Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
File: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft (raw, json)
Hash identifier: q3XIRUVgHdM8jSu54xGysuNNuaj4bG2lTYWkPsW9ZkY=
Subject key identifier: 26:A6:AC:D4:D6:DF:C4:90:84:86:39:9D:09:83:54:A2:FB:59:7B:44
Authority key identifier: 3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
Certificate issuer: /CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Certificate serial: 0194BD4E8305072CD927B36BAF670912785F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
Manifest number: 0CFB
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl (hash: mTD1c+XgXnzTqLxTokwX1Zpl8BO0p+OxPsaJZ+J+/Tk=)
2: gXpN4Jzwwckj47SB6dPDzkGMcGo.roa (hash: cU0OZZjL1jwr+A4jdiw86+QpPrFnf2WcAbgpLCZiW4E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:83:05:07:2c:d9:27:b3:6b:af:67:09:12:78:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bbbb1f5d986668ab3bd47cd18c5fb1efd249b04
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=26a6acd4d6dfc4908486399d098354a2fb597b44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:66:61:1b:a6:ca:d3:15:52:bf:e4:f6:91:
6d:29:91:23:33:c9:52:90:e4:91:c6:77:a6:32:8a:
f6:65:e0:30:0b:af:41:80:e3:0a:49:8b:2b:07:bc:
79:cb:34:bb:f1:67:e0:23:2a:49:c9:ba:53:3b:53:
b8:36:91:f6:2d:79:df:e5:16:fb:e0:a7:45:c9:84:
aa:2f:c1:59:85:7c:79:a8:46:65:6f:4d:dd:97:d8:
cc:d4:83:bb:28:56:03:fe:6b:6f:2d:11:c6:c4:a4:
f4:3f:47:08:24:7a:06:d3:9e:2a:16:0c:83:ce:c6:
53:ff:f7:80:75:c7:e3:24:61:86:71:a7:7a:ee:19:
2b:59:e4:b3:76:ca:87:eb:c0:61:97:28:44:0b:cf:
78:92:07:3c:d6:a1:95:24:05:d3:e5:ff:8f:54:43:
9d:e5:da:b4:36:bf:64:3c:f3:e0:55:f3:bd:45:e7:
45:bf:f9:93:c1:ba:77:fd:82:7b:3e:e6:0b:09:c8:
ec:e5:68:59:6b:11:a9:e3:7f:ae:ea:e4:d9:89:c9:
a3:ff:b7:ab:a4:46:3f:b5:4d:2f:45:15:6b:d2:bf:
24:e4:b2:0c:7c:99:40:59:e2:4c:58:53:0f:29:7a:
c7:67:5c:cb:cc:b9:3f:fb:d6:20:cb:17:b5:98:b2:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A6:AC:D4:D6:DF:C4:90:84:86:39:9D:09:83:54:A2:FB:59:7B:44
X509v3 Authority Key Identifier:
keyid:3B:BB:B1:F5:D9:86:66:8A:B3:BD:47:CD:18:C5:FB:1E:FD:24:9B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cede0d-027f-45ad-8480-c117f27ba9c0/1/O7ux9dmGZoqzvUfNGMX7Hv0kmwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7c:4e:77:e6:ce:b2:75:2f:1d:05:88:37:60:6a:e8:bc:2b:
5d:6d:f6:53:89:bd:3f:f4:c0:8c:d2:d3:73:8c:4e:f5:c1:e8:
b4:c0:ba:dd:a2:61:d4:aa:1c:2f:42:0d:06:be:eb:33:a8:b8:
46:39:4d:e8:49:f0:79:4f:57:26:51:31:f6:8c:fe:93:96:b3:
8f:1b:45:ec:40:8c:dd:dc:7d:e4:4c:96:31:6c:3e:00:15:ed:
98:d3:23:81:95:45:9c:49:70:ae:72:53:84:60:03:b0:31:52:
ab:30:d5:64:89:e4:e6:5d:b8:76:a2:e9:18:6c:68:c4:e2:b4:
05:6f:63:15:f1:43:43:79:e4:c6:b3:31:ca:c9:74:41:80:6c:
33:a8:35:26:61:25:25:e3:4f:e8:68:33:5e:0f:22:25:c2:f8:
83:27:78:d6:c9:3e:97:b2:71:2f:5e:63:b2:ff:ba:48:94:0e:
a9:52:47:b8:d7:0c:9b:0a:97:c6:6a:0a:52:6f:ac:cd:06:2a:
1b:dd:8b:56:cb:1f:18:d2:7b:c4:40:53:1a:ea:b9:7a:7f:41:
6b:ef:8d:2c:42:1c:0d:c6:cd:3b:f6:9f:59:11:a8:ca:94:c1:
04:1f:0a:ed:d6:7a:2a:cf:50:b0:06:d6:ca:92:22:2f:1a:00:
98:9d:ec:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:28:17 2025 by rpki-client