Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/13dc12-fcfa-498e-9f0d-e9ddb8d1c453/1/oAlJlvS8h5ldINKiotyEOq1ORzg.mft
File: oAlJlvS8h5ldINKiotyEOq1ORzg.mft (raw, json)
Hash identifier: 8hkqaI2Kz1bXqO3LAd9n9JrgIH/4slSQQcQwQtPc9ko=
Subject key identifier: B2:02:8E:58:19:A0:42:62:C1:DC:A6:E5:9A:D8:99:43:FA:DE:21:A8
Authority key identifier: A0:09:49:96:F4:BC:87:99:5D:20:D2:A2:A2:DC:84:3A:AD:4E:47:38
Certificate issuer: /CN=a0094996f4bc87995d20d2a2a2dc843aad4e4738
Certificate serial: 0186E5D80F15C47E7369E1C43F95C4E80725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAlJlvS8h5ldINKiotyEOq1ORzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/13dc12-fcfa-498e-9f0d-e9ddb8d1c453/1/oAlJlvS8h5ldINKiotyEOq1ORzg.mft
Manifest number: 1A
Signing time: Wed 15 Mar 2023 15:16:27 +0000
Manifest this update: Wed 15 Mar 2023 15:16:27 +0000
Manifest next update: Thu 16 Mar 2023 15:16:27 +0000
Files and hashes: 1: LZkFlogSClzrc-AKeTsZwuxNckE.roa (hash: idZSLu3xeTL8SNfMl6tJuyG42pzzi5FNRcVeZuo1CNk=)
2: oAlJlvS8h5ldINKiotyEOq1ORzg.crl (hash: qQ0lo6l8i18I3dS2RpPwfWSaYOes0/hJmLzaxiVXB5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e5:d8:0f:15:c4:7e:73:69:e1:c4:3f:95:c4:e8:07:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0094996f4bc87995d20d2a2a2dc843aad4e4738
Validity
Not Before: Mar 15 15:16:27 2023 GMT
Not After : Mar 16 15:16:27 2023 GMT
Subject: CN=b2028e5819a04262c1dca6e59ad89943fade21a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ab:4c:b0:a3:e3:bf:a1:fe:71:30:91:87:f6:
b5:bd:e8:f2:9e:dc:2e:88:b7:83:d1:30:7f:01:af:
d5:16:d0:90:2e:1e:0e:57:3a:35:3b:61:80:42:7f:
34:ac:25:c3:25:70:0f:10:b8:b0:30:16:92:2e:17:
fe:f9:26:12:1f:a7:f8:33:a3:24:8d:a1:2d:36:fb:
04:a9:d0:87:8c:82:34:12:cb:36:3f:47:af:54:bc:
c0:f0:10:b2:87:2c:8a:f1:70:e8:ae:1d:5b:33:7a:
ce:ee:6e:6a:2e:38:ed:d8:84:a7:4c:44:e9:53:48:
34:8a:bf:99:6b:d4:6d:d9:78:68:a7:b9:34:69:93:
aa:fc:cf:a0:3c:b4:72:33:e3:93:32:b5:3b:1b:80:
bd:93:d6:df:a0:48:7a:8b:57:9c:f8:fa:0b:d8:1f:
1a:39:89:3e:7b:3f:3a:43:9a:99:50:5c:ba:f2:3b:
28:81:e6:0e:36:04:7e:6b:cb:52:d7:42:0c:bd:d4:
69:05:99:69:62:3f:86:8e:5c:6d:d8:bc:0f:f0:cf:
06:4f:d1:e2:72:49:db:48:9a:94:fc:8f:cf:0c:08:
aa:fe:ba:25:07:46:bc:2f:16:b3:89:a7:c8:c7:1d:
83:b9:09:fb:0e:8e:ee:9e:d1:cc:e7:fc:31:72:40:
06:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:02:8E:58:19:A0:42:62:C1:DC:A6:E5:9A:D8:99:43:FA:DE:21:A8
X509v3 Authority Key Identifier:
keyid:A0:09:49:96:F4:BC:87:99:5D:20:D2:A2:A2:DC:84:3A:AD:4E:47:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAlJlvS8h5ldINKiotyEOq1ORzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/13dc12-fcfa-498e-9f0d-e9ddb8d1c453/1/oAlJlvS8h5ldINKiotyEOq1ORzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/13dc12-fcfa-498e-9f0d-e9ddb8d1c453/1/oAlJlvS8h5ldINKiotyEOq1ORzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:5a:87:d9:a2:b9:fb:5e:ac:df:34:a2:08:7f:87:7c:6e:0f:
bd:fb:4d:0b:5b:d6:d2:b2:ef:08:d6:92:92:94:0a:e6:c6:05:
7d:9d:86:b5:ba:11:da:e1:d5:f0:6a:53:7c:ac:91:d9:3a:8d:
4f:fd:e0:de:52:b9:f0:23:ff:90:a8:50:32:48:cf:bf:4d:13:
68:18:7e:87:ef:b6:20:f2:4a:ce:ee:f4:42:eb:28:4b:92:4e:
df:64:ae:b2:40:f7:22:d0:0e:01:70:09:93:5a:5d:8f:7a:fb:
f1:44:ae:6e:d7:4a:3a:21:a3:c8:06:d9:7b:8c:1a:cf:89:3b:
db:75:8f:b2:97:9f:5d:37:8d:89:e7:bb:8f:ae:5c:65:dd:c8:
d8:bc:c7:d3:10:96:7b:cf:3c:69:1c:a1:9f:60:db:b0:f9:57:
fd:ca:46:bb:06:68:a1:c6:29:ca:81:1a:63:43:55:dc:7e:6e:
39:44:7a:c6:4e:f3:1a:ea:d9:3d:64:85:5a:c4:b6:5c:6e:b6:
81:1e:b2:5a:06:a0:65:82:67:9c:9c:30:92:8d:3c:29:20:5f:
9e:f4:10:fe:51:8d:4b:73:bb:18:74:bd:db:1a:82:44:66:91:
d3:5a:e5:fe:e5:fe:d6:28:31:4a:ad:7e:32:9a:8e:d5:81:3b:
94:14:09:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:27:48 2025 by rpki-client