Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
File: oFa0I4Othizmo3StLKbTbCVNx7E.mft (raw, json)
Hash identifier: oajMSyyha6NUXCTpSKj9+WfLJHKGrZOF1PQ3bECayrs=
Subject key identifier: 78:23:D1:B2:07:CB:9F:4C:D5:43:A7:28:5C:CA:DA:2C:82:D4:F4:72
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 0195E07D1FFA02083C8362354F0EF0500BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
Manifest number: 13E6
Signing time: Sat 29 Mar 2025 06:00:51 +0000
Manifest this update: Sat 29 Mar 2025 06:00:51 +0000
Manifest next update: Sun 30 Mar 2025 06:00:51 +0000
Files and hashes: 1: 4GMh7fIw13Bz3DUcceuO2FBtK6M.roa (hash: E9IDQ7QjcqjZJIn5bDeaHNVCqS2wv2WqYXLU0FEPSXU=)
2: XJGEpCzB4loh5ef0k98ZvXtkA5A.roa (hash: ln2eCgW4Lb0/Z2WnRMYRLGIC+qtaz3YxPhhlJZ12csI=)
3: oFa0I4Othizmo3StLKbTbCVNx7E.crl (hash: RNvzn3QgnKsctQHWy+LDfe374LqXqabR+YcirymZodE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:7d:1f:fa:02:08:3c:83:62:35:4f:0e:f0:50:0b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Mar 29 06:00:51 2025 GMT
Not After : Mar 30 06:00:51 2025 GMT
Subject: CN=7823d1b207cb9f4cd543a7285ccada2c82d4f472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:38:65:af:2d:38:1f:be:c7:54:e2:a6:77:8f:
a0:94:a6:19:f2:a3:af:7b:78:c0:87:37:6e:be:86:
b9:9d:b8:bd:90:2c:98:70:3b:dd:7a:c0:6d:a4:61:
f3:bb:49:93:d4:88:52:81:88:d6:70:a8:9a:2a:ae:
50:4e:dc:3e:2f:40:2c:5f:64:94:2a:e7:6d:6e:70:
40:47:f2:db:39:14:b2:c9:76:7c:fc:27:64:0b:dc:
99:d7:6b:bb:40:76:93:a3:2d:44:ba:4d:04:19:8a:
f0:3d:b0:c7:c3:4d:de:51:9e:a7:7a:93:47:ac:10:
78:6f:19:bc:b1:f7:74:07:0b:cc:39:8c:8f:37:a0:
b5:ea:4d:05:45:c3:3b:df:4b:88:57:91:5b:68:b7:
b7:3d:8b:d8:e7:3f:19:e6:ff:6f:69:5f:7c:83:bb:
53:00:34:ee:94:ba:64:6b:11:04:77:1b:7d:b3:c6:
bf:c9:9e:5e:7a:e9:d3:58:4d:87:7a:ae:58:ba:4c:
3a:b3:8b:4c:fd:f3:44:52:0b:50:7e:09:82:40:2d:
c4:14:b7:5e:b9:65:dc:83:15:c0:03:1e:0c:61:2c:
9f:7f:62:ca:62:2b:f1:c5:00:20:1e:83:ee:56:ee:
5a:ee:86:b9:d6:36:26:89:a4:5a:ed:fb:8f:9f:6e:
28:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:23:D1:B2:07:CB:9F:4C:D5:43:A7:28:5C:CA:DA:2C:82:D4:F4:72
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:94:7a:6a:1a:fd:af:24:a7:f8:c9:e7:f7:85:76:5f:26:ea:
ce:7c:bc:8b:49:84:58:6a:16:25:b3:4b:47:d3:b0:ed:98:b1:
2e:a1:e6:57:2a:8d:40:df:68:d9:9d:76:c3:4d:69:93:0c:4d:
02:e1:f8:e6:2a:a3:53:73:8f:d5:d5:94:f0:ad:b1:db:7b:ff:
c9:24:1b:a9:82:04:60:1b:76:1b:9a:43:b4:ef:ba:49:64:d9:
61:7b:31:24:81:cf:e5:3b:23:61:ac:64:0a:a6:ed:04:0f:b6:
25:f6:a4:a2:ac:81:1c:28:a3:ad:22:c4:b6:56:27:63:72:20:
52:f4:ec:1e:bd:ea:95:dc:51:2a:9c:1a:cc:d1:be:d9:2f:8b:
41:62:88:f3:ba:59:d0:aa:c2:ae:e1:25:0c:da:3e:2e:74:92:
ca:3c:c1:76:c5:2f:98:89:de:f9:a3:31:53:09:49:fb:ae:d9:
f9:d6:e2:dc:c4:1b:be:14:f3:16:44:aa:34:2d:f5:e5:b0:54:
fe:ef:c9:24:e6:95:14:83:8c:e3:e7:66:3c:2e:59:55:c0:d3:
39:92:85:2a:c4:e5:44:17:5c:cb:65:11:3f:2a:a0:76:25:80:
cd:bf:83:a5:12:29:95:5e:c8:f7:0b:84:f9:d3:6a:90:de:27:
99:85:77:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:24 2025 by rpki-client