Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/omzFT4sqjbNhQ9y6FBAKIUoaQYU.mft
File: omzFT4sqjbNhQ9y6FBAKIUoaQYU.mft (raw, json)
Hash identifier: fq/WDSmayjz8617tuDHUnqsmrkovmsYey+4NWWiOhpk=
Subject key identifier: 4D:96:9F:6E:24:F2:AC:85:35:94:77:F8:A4:2B:F1:65:D8:CB:37:07
Authority key identifier: A2:6C:C5:4F:8B:2A:8D:B3:61:43:DC:BA:14:10:0A:21:4A:1A:41:85
Certificate issuer: /CN=a26cc54f8b2a8db36143dcba14100a214a1a4185
Certificate serial: 01870D9F5E4D1C1B4741504C0E39C0E29871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/omzFT4sqjbNhQ9y6FBAKIUoaQYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/omzFT4sqjbNhQ9y6FBAKIUoaQYU.mft
Manifest number: 05D5
Signing time: Thu 23 Mar 2023 08:39:20 +0000
Manifest this update: Thu 23 Mar 2023 08:39:20 +0000
Manifest next update: Fri 24 Mar 2023 08:39:20 +0000
Files and hashes: 1: W_i1FeJR9HuNSUKkTTXqbDJZauQ.roa (hash: +6hXIpHZsS6wtpH8DZtAbJ4XGlpy1it+/t3sRiTEnzs=)
2: abb7Tj9y0IWkvCw2sbuEkZGx2Ns.roa (hash: Hq3tgP3ISnTxs76x6vWCXiGOVipA3O94srSDesVzDwA=)
3: omzFT4sqjbNhQ9y6FBAKIUoaQYU.crl (hash: d0kLOn3D4FJcGkoKXdJRAODMighKohUqy4DhPVoT56I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0d:9f:5e:4d:1c:1b:47:41:50:4c:0e:39:c0:e2:98:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26cc54f8b2a8db36143dcba14100a214a1a4185
Validity
Not Before: Mar 23 08:39:20 2023 GMT
Not After : Mar 24 08:39:20 2023 GMT
Subject: CN=4d969f6e24f2ac85359477f8a42bf165d8cb3707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:76:e6:ae:a6:b1:0e:e9:19:85:4e:8a:99:f6:
59:48:58:46:a2:e8:12:73:9e:57:b8:2f:fe:5b:39:
52:e8:17:02:44:66:96:8a:b2:86:cc:0d:93:32:c3:
ac:76:6e:e2:5a:ef:cd:e4:19:50:8c:b5:bb:89:78:
6c:af:a9:54:18:e4:00:b7:6b:3b:e8:f3:be:0e:6a:
f2:79:4c:f3:33:48:96:15:3d:d6:3a:50:52:1f:cb:
04:06:d7:24:c1:42:7d:4d:51:1d:1f:af:c0:e5:af:
94:9d:7f:e8:a5:40:5d:51:f7:0f:f8:53:29:40:87:
46:c1:c3:29:db:7d:1b:2b:76:59:18:70:e5:22:51:
37:09:0a:ff:46:8e:e4:03:81:20:24:19:1a:02:c2:
30:af:bc:71:e0:15:bb:9c:62:6a:e5:b2:c1:71:eb:
11:09:b4:dd:bf:34:1f:f8:cd:af:67:17:5a:1d:8d:
08:e3:09:47:a2:8e:68:b9:92:b8:ae:04:0d:61:22:
dc:ef:42:10:85:34:81:8f:0e:45:11:9e:15:da:2b:
c0:b7:32:1e:81:10:53:30:29:83:37:68:13:45:40:
b6:d3:87:f6:ba:ce:be:a0:52:d2:f9:6b:4a:47:98:
d8:65:2d:86:23:33:a4:78:fe:5d:b1:04:b4:5b:b1:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:96:9F:6E:24:F2:AC:85:35:94:77:F8:A4:2B:F1:65:D8:CB:37:07
X509v3 Authority Key Identifier:
keyid:A2:6C:C5:4F:8B:2A:8D:B3:61:43:DC:BA:14:10:0A:21:4A:1A:41:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/omzFT4sqjbNhQ9y6FBAKIUoaQYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/omzFT4sqjbNhQ9y6FBAKIUoaQYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bee73d-bda9-47ce-9cfb-b9fb48e43501/1/omzFT4sqjbNhQ9y6FBAKIUoaQYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:15:1b:7f:b5:27:a4:56:32:d0:3f:9a:a7:b2:8b:ff:2f:25:
cf:72:f9:c2:70:66:e8:7c:1c:71:01:27:0d:0a:e4:b2:90:09:
99:09:89:26:4f:90:14:2e:82:27:19:ab:0b:8d:a1:c3:af:1c:
3f:a2:70:8d:45:cd:2c:06:17:77:0a:1e:48:9b:cf:c3:f3:3e:
31:85:c3:60:fc:2d:96:5c:c1:88:0c:08:e0:98:78:0b:e6:41:
24:9b:d9:65:fe:8d:36:25:1a:2b:72:04:da:75:b1:c8:8f:37:
3c:52:aa:cf:7b:b4:86:97:a9:af:30:8b:5b:2d:db:23:17:1a:
88:f6:4a:88:a9:50:08:59:81:6f:bd:50:b8:e0:b5:23:95:33:
02:3e:b1:d2:46:28:f4:1b:b3:e5:4e:7c:10:5f:68:93:91:cd:
21:88:5a:89:8b:b4:90:d7:50:d8:4f:46:e4:d9:88:dd:0b:1b:
a5:08:2e:d4:d8:95:75:3a:c6:fd:08:a2:67:0c:e1:88:a1:a9:
7c:c7:07:9f:0f:49:dd:3c:23:0d:d3:09:fa:f0:2f:54:68:c7:
6c:f3:e9:91:cc:8d:90:38:32:50:23:1e:f1:cb:35:96:55:b0:
86:ed:fb:51:88:e4:dc:0c:55:53:98:02:94:04:d4:a6:08:db:
fb:43:83:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:11:10 2025 by rpki-client