Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
File: oEhFrx3ACHsnTO5SpKngiAM1Q10.mft (raw, json)
Hash identifier: zssX4bEIypoRVh5lk9coAHJbpZkooxG+gvw46pTVHrQ=
Subject key identifier: 72:D6:36:3F:81:BE:AF:A8:E5:1B:C8:A3:30:91:23:8C:45:BD:91:A2
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial: 0195E19024A0A6175B8E62D122CA403A1D41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
Manifest number: 14D2
Signing time: Sat 29 Mar 2025 11:01:14 +0000
Manifest this update: Sat 29 Mar 2025 11:01:14 +0000
Manifest next update: Sun 30 Mar 2025 11:01:14 +0000
Files and hashes: 1: 20y5ubfJnSaHdbEYhfDAIBE8gCA.roa (hash: PxZHYMXvBuF+PNUk3IUPx2E16Gx/KhT8hlhJp8/fAbA=)
2: oEhFrx3ACHsnTO5SpKngiAM1Q10.crl (hash: JcPKMeFNd2pRwKJZc06WvnrQBsQZbfRTtX4IpWq5rpM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:24:a0:a6:17:5b:8e:62:d1:22:ca:40:3a:1d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
Validity
Not Before: Mar 29 11:01:14 2025 GMT
Not After : Mar 30 11:01:14 2025 GMT
Subject: CN=72d6363f81beafa8e51bc8a33091238c45bd91a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cc:01:8a:fd:0b:31:22:18:97:d3:b4:30:b1:
93:d3:e2:da:4b:14:ed:5f:22:45:be:ba:56:32:66:
6b:61:4c:6d:36:70:57:28:ad:2b:be:26:21:75:4c:
4b:66:e7:27:b1:a5:c8:ad:9f:ad:1a:08:f1:ad:1e:
bb:e2:3a:97:05:55:c5:c5:6a:e4:42:46:2b:d6:65:
6c:0d:6b:7e:2b:95:2c:d5:d6:45:a8:4f:2e:5a:c1:
89:5b:e5:82:8c:d4:9f:fe:b7:bd:c8:65:71:27:5e:
62:97:f8:76:93:82:0a:dd:38:17:cd:80:a6:f0:c8:
38:1d:cc:7b:4a:44:01:4f:0b:a6:ed:70:68:e4:08:
4d:ee:8b:cb:ba:4d:55:c4:f3:65:9b:5b:9d:da:46:
52:ed:6d:6b:ed:02:13:56:02:a6:43:c7:d4:c0:d0:
9a:84:7a:dd:07:03:16:5f:34:57:41:de:fe:dc:76:
cc:56:b3:d6:16:d9:16:ce:8d:ea:ac:f6:59:49:fd:
09:c2:d8:14:c9:d0:61:9e:f5:c7:89:58:4d:3b:1c:
13:d9:98:79:a4:51:1d:91:1b:6c:b7:3d:af:65:ed:
62:3a:02:45:27:c4:9f:03:55:7e:2a:1b:97:99:f6:
13:3b:67:e7:9c:bd:ae:c9:5a:eb:d9:61:f0:29:fc:
d1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D6:36:3F:81:BE:AF:A8:E5:1B:C8:A3:30:91:23:8C:45:BD:91:A2
X509v3 Authority Key Identifier:
keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:60:45:62:21:94:86:32:62:51:50:74:85:0d:ce:9e:9d:01:
2c:21:b1:a4:23:92:cd:f7:18:da:35:5e:96:65:74:63:60:38:
37:a0:c5:55:dd:ba:9a:b7:07:48:25:86:6a:cb:c3:4d:79:f9:
df:5e:3b:ea:24:a0:55:cb:b0:ae:07:a4:47:2c:6e:85:7f:95:
83:19:11:e6:82:0f:ca:dc:e4:e1:92:bc:70:ed:bb:bf:c0:e5:
66:ee:7f:a4:dc:29:e3:4a:47:9f:cc:34:42:04:0c:9a:a3:d9:
1c:37:a7:ce:7e:dc:33:1d:ef:77:c6:2d:3c:a2:ad:e7:98:92:
df:cb:af:62:ce:e6:f1:29:a2:7d:91:79:80:da:ac:2c:e9:87:
39:97:f1:57:f7:17:13:56:c3:94:89:ff:1f:00:c9:f0:c7:57:
af:7d:58:a5:a7:9d:b5:a2:ac:05:cc:3c:c2:53:2e:1e:0b:b6:
f5:d6:62:53:cd:cc:31:45:04:9b:72:50:40:58:4d:2b:c7:e9:
5f:a0:02:2f:46:e9:31:95:7c:08:c8:39:43:b3:00:20:75:b2:
59:43:81:a6:a6:c9:9c:8d:ee:d3:9b:42:be:e1:06:0d:8d:a3:
fa:41:14:95:c6:db:12:30:90:6d:3b:71:7a:42:da:58:ac:94:
25:17:f4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 04:58:42 2025 by rpki-client