Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
File: odAxU3OwmwYapZ8SnVkuq_ezqu8.mft (raw, json)
Hash identifier: D3CM3+yTi9cICNbk1l2AlSnDxbGMqfeqXaZdE7QYDDE=
Subject key identifier: 4F:92:CC:DB:1B:11:98:A4:6A:C6:0F:AC:74:B7:3D:CE:75:C9:82:3E
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 0195E046DD6C4C9DEEFCD5510007CFD6551B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
Manifest number: 14D2
Signing time: Sat 29 Mar 2025 05:01:35 +0000
Manifest this update: Sat 29 Mar 2025 05:01:35 +0000
Manifest next update: Sun 30 Mar 2025 05:01:35 +0000
Files and hashes: 1: H4Im8Swj1FSuJyYqN8JPK7UpVDU.roa (hash: jQUdvjp+XMu9RhMc9HBGBO2BWt37hObPuG6tYSQQ2Vc=)
2: NqcS3iBK8U8flvef0Nqw2TVfi60.roa (hash: j8yFbIlyMimvTa7T3CseeI21D35WgrPORHectZm7+m8=)
3: RoGTylsAvJ0kfUqQmOGMGPl4lMw.roa (hash: M6AyczLNwaE/pwZJ9qp9kSzxL5JgaMLnNyyEPKCm858=)
4: odAxU3OwmwYapZ8SnVkuq_ezqu8.crl (hash: nXXLFf/MQxz26YsKWS3ARv/gQnWWvi/dLaG0bQfAHo0=)
5: vzGcID_N34zQFrVI3nMugUoVewA.roa (hash: s5waq9wx34dg2rh+ta7n4AjQKU2ote6EQ3de9ofeRpo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:dd:6c:4c:9d:ee:fc:d5:51:00:07:cf:d6:55:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: Mar 29 05:01:35 2025 GMT
Not After : Mar 30 05:01:35 2025 GMT
Subject: CN=4f92ccdb1b1198a46ac60fac74b73dce75c9823e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:88:83:26:49:7a:be:b4:3d:80:55:da:d3:60:
d2:4e:bd:67:0c:0c:36:06:73:58:b0:70:b0:16:4e:
99:22:2d:a5:e2:34:7a:44:e1:d9:cf:3e:4a:1b:9c:
ff:ab:e1:0e:d0:da:c5:fe:7a:be:25:8d:50:b8:fb:
16:e7:69:a9:44:d8:7d:49:6f:34:1d:e3:b3:25:b9:
8c:17:bc:00:c7:25:82:bc:88:8e:bc:e9:34:85:88:
1d:28:0e:83:5a:92:70:b5:81:14:87:eb:71:b0:fc:
bf:63:bd:63:08:c1:30:9b:46:54:84:aa:a1:d1:51:
cc:c9:21:e7:af:8c:67:ce:a0:d5:4f:0c:5d:16:1f:
1d:34:c5:a9:b7:f4:61:6c:6b:ac:57:33:60:78:6a:
61:9d:69:fb:8c:bd:e2:08:e0:98:57:42:d6:5d:37:
66:6b:4b:a3:4d:dc:4d:ff:a7:76:9b:74:95:ff:d0:
60:05:90:4d:19:06:04:39:3a:5c:a7:fb:33:9a:ac:
0e:7c:08:65:f4:d0:c3:5f:be:fc:db:ab:f5:66:30:
0c:40:28:6c:dc:cc:41:00:8b:20:8d:36:d8:fc:68:
41:07:7f:cd:74:b9:23:37:b6:30:06:12:fc:f1:58:
00:57:5f:4b:c5:d0:01:10:d0:31:10:9f:28:fa:f7:
cd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:92:CC:DB:1B:11:98:A4:6A:C6:0F:AC:74:B7:3D:CE:75:C9:82:3E
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:42:8d:f8:53:a2:81:91:60:fd:7b:05:ab:e9:97:8c:38:8f:
e3:f8:7b:10:fa:d7:0a:bc:bc:18:20:e1:cc:5b:6b:d2:0c:f1:
22:37:2a:16:87:9f:ba:bc:39:d3:13:67:50:7a:dc:64:a6:74:
3e:57:8e:93:5b:04:ec:1c:4b:64:19:11:ed:e9:51:b4:70:f4:
1f:7e:17:7c:47:c5:36:2c:e5:6d:52:5c:ec:05:29:4e:9c:81:
ec:0a:d0:17:d9:00:24:67:d2:6f:08:92:0c:9f:21:74:2f:d5:
17:fa:ac:c5:2a:20:9a:43:c1:4e:03:e5:92:b7:bb:aa:0a:22:
16:b2:66:cd:84:82:a8:ef:00:67:f0:7d:b7:0b:f9:51:4b:5f:
12:f7:57:6a:e7:e3:07:8b:00:3d:cd:f4:d5:82:cd:0e:8a:21:
93:f1:08:21:55:c6:fd:5a:76:14:0b:07:96:d1:90:6c:bb:88:
9c:c5:9a:b2:9f:d8:2d:fe:62:82:38:ae:dd:9d:07:5f:0d:a0:
e6:ec:8d:a5:07:d2:fb:1d:6f:f8:e9:f8:19:bb:5b:bc:83:7a:
4b:32:4d:74:0d:ab:b9:04:b2:ab:4d:2f:de:de:10:6d:fd:ea:
a5:8c:24:87:c7:ba:9f:20:ec:49:d6:14:fb:69:0c:8a:47:cc:
3c:5f:8a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:01:49 2025 by rpki-client