Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
File: o52_aHirAKRS-LB_iQ06s0g3Yns.mft (raw, json)
Hash identifier: sLsFg4MGG/ilZKy6zmX7omvYj2PXUhWQx9I2MBpN1Gg=
Subject key identifier: 0A:35:34:0E:8A:FB:98:D8:0A:11:EC:4F:7C:2A:EA:00:41:A9:BA:A0
Authority key identifier: A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
Certificate issuer: /CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Certificate serial: 0195E15939555552E4D67309D7257B5215CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
Manifest number: 0385
Signing time: Sat 29 Mar 2025 10:01:15 +0000
Manifest this update: Sat 29 Mar 2025 10:01:15 +0000
Manifest next update: Sun 30 Mar 2025 10:01:15 +0000
Files and hashes: 1: ExGaGMHRMHV6Wwq7HUUBGaTmIOs.roa (hash: GrRPycpKBiqBeJAl7ze1jROyMQik0DJu7nFgEpAVFB8=)
2: o52_aHirAKRS-LB_iQ06s0g3Yns.crl (hash: bBRb11IdgShZ3sUPjwgfUSdwQsVcnrcUeBLKPoqqkFM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:39:55:55:52:e4:d6:73:09:d7:25:7b:52:15:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39dbf6878ab00a452f8b07f890d3ab34837627b
Validity
Not Before: Mar 29 10:01:15 2025 GMT
Not After : Mar 30 10:01:15 2025 GMT
Subject: CN=0a35340e8afb98d80a11ec4f7c2aea0041a9baa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:ec:a7:42:09:13:49:ee:fb:7c:30:0c:fa:
a0:30:e4:bd:4d:98:f8:95:dc:f4:29:bd:a8:fd:74:
38:ea:b1:29:b7:ba:cf:36:ee:b7:4f:62:6c:06:07:
0f:46:35:00:b9:e6:d6:b5:ca:d0:a6:c9:ff:62:cd:
57:76:77:c8:28:17:9c:99:eb:17:5b:a5:c0:99:55:
ee:43:82:e6:7a:64:43:fd:d7:82:e1:2c:92:e6:d4:
4d:d6:5d:2c:6d:96:07:68:86:ab:ba:ce:30:2d:25:
3c:e9:fc:93:6f:d0:f0:6b:f3:3b:93:34:34:1a:d2:
22:17:8f:58:b5:34:c6:bd:67:cd:51:2f:28:e3:73:
90:ae:a2:f6:72:89:fb:e2:40:a1:0c:c4:3e:17:27:
38:03:dd:6b:22:e7:4f:6c:67:e1:b3:f6:a1:66:fe:
20:27:9b:44:58:e8:40:26:47:5f:dd:5d:5e:fe:c7:
88:25:e8:12:f4:15:fd:7e:77:d7:0c:c5:ec:8f:e3:
e7:b6:f9:cd:7c:d1:a8:fb:1e:b5:df:72:91:c1:7f:
b2:a1:ea:d7:83:6c:eb:85:ef:a8:5f:75:56:19:44:
77:c5:71:19:e4:ab:ab:7f:45:c5:c4:1f:5e:f5:52:
e0:e0:10:86:2d:53:ea:9f:97:dc:d2:7d:77:cf:71:
d7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:35:34:0E:8A:FB:98:D8:0A:11:EC:4F:7C:2A:EA:00:41:A9:BA:A0
X509v3 Authority Key Identifier:
keyid:A3:9D:BF:68:78:AB:00:A4:52:F8:B0:7F:89:0D:3A:B3:48:37:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o52_aHirAKRS-LB_iQ06s0g3Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/22696d-e72f-4cfd-bae0-ad4423765892/1/o52_aHirAKRS-LB_iQ06s0g3Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8c:d8:2c:db:22:8b:22:51:6f:05:8c:d4:b5:59:2c:09:6f:
49:98:c8:0e:d9:05:71:8d:70:e4:fd:a4:5a:26:57:d3:11:65:
e7:2a:f4:3d:4c:4e:63:5f:12:8f:77:48:4f:9a:f0:d1:b1:ce:
6b:81:14:20:51:7a:7d:0d:ef:99:ac:28:b6:9a:8e:93:a6:5d:
ba:79:5b:50:ea:52:bc:b1:15:b3:64:ef:a0:da:12:82:26:87:
09:0e:9f:fd:fb:50:31:83:6b:04:10:8e:a9:73:cd:5e:52:de:
d3:90:a1:e4:50:eb:d6:22:2f:33:88:57:9f:04:df:84:81:49:
80:de:56:4f:ec:8b:52:36:ca:1c:00:5d:04:32:05:79:58:ab:
8e:6f:86:83:cf:b0:a3:81:12:f0:49:17:14:af:98:b1:c8:6c:
9c:c2:9d:b0:98:a1:45:bb:1d:d9:94:8a:6d:82:b1:05:0e:29:
d1:76:da:79:c4:cf:34:11:e2:2c:2f:27:2d:11:1a:f8:93:38:
41:0f:8d:8c:b7:c9:3b:1f:92:ba:6d:eb:c1:cb:89:c2:55:dc:
a7:b6:f5:13:ef:a6:47:e0:b5:82:0b:91:8c:d9:12:88:23:7e:
05:cd:d8:f8:00:43:1f:75:3d:c4:19:fc:7f:17:05:5d:03:54:
b1:05:a3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:03:03 2025 by rpki-client