Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.mft
File: oOA8d5KohHNOzTTrQsfFBJ8Mdp4.mft (raw, json)
Hash identifier: bC0KKy27c3+mksnKa3emyd1cYoTqIlR0oT/+DPywKJE=
Subject key identifier: 38:10:AB:30:4E:96:6C:F5:76:13:CC:50:A7:18:C7:82:96:AB:97:F6
Authority key identifier: A0:E0:3C:77:92:A8:84:73:4E:CD:34:EB:42:C7:C5:04:9F:0C:76:9E
Certificate issuer: /CN=a0e03c7792a884734ecd34eb42c7c5049f0c769e
Certificate serial: 018E60AC0BDD38123E48172D3877737C24B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.mft
Manifest number: 0D01
Signing time: Thu 21 Mar 2024 11:01:11 +0000
Manifest this update: Thu 21 Mar 2024 11:01:11 +0000
Manifest next update: Fri 22 Mar 2024 11:01:11 +0000
Files and hashes: 1: aJYElrIobs2JHhyG2WPD65MRQsI.roa (hash: DUUkJKfaU0M++N3wINNloE74byze67doTmHnny2EySA=)
2: cWiz7uVJXpgeknDHmo5oogr_FH8.roa (hash: Nk2VepxDVTXw5aksKbV8164S6wMgYAXlNGTAA5J5Psg=)
3: nqYwnImTJ0DJvE-1bzUEmkvdPZk.roa (hash: q+JkDAgRhLOlQ5800QMGZxn6HkBZliLF59BtT7O2E1w=)
4: oOA8d5KohHNOzTTrQsfFBJ8Mdp4.crl (hash: 8H2mo0Z9mrl/AVYpJqSZIFkIVi13bSZNe/1i6jpEvrI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:60:ac:0b:dd:38:12:3e:48:17:2d:38:77:73:7c:24:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e03c7792a884734ecd34eb42c7c5049f0c769e
Validity
Not Before: Mar 21 11:01:11 2024 GMT
Not After : Mar 22 11:01:11 2024 GMT
Subject: CN=3810ab304e966cf57613cc50a718c78296ab97f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b8:ea:d2:73:8d:ac:83:ea:8d:e3:2d:2c:4f:
61:9f:5f:43:7f:46:5c:0c:a4:56:c8:8c:6a:ea:f0:
66:3a:a7:b1:77:60:c3:da:d7:05:97:dd:b7:2a:85:
41:06:f0:84:53:48:e7:63:ff:f9:1a:49:20:96:96:
67:91:1e:86:df:8d:6e:db:45:a1:46:b2:08:9b:8e:
a5:c4:82:3f:fc:77:2e:39:9f:92:f9:00:02:2b:e9:
d5:e5:d8:57:75:37:3c:74:71:ba:8b:1c:89:95:54:
1c:7f:a6:37:23:1b:33:92:2d:75:7d:ff:70:9b:0f:
38:cf:5b:78:c3:f4:f0:07:cc:93:ba:14:9c:fd:cf:
af:e2:35:29:e8:3f:81:d1:fd:cd:7b:bf:5c:76:88:
9d:b6:6c:fb:32:dd:fc:38:6c:c5:a0:90:3c:81:96:
d7:44:ab:b0:ce:59:17:5f:e3:db:3a:56:38:09:03:
37:89:13:f6:9e:5f:69:b0:4a:a8:31:b2:20:d0:2e:
30:a3:fd:de:f4:ec:67:6f:57:2e:4e:53:78:31:79:
a1:cf:38:bb:57:ff:0c:ca:d3:cd:62:f9:65:12:fd:
60:d2:7d:16:7c:35:67:95:e1:e6:84:71:3f:1d:c6:
8e:f7:31:43:f4:c5:f3:4e:1e:a4:46:0d:3a:c1:df:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:10:AB:30:4E:96:6C:F5:76:13:CC:50:A7:18:C7:82:96:AB:97:F6
X509v3 Authority Key Identifier:
keyid:A0:E0:3C:77:92:A8:84:73:4E:CD:34:EB:42:C7:C5:04:9F:0C:76:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/447964-0765-4bcb-a760-7248c85e5eb8/1/oOA8d5KohHNOzTTrQsfFBJ8Mdp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:6a:ee:09:6a:21:54:f4:ed:28:dd:ac:eb:95:ef:16:8b:43:
fc:54:3b:89:bd:54:4d:35:4a:b0:90:cd:fe:13:ce:0f:30:8b:
5c:0e:c3:d0:7d:13:b3:d5:7c:37:a0:ae:8e:23:41:a6:78:0c:
96:ab:b2:08:18:d4:2d:02:4e:ec:e0:46:0f:bc:b5:03:51:12:
b0:fa:6d:c7:0a:48:ba:7e:27:9d:95:cc:49:fb:fc:77:10:7c:
f5:eb:5c:fe:96:7e:09:38:0c:ca:3a:2a:0d:3e:19:b8:5d:24:
a3:2e:33:c7:2b:e6:cd:d0:ae:8a:c5:ad:b0:da:9a:ce:df:36:
fd:fe:13:b4:eb:31:cc:e3:10:dc:9b:3c:10:c2:00:ec:1d:36:
15:19:ed:4b:ae:65:4d:a2:51:f1:96:75:7c:37:98:d4:3d:f0:
a4:4f:e5:36:57:c1:22:a8:9b:51:e1:ee:89:2f:06:36:a7:0e:
88:60:6a:06:5b:b8:27:fb:99:73:78:7b:9f:b4:9a:0f:b3:57:
27:43:d5:9d:a8:ba:44:cc:a6:0b:c4:11:14:cc:7e:6d:21:42:
fc:f7:27:b4:e8:2d:0b:d7:66:a3:fc:0e:68:85:3d:1d:da:00:
71:66:e9:ea:38:f6:80:9b:09:ae:02:04:53:69:09:a5:35:e2:
96:04:36:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:35 2025 by rpki-client