Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
File: o-zqyBJVNKV5R5YtsokD-tesOvk.mft (raw, json)
Hash identifier: dwkwbTmxczJ+yvN5lhbEZPz5phB8w+tcCFVbyakj47I=
Subject key identifier: 22:19:20:44:CB:6D:B7:76:F9:1C:30:7B:3D:A8:84:C0:62:4E:BE:6F
Authority key identifier: A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
Certificate issuer: /CN=a3eceac8125534a57947962db28903fad7ac3af9
Certificate serial: 0194BC3BF3DB4FC7E1FA8BDB1D4C67DF50D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
Manifest number: 13A9
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: NZCcmWMu3SL4lvLRXGmLfuZeQm4.roa (hash: EKuPrmDOqjvIb0P5ALzTBFMc5GRcKpakwtWPyDrs5oc=)
2: o-zqyBJVNKV5R5YtsokD-tesOvk.crl (hash: j7ONGBSFNyX6n1zdVO5ialer04R3DXlZ1kYIVq7i44k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f3:db:4f:c7:e1:fa:8b:db:1d:4c:67:df:50:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3eceac8125534a57947962db28903fad7ac3af9
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=22192044cb6db776f91c307b3da884c0624ebe6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:e9:61:04:0b:a9:52:c3:61:6f:c5:b9:92:
a6:1a:02:dd:1d:df:54:a1:be:f1:94:f1:24:c2:84:
f1:6e:c1:20:95:6a:7b:1f:4c:45:b1:17:3d:b0:08:
cd:ae:10:b4:db:20:30:5e:6f:df:4d:54:2c:7b:ce:
e4:4c:ea:fd:e3:2a:8f:26:01:fc:85:41:78:6d:68:
5c:02:1f:5c:02:c5:a9:2e:12:51:cb:a9:7a:a0:6e:
6c:58:81:6c:34:3c:69:d3:8a:f1:1c:eb:1d:1c:12:
39:f1:19:52:cf:03:70:9f:42:47:67:1d:66:4a:c8:
03:7e:bc:31:6a:1f:34:39:20:6c:2d:f3:d3:51:22:
2b:8b:7a:dc:13:d9:d0:85:e6:87:36:4a:94:53:8d:
fc:04:a5:13:2f:4c:ed:13:6e:93:be:96:54:7f:53:
22:5e:c3:fa:e4:ac:10:97:c7:ac:ac:6d:8d:13:4f:
eb:4d:a4:1f:56:54:98:ba:47:46:77:d7:d3:90:e8:
92:b3:08:40:2b:d4:0d:f0:50:3c:5f:5c:a8:be:92:
b0:dd:c0:7f:3a:7e:31:da:10:fa:ff:11:ba:07:7f:
7d:bd:91:a6:76:e1:a4:9d:cd:df:8b:c9:c4:3a:78:
08:b7:5b:89:89:93:fa:96:7c:da:f3:51:36:3f:23:
64:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:19:20:44:CB:6D:B7:76:F9:1C:30:7B:3D:A8:84:C0:62:4E:BE:6F
X509v3 Authority Key Identifier:
keyid:A3:EC:EA:C8:12:55:34:A5:79:47:96:2D:B2:89:03:FA:D7:AC:3A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-zqyBJVNKV5R5YtsokD-tesOvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/d91187-7545-41e7-9894-a9bd5e410aed/1/o-zqyBJVNKV5R5YtsokD-tesOvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a6:68:3b:f4:ed:5d:d2:cb:33:bd:03:bf:7a:7d:03:ba:44:
eb:70:cc:7d:6c:b1:79:e5:16:f3:b7:7a:e8:33:52:5c:7a:83:
42:0c:4c:60:41:18:28:6c:17:a6:a3:c7:33:3f:97:03:0e:6b:
94:f4:c2:24:d8:ec:3c:61:5a:64:95:99:6b:a0:b1:2e:b8:3c:
4e:fd:86:92:5f:0b:3f:18:95:01:42:13:72:b8:b8:a7:6c:5d:
26:24:28:de:a6:2a:76:7e:92:be:77:20:86:5e:47:8a:a9:13:
97:f4:c3:08:77:5b:6f:60:d6:08:51:ee:37:ce:10:f0:60:2f:
af:b9:24:85:9a:b4:b7:8d:11:30:bd:6a:e9:c6:28:a4:7c:bf:
8d:df:20:31:5c:16:61:10:95:6e:9b:2c:88:ff:29:aa:30:f2:
87:1b:67:47:89:32:b0:df:f6:9d:8f:44:3c:7f:78:76:ef:3a:
22:d4:cd:55:bc:f0:f0:18:cb:25:09:db:0f:46:05:bb:9b:bc:
c0:b2:9b:16:43:32:f2:d2:6c:3a:af:15:65:9b:0d:8e:11:f7:
66:39:76:15:e6:37:c5:c2:de:69:6e:56:fe:6f:37:1d:2d:30:
4b:74:92:af:ae:19:b4:9f:12:64:9d:25:93:50:03:b2:b2:d0:
f6:eb:29:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:30 2025 by rpki-client