: Sat 29 Mar 2025 08:00:58 +0000
Manifest next update: Sun 30 Mar 2025 08:00:58 +0000
Files and hashes: 1: 50o06An3k3A8kOiunWV55W1-Ajg.roa (hash: AcFz8bkfqTGlKpcv2q2Ys5Hm4t2OZ+46UtANIMDmoyM=)
2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: XEQEix2191JfwL+wNjzNuTKnwPzMcHC87uxhpvqbyzE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:19:e9:44:25:52:83:85:85:0b:f9:e5:c4:a8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: Mar 29 08:00:58 2025 GMT
Not After : Mar 30 08:00:58 2025 GMT
Subject: CN=a81d458a6ad95cc2a94cbb3ecf1cba83fbe59df7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:bb:5e:e7:ea:75:4f:d0:40:57:0e:57:b0:
d2:e0:1e:6c:2a:31:21:5b:a5:b9:11:d9:6d:3c:9d:
3b:cd:70:fc:41:0e:f4:05:fc:2d:0b:5a:93:2c:4c:
fb:13:a1:ff:e5:9e:aa:e7:30:b2:c3:3e:94:ba:14:
71:ee:c2:1e:21:c0:a1:15:5d:1a:c8:e2:b7:be:c2:
cb:22:39:55:6f:51:95:a7:98:56:8a:b3:d9:b8:32:
b7:0e:91:f8:45:ae:a3:a7:a9:55:48:94:5f:ef:c7:
10:bc:c3:ab:c8:8f:57:e0:82:12:87:17:1a:c1:ae:
49:fd:1f:26:1b:2f:dc:83:b8:c0:2d:e0:d0:c9:4b:
bf:33:d9:a7:aa:4f:96:a7:cf:44:67:a2:73:9e:80:
91:48:f1:3d:32:dc:68:06:3f:d5:90:fd:61:21:07:
65:e4:7f:de:5b:b8:18:d5:c6:8b:ce:d1:07:3b:60:
91:95:b9:07:c0:6f:bd:bc:98:48:dd:a2:a5:95:7f:
63:10:6a:62:ac:89:2f:07:95:51:8d:05:2a:b9:97:
24:08:e9:2c:de:04:31:e9:1b:1b:69:96:25:16:0b:
a1:30:fa:72:85:2f:9e:59:54:56:2d:0a:cf:7b:94:
62:31:8c:20:f5:4c:14:4d:57:a4:46:44:4a:8f:b6:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1D:45:8A:6A:D9:5C:C2:A9:4C:BB:3E:CF:1C:BA:83:FB:E5:9D:F7
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f8:6b:85:69:cc:1c:b0:c5:f7:74:15:d5:f6:e6:1d:1f:a7:
b8:40:37:1a:c1:df:90:f2:8f:93:03:2b:f1:ab:52:4b:9e:5a:
8b:1f:21:16:2b:1f:85:7b:6b:09:8e:9e:17:49:9d:92:18:34:
48:2e:a6:e4:9c:2a:28:a1:8b:7a:06:de:75:f4:23:11:d7:79:
34:26:1b:de:c4:13:5f:6e:3a:3d:fc:98:4b:1c:65:15:15:c1:
7f:dc:2a:ce:f0:ac:f0:b2:3f:58:46:61:34:e2:59:09:20:d7:
a7:9b:f9:00:be:99:dc:9d:68:28:29:34:65:e4:72:13:3f:55:
c6:e0:a1:0b:3b:b3:ee:4b:26:1c:7f:44:75:71:54:9f:35:e9:
c4:be:d3:71:47:71:c6:65:4e:eb:00:90:40:16:e1:54:a8:70:
5a:97:a5:80:73:35:6e:73:c3:af:4d:4b:8b:3c:e4:7e:08:16:
43:a4:ee:21:13:fc:4d:88:e0:87:ec:40:60:d7:e7:61:98:e4:
16:ba:ce:f1:85:36:91:68:c1:60:c5:84:6e:a6:a2:62:ec:81:
09:a8:68:ed:40:57:ad:01:27:5b:5c:6c:36:5c:6e:2a:6c:dd:
43:a0:b5:27:3c:eb:f1:09:2b:40:eb:9c:12:99:7b:aa:a0:23:
2c:95:b9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:14:38 2025 by rpki-client