Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
File: oxkPbv156nMz-bzNhaBDUtkVsjk.mft (raw, json)
Hash identifier: cNSN9inBGrxrczcjWHBxbk0N15EdevQFMXqoxmBXsQs=
Subject key identifier: B4:97:F8:92:6F:D4:07:54:BB:25:EA:62:BF:1B:E6:21:FE:9A:89:3F
Authority key identifier: A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
Certificate issuer: /CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Certificate serial: 0195E00FD3DC91755AAC053060B6F4EFA981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
Manifest number: 13C4
Signing time: Sat 29 Mar 2025 04:01:28 +0000
Manifest this update: Sat 29 Mar 2025 04:01:28 +0000
Manifest next update: Sun 30 Mar 2025 04:01:28 +0000
Files and hashes: 1: KExUk0ZqXQL8EgosDUsfpJpTUyg.roa (hash: Sz5tU52c4zqN1bHM/ntPj4qPbpRJB4wKgoKZm0ClNu8=)
2: aIdDcKIPSrdTWAm8Itr83nsLcD0.roa (hash: UkSPTJ6SY0So9wqyoQ355LtxgU1FlK7CRcCejA7q0Vc=)
3: oxkPbv156nMz-bzNhaBDUtkVsjk.crl (hash: AiTSDX+nYv/LjXTUa8xqCESffxxK+pFo8Rl23P+5t8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:d3:dc:91:75:5a:ac:05:30:60:b6:f4:ef:a9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3190f6efd79ea7333f9bccd85a04352d915b239
Validity
Not Before: Mar 29 04:01:28 2025 GMT
Not After : Mar 30 04:01:28 2025 GMT
Subject: CN=b497f8926fd40754bb25ea62bf1be621fe9a893f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:73:8a:fd:44:b7:83:0b:aa:1b:06:3d:b4:43:
f6:8e:73:e9:51:96:44:09:70:d6:22:46:f7:8f:d6:
4f:50:2f:39:f6:32:34:16:ed:65:11:8a:f0:8a:96:
0c:be:29:d4:5b:3e:21:74:50:7c:a0:e4:26:4b:1f:
9b:4c:16:50:9a:39:8a:1f:30:cc:ec:b9:92:aa:fd:
7b:bb:f4:cc:6f:fb:e9:99:8a:bb:c9:9a:a1:2f:7e:
02:98:4b:b4:8b:4f:b8:c7:88:93:b1:7e:28:ed:4e:
36:ea:ae:a8:08:63:83:21:f9:6d:83:35:48:ed:6c:
09:a3:96:1e:09:1f:e2:09:77:9f:2f:83:09:1c:65:
4e:d9:05:d2:ae:f7:41:cb:5f:7a:f2:22:f8:2b:40:
f3:ee:3d:11:d4:12:70:8c:e9:e7:9e:0f:b3:80:94:
6d:47:39:1d:b5:f4:5a:bd:88:c8:d5:ff:5d:59:77:
cb:04:68:70:95:bd:d9:a7:a9:aa:36:af:bd:01:c4:
2d:a3:8c:9c:66:d4:ff:84:8b:af:d5:9b:c7:4f:d8:
ca:b5:c9:11:fe:54:6e:a0:58:96:f5:4d:9e:84:fa:
b4:77:98:96:fe:ff:39:43:6a:92:f2:c1:86:c4:c4:
bd:23:c2:79:2d:01:99:38:2f:33:de:42:3e:68:5a:
91:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:97:F8:92:6F:D4:07:54:BB:25:EA:62:BF:1B:E6:21:FE:9A:89:3F
X509v3 Authority Key Identifier:
keyid:A3:19:0F:6E:FD:79:EA:73:33:F9:BC:CD:85:A0:43:52:D9:15:B2:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxkPbv156nMz-bzNhaBDUtkVsjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f6cfd7-a228-4591-9ef5-5f4b87ada4b5/1/oxkPbv156nMz-bzNhaBDUtkVsjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:76:56:13:e6:49:01:eb:3a:a4:f6:dd:ad:14:6b:bd:6b:96:
ea:0d:15:eb:46:31:92:fa:c3:76:f4:59:e1:42:86:61:d8:2a:
82:79:06:4d:90:9e:26:31:32:ab:98:81:e9:53:ec:f3:f5:f4:
ba:cc:f3:56:65:97:dc:4f:11:67:a2:34:c5:1b:16:b3:02:00:
1c:a7:da:82:94:3a:77:bf:4b:95:55:08:0c:25:19:b4:15:ed:
ce:78:4b:b3:bc:f7:f9:54:ab:7d:1c:55:6c:8c:96:8a:58:49:
31:fd:e7:97:c0:6a:df:99:2d:26:bf:0e:c1:65:d9:73:e9:7c:
88:15:3d:9e:aa:45:86:8f:73:7f:d7:06:fe:5b:77:0e:e6:c2:
49:b3:e8:bd:a6:a6:a8:33:c0:67:60:41:4c:0a:c0:e9:51:d3:
11:d3:d0:84:c7:6a:3b:62:d3:16:0e:26:3f:08:54:5d:70:01:
b7:f1:3b:dd:8a:e0:00:c8:01:ed:6b:46:51:7c:bb:3f:39:b4:
25:91:ed:b9:51:8b:e6:36:ce:84:d0:77:7c:5c:18:89:eb:53:
88:fb:ad:a4:d8:c9:cc:31:18:2d:15:8e:e3:48:e6:d8:ab:47:
53:d5:36:50:5f:3a:e2:3a:09:9c:73:a2:29:6f:36:12:8f:df:
de:39:39:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:02:52 2025 by rpki-client