Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/ow5KB7OUnNWacGYBZYt-PMu7qm8.mft
File: ow5KB7OUnNWacGYBZYt-PMu7qm8.mft (raw, json)
Hash identifier: 3UqhBP+30RqWJoa/3m7xEK+mVm7iVNierJE7ffg7org=
Subject key identifier: 04:49:CC:D7:C7:7C:0E:2E:A7:03:15:92:4B:CC:9D:F0:1E:C8:3E:2D
Authority key identifier: A3:0E:4A:07:B3:94:9C:D5:9A:70:66:01:65:8B:7E:3C:CB:BB:AA:6F
Certificate issuer: /CN=a30e4a07b3949cd59a706601658b7e3ccbbbaa6f
Certificate serial: 0192E5740FA12B9E477EAC6C1F51FD69DD38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow5KB7OUnNWacGYBZYt-PMu7qm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/ow5KB7OUnNWacGYBZYt-PMu7qm8.mft
Manifest number: 07E4
Signing time: Fri 01 Nov 2024 02:00:41 +0000
Manifest this update: Fri 01 Nov 2024 02:00:41 +0000
Manifest next update: Sat 02 Nov 2024 02:00:41 +0000
Files and hashes: 1: X-z1swkjxLDzo27gAxKyUnjslVU.roa (hash: 0Y2PmFSwSDuPesd+kpUyUfj/mY+z3qaCrbfAMBrzU7w=)
2: ow5KB7OUnNWacGYBZYt-PMu7qm8.crl (hash: 0bX/OqnZItvgKXvaFIOda0FtBrk+RNizAHOSTMe/t8U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e5:74:0f:a1:2b:9e:47:7e:ac:6c:1f:51:fd:69:dd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30e4a07b3949cd59a706601658b7e3ccbbbaa6f
Validity
Not Before: Nov 1 02:00:41 2024 GMT
Not After : Nov 2 02:00:41 2024 GMT
Subject: CN=0449ccd7c77c0e2ea70315924bcc9df01ec83e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2a:83:87:58:4b:60:1c:62:48:43:6c:bb:1d:
82:45:fa:68:29:c6:48:34:58:98:f3:2b:7c:98:2c:
67:7a:b3:92:7a:16:6a:f6:c3:e8:d0:6e:8a:ab:9b:
45:24:44:8b:7e:d8:f6:8a:7c:2d:03:a8:0e:34:2a:
84:b5:db:d4:a8:18:ee:55:a8:d0:ed:8d:38:de:c2:
bf:83:c9:01:61:8a:dc:c9:d9:9e:9a:ef:1e:ea:0c:
0b:60:44:12:4c:0f:d6:94:ba:2c:f5:af:a2:71:e3:
1e:79:cc:d5:cf:94:08:4b:e6:90:0f:a2:14:0b:9c:
9b:9d:4a:40:06:0f:d3:aa:39:43:b5:4c:e2:f8:82:
a5:55:b1:6d:2f:9a:0e:0e:d8:d2:74:03:d8:d9:a5:
22:42:f8:ba:20:9f:90:ce:42:ab:ff:44:74:17:69:
76:af:e1:5b:a7:ab:7d:63:2d:3e:11:01:73:59:0e:
97:52:cb:df:7e:66:9f:ea:34:8d:b2:7b:51:5e:08:
51:34:7d:d3:06:31:96:38:74:01:56:a4:75:2f:32:
76:1d:d0:63:ed:1a:ff:88:dc:97:70:a6:97:2e:ff:
42:e0:5f:9e:71:3b:dd:2d:7e:af:77:0c:de:96:2b:
55:9b:1c:4b:1e:6a:b2:29:4d:3d:27:e6:bf:40:1a:
c3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:49:CC:D7:C7:7C:0E:2E:A7:03:15:92:4B:CC:9D:F0:1E:C8:3E:2D
X509v3 Authority Key Identifier:
keyid:A3:0E:4A:07:B3:94:9C:D5:9A:70:66:01:65:8B:7E:3C:CB:BB:AA:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow5KB7OUnNWacGYBZYt-PMu7qm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/ow5KB7OUnNWacGYBZYt-PMu7qm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/123064-0dd5-4fdc-ae85-0464896018a1/1/ow5KB7OUnNWacGYBZYt-PMu7qm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6d:0d:2f:95:cb:8d:e2:48:d2:04:c5:58:b7:50:e4:23:d4:
c5:56:ae:7e:a9:a5:73:c0:03:73:fb:aa:c3:c8:23:b3:c8:61:
e5:37:15:ef:60:64:e8:14:50:d7:65:73:1a:80:ff:77:c1:71:
c0:eb:83:96:ec:00:a9:4b:0a:cb:e5:48:40:07:28:f9:5f:b2:
04:77:aa:4d:66:02:48:d5:71:7b:a5:37:41:ac:77:7b:79:d0:
30:e6:7d:d7:fd:15:1f:b5:8d:59:7a:c2:22:38:e4:e9:2f:b3:
62:51:77:db:01:24:05:42:58:ca:ab:f7:42:d1:f3:88:c4:e1:
d8:21:03:46:84:dd:21:46:31:12:00:80:24:1e:d9:f9:dd:4c:
08:a7:f3:91:cc:fb:67:f3:43:fd:5a:c5:2d:81:4a:59:b0:ee:
6e:11:ab:39:d7:ef:98:5f:53:3b:6e:15:e5:1e:1e:55:4d:60:
af:2a:fb:09:fd:f2:68:90:b1:46:11:2b:67:1a:89:29:9f:b3:
cc:8a:46:ec:5e:3e:76:a7:30:81:50:73:e2:3a:82:6c:2d:b5:
d3:f6:59:43:67:75:be:77:04:c5:8b:21:50:3f:af:7e:35:6d:
d5:fd:8c:f3:5b:94:bb:8a:9d:b4:01:60:7f:22:5c:ff:a5:4b:
0a:9b:84:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:58 2025 by rpki-client