Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
File: Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft (raw, json)
Hash identifier: JycZGxIhjXsyr9hPpOf8bCrEogQyIvqSLbvZWP5mMdM=
Subject key identifier: 97:EB:28:DB:AF:32:53:DF:AC:F9:F1:5F:04:80:7C:94:50:1D:CF:08
Authority key identifier: 3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51
Certificate issuer: /CN=3aa9e9832ed25de78c3ce0501208261066281f51
Certificate serial: 0194BC3BFF16E65D043077B1ED151FDF41B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
Manifest number: 0E72
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl (hash: rF3EicpaHMCTffGz1ED7MBlVNKIR5ZiKbssj1/gudmE=)
2: aWYIXcaJkiVxLLibbCxl3jRBEqg.roa (hash: is1rfoaga6D1caCReE6B6u2V3E2PMjX4LQvHyaYSnhI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ff:16:e6:5d:04:30:77:b1:ed:15:1f:df:41:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa9e9832ed25de78c3ce0501208261066281f51
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=97eb28dbaf3253dfacf9f15f04807c94501dcf08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:bd:e4:b7:23:1a:18:0e:04:ff:dc:50:5b:
6c:3e:f4:e3:b8:28:03:92:ce:b8:38:51:9e:47:ba:
a5:1b:8c:2a:f7:ba:a8:58:00:f3:5c:8f:9a:5f:dc:
4e:39:a3:f1:3a:46:2b:71:ed:b5:44:28:9e:87:11:
3c:9f:a8:1a:64:13:95:25:ea:6e:f4:2a:67:79:05:
b2:e2:86:2a:5b:0f:61:6d:46:fb:90:8d:c1:24:64:
26:2b:8c:db:22:20:aa:ca:fd:ca:2f:7c:65:fd:2d:
22:4b:5a:3e:55:7d:08:37:b0:c7:fb:17:f3:be:b5:
b1:7f:c3:64:1a:80:e5:d7:70:1c:f3:6e:90:3d:6b:
c2:e3:b5:88:37:c0:96:38:4f:a8:1b:4e:46:63:ca:
e8:15:53:b6:7b:34:6d:54:14:0a:b9:51:9b:95:ae:
e0:36:8d:de:f5:cb:2c:2c:43:7a:49:51:e0:a6:fd:
85:77:96:af:be:37:c0:2e:64:42:8c:3b:72:85:26:
19:c9:7a:49:98:ce:c2:dd:35:0d:6c:b2:1e:2b:b1:
fb:a0:4e:dc:30:f2:08:a3:52:09:10:1d:2b:67:f2:
cb:95:7f:a3:af:48:c7:3e:3f:f8:6d:86:a3:75:b9:
af:2e:a4:96:dd:18:83:00:a3:10:a0:50:dd:6a:93:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:EB:28:DB:AF:32:53:DF:AC:F9:F1:5F:04:80:7C:94:50:1D:CF:08
X509v3 Authority Key Identifier:
keyid:3A:A9:E9:83:2E:D2:5D:E7:8C:3C:E0:50:12:08:26:10:66:28:1F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oqnpgy7SXeeMPOBQEggmEGYoH1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/5fd273-f3a9-4755-b23a-3bbd887d05c2/1/Oqnpgy7SXeeMPOBQEggmEGYoH1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:d7:bf:3c:29:a5:15:7a:ff:4d:e5:e5:a3:1a:c8:12:ad:46:
f6:e8:24:af:cf:d6:75:df:06:26:2c:69:95:44:4c:c5:e1:c4:
71:0c:bd:a1:4d:1a:93:c6:bf:59:3d:e5:9a:9b:ba:0f:0f:82:
b5:4c:c0:ef:57:c2:30:ba:05:41:11:bd:61:48:ff:56:7c:dc:
96:a5:ec:32:e1:6a:55:4f:ed:a0:4f:b6:57:ca:19:a9:ff:6e:
68:4e:c9:3b:af:27:ea:6f:02:3e:ce:d3:8e:33:9b:7e:3b:a3:
45:b0:67:96:f6:b1:ff:2a:60:2a:42:5d:85:d3:09:62:3a:9a:
fb:64:90:73:03:a0:37:b3:dd:fa:56:d6:4f:01:a3:72:a1:6f:
08:07:c7:b2:b5:5a:59:c8:45:91:05:03:80:92:21:2e:0d:7f:
4a:94:24:9e:f3:76:a6:74:d1:1c:fb:9a:c8:c1:b9:b8:c9:27:
d1:df:c7:31:ba:e1:b9:4f:41:e9:3a:15:02:62:38:0a:a3:55:
d1:16:61:53:79:f0:61:2b:23:ff:61:d7:af:83:85:ac:8e:25:
5f:d7:f5:38:d5:ee:b4:94:98:9c:47:34:7b:9f:e8:83:0c:37:
f9:f1:b8:90:60:7f:c4:89:07:e5:42:40:17:8f:7f:14:df:47:
cd:9b:59:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:19 2025 by rpki-client