Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
File: mOGPra73Iy0xYYhqy-qKsyPPNXA.mft (raw, json)
Hash identifier: Vug0QsqtRxu/N2tN6g41krqMS+EQxEf3rEph4zygZMM=
Subject key identifier: F7:4F:53:1D:1F:D4:3D:A5:80:14:AD:88:31:A7:EB:3B:DD:54:C9:71
Authority key identifier: 98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
Certificate issuer: /CN=98e18fadaef7232d3161886acbea8ab323cf3570
Certificate serial: 0195E00F82FF2F479D68F7FD09155F3D3BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
Manifest number: 0214
Signing time: Sat 29 Mar 2025 04:01:07 +0000
Manifest this update: Sat 29 Mar 2025 04:01:07 +0000
Manifest next update: Sun 30 Mar 2025 04:01:07 +0000
Files and hashes: 1: VpkCsO4Sj1kfftcY5G5XJmTJEG0.roa (hash: ETNkYiblCUpkwdU3IL2iumD+BXzDHtOGaGe3dN4NhPg=)
2: erMk5yuryhZB_ZV-dGn9yf-aRpI.roa (hash: g/Q0NWNaVho78aB7txRveS1/ldgfqH8Be/gkNubWJao=)
3: mOGPra73Iy0xYYhqy-qKsyPPNXA.crl (hash: jXzo5vmNugdN5i9OtdW1fhJi9pF4LgrZh4ltNAk68JQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:82:ff:2f:47:9d:68:f7:fd:09:15:5f:3d:3b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e18fadaef7232d3161886acbea8ab323cf3570
Validity
Not Before: Mar 29 04:01:07 2025 GMT
Not After : Mar 30 04:01:07 2025 GMT
Subject: CN=f74f531d1fd43da58014ad8831a7eb3bdd54c971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:68:56:0c:28:fb:6b:17:1b:48:31:bc:88:24:
9f:22:3b:c1:ab:ed:70:85:07:1e:15:f2:9b:24:c6:
52:b5:0b:0b:7c:f8:ba:6c:03:e5:4b:25:e1:23:ae:
18:fe:46:01:97:d6:20:df:c1:54:6a:51:77:31:e8:
4b:a6:91:d2:2f:ee:bc:09:d7:88:8e:63:a7:68:7d:
b3:52:e8:27:75:51:2c:4e:c7:aa:c3:6e:36:0f:61:
da:27:3e:e8:10:48:fa:14:b4:37:c3:c6:61:4e:b4:
db:6c:31:3e:5e:fe:ce:19:e7:06:55:3c:76:8f:6b:
53:7e:b3:62:3a:57:92:69:20:1c:a1:9e:e4:6b:46:
d6:a1:f0:52:fc:a5:b2:e8:1e:24:7e:be:dc:97:87:
10:7c:f5:36:21:3d:35:ea:c6:59:10:7d:63:22:fd:
ee:36:c3:cb:b8:f8:0b:b4:b3:07:df:32:d9:14:28:
4f:30:54:8a:7f:c3:61:96:c7:93:e6:11:53:3c:a9:
6d:a4:45:52:65:a0:f5:ad:86:74:05:84:04:6c:1d:
a0:04:09:34:fd:37:5f:3c:df:f3:c9:ea:46:ca:7c:
78:79:ae:7f:76:35:64:81:8b:2a:d9:b5:bf:6e:cf:
fc:42:43:68:ea:b5:8a:de:df:9d:00:3d:08:c6:01:
53:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4F:53:1D:1F:D4:3D:A5:80:14:AD:88:31:A7:EB:3B:DD:54:C9:71
X509v3 Authority Key Identifier:
keyid:98:E1:8F:AD:AE:F7:23:2D:31:61:88:6A:CB:EA:8A:B3:23:CF:35:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOGPra73Iy0xYYhqy-qKsyPPNXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/0f18df-26ef-4ec6-8667-7218855646e3/1/mOGPra73Iy0xYYhqy-qKsyPPNXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b9:c8:f7:c9:41:78:bf:9e:be:5f:ae:29:ae:05:e7:62:49:
69:38:16:c8:ec:16:fc:62:14:b5:ee:1d:bb:eb:8b:21:71:95:
33:8a:4a:8a:ed:26:2d:ee:68:ac:1e:71:61:86:2a:87:e4:24:
92:93:84:65:7d:08:04:78:b5:90:69:b2:dd:b8:a0:b4:0f:14:
5c:bd:4e:9f:47:47:a7:18:99:f6:70:34:b7:8b:52:d1:d2:3b:
80:8a:2d:55:82:51:04:b0:93:fa:ee:b3:ed:c6:f5:99:8d:9f:
2d:56:7a:e2:ed:5f:0e:d7:82:50:db:5d:54:f4:05:f5:4b:96:
38:a1:7c:36:83:f9:f1:11:4d:38:3c:60:a8:d0:eb:8b:8a:11:
5b:8b:4b:05:6d:27:c6:30:5b:4f:2b:27:f5:7a:f5:fc:3f:78:
61:65:66:ef:dc:99:0d:12:b3:24:d2:cd:a1:bf:7d:82:b1:8e:
6d:1d:81:3e:00:96:f3:37:ee:3d:be:63:54:79:fb:06:15:68:
6c:76:6f:0d:db:40:ba:72:95:66:6e:b9:7d:b9:15:c7:6c:7e:
ba:88:94:b7:57:4f:6d:a2:a6:f8:18:d2:c7:20:fd:de:08:65:
15:ff:43:ce:6f:b5:04:4c:f3:db:6f:c5:b2:43:f9:a7:d3:9a:
42:f8:aa:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:15:06 2025 by rpki-client