Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft
File: o2CNaw6ApkMPtq9D-uFooOgBH-4.mft (raw, json)
Hash identifier: +b6Wm9NjaG3ZEn9EjnmOykyLO1llV6m8FrY9VtFQ2JY=
Subject key identifier: CE:D2:54:C3:2E:DE:6F:DB:3E:40:04:56:85:A4:6F:5E:CD:A9:30:8A
Authority key identifier: A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
Certificate issuer: /CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Certificate serial: 0195E1597B6943FC74796DECCAD1BC746A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft
Manifest number: 0A65
Signing time: Sat 29 Mar 2025 10:01:32 +0000
Manifest this update: Sat 29 Mar 2025 10:01:32 +0000
Manifest next update: Sun 30 Mar 2025 10:01:32 +0000
Files and hashes: 1: 1-zT9mAEBlOTW17BpRdhhq5CBopo.roa (hash: fOlZL/jmt7x24Mq2vq6+5+VHvePQon8h2vdvdk/CniI=)
2: 2jdvbPuVX3DvnSLzJ7PbPhY084M.roa (hash: TmyuM6Y9MB09UaiU4ubKUXZL1rxE4bCb1tGRI62YtN0=)
3: BjXm0XT4BTtEmIMPFFa63S__K7c.roa (hash: ETSjvpbNZrkoFW+0i09JYHs/YF4PfB7NXGdhRYyZxZs=)
4: Y8I7Cdrc3qJFqRL0cpCQD0-SJXM.roa (hash: kJVt9rCeoDhUmKwMAQa4mtxvjszoPS2OFInBbvhBp0I=)
5: o2CNaw6ApkMPtq9D-uFooOgBH-4.crl (hash: t1O66fPk2vs6n08AHmgzs3w/1W+thGpgqdzs/TJJ4F4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:7b:69:43:fc:74:79:6d:ec:ca:d1:bc:74:6a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Validity
Not Before: Mar 29 10:01:32 2025 GMT
Not After : Mar 30 10:01:32 2025 GMT
Subject: CN=ced254c32ede6fdb3e40045685a46f5ecda9308a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8c:97:a0:74:05:5e:04:82:47:49:59:f5:23:
86:a8:67:a2:62:1a:27:6a:43:e7:aa:a4:20:df:78:
fd:9f:4f:95:5b:f7:a6:9c:56:05:68:96:0c:38:76:
9b:5f:53:97:89:0c:09:cd:ee:12:1a:59:d0:1f:ff:
4f:86:cc:2a:c7:b7:d7:c9:37:d7:5a:50:cc:a6:66:
45:cb:b5:3d:19:1c:bb:55:d7:7f:d7:f9:34:4c:6b:
fa:1d:dc:1e:ae:68:a7:dd:d8:88:90:4e:42:8e:b0:
c8:b4:3c:b8:95:a7:3d:bd:bc:77:57:32:9e:38:fd:
b7:df:30:ce:59:73:a7:32:83:59:2e:a6:4c:7c:b8:
c3:57:ad:bb:ac:c3:73:27:2e:97:b5:d0:9f:ed:69:
db:46:16:71:21:57:3e:c1:eb:54:81:32:8b:10:87:
66:89:19:79:45:3d:02:e1:22:11:e2:58:b2:a8:bd:
1d:55:d9:e4:6e:67:60:07:83:a1:70:34:20:d6:89:
87:09:99:dc:b0:4f:9c:6d:3b:e2:84:94:bb:6e:01:
a0:f7:86:ce:38:8b:28:51:4a:7b:b9:4c:df:64:78:
83:b1:f6:11:60:e4:c0:c1:86:ad:98:46:a9:7c:aa:
9b:77:c0:da:f4:3a:05:42:50:09:68:c8:3e:d2:30:
d7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D2:54:C3:2E:DE:6F:DB:3E:40:04:56:85:A4:6F:5E:CD:A9:30:8A
X509v3 Authority Key Identifier:
keyid:A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:70:a7:42:84:c3:83:36:b1:9d:26:fb:a4:2b:d8:f7:d6:fa:
ad:a3:b0:aa:88:c4:f2:a8:b8:10:62:a5:c5:d4:40:34:ab:80:
b4:1a:17:d2:d2:28:82:0c:81:58:a1:27:da:d5:ed:e0:91:48:
f1:b3:d5:5c:ba:e3:04:61:20:dd:6d:f3:16:3e:54:24:1b:35:
b0:19:dc:01:43:06:ff:ac:c0:9d:c7:c1:92:33:34:9b:b8:9c:
bc:2c:1b:ef:29:cb:1c:df:b7:d3:92:0b:96:29:c1:5a:87:ed:
ad:3d:bd:4e:f4:64:75:03:5c:99:22:72:0c:07:b4:ee:1b:5c:
8e:9b:b3:5a:d8:7d:3e:0e:29:4d:52:14:6b:a1:5e:74:a5:e5:
4a:4a:a3:02:52:34:0b:3f:2e:31:9e:d2:82:df:e0:24:e0:c1:
19:92:8f:08:85:9c:0b:bd:16:f9:86:50:bc:80:f8:c4:5c:ac:
3a:9e:10:35:db:63:1a:86:f8:de:ed:dc:b8:94:39:4e:72:49:
41:a3:c3:4e:c2:c5:73:8b:f7:42:d2:04:2e:5d:ab:bf:76:0a:
26:7c:7c:fb:35:01:f9:33:9e:3e:fb:a6:02:62:90:fc:00:6b:
8e:90:ac:8d:cb:f4:84:18:f0:3b:2a:fe:00:60:1d:3d:e6:cb:
62:d6:3c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:49 2025 by rpki-client