Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
File: b3_OpPf8172B3VmBU91u5bEuR98.mft (raw, json)
Hash identifier: wlvu9+LU9HFpjzaagL0F7/Rez+eRUrkLYfKuoUjRp+Y=
Subject key identifier: 5F:EF:5F:82:EE:2C:21:78:53:55:3C:00:3C:E1:F7:82:E1:5D:95:B1
Authority key identifier: 6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
Certificate issuer: /CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Certificate serial: 0194BD17F38903DF267335ACAEE73B2B3876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: NVJ94OZbevHGEGJPauO8yOgu7g0.roa (hash: zV1VLUJ6QJt3I76otxCqQp6X0KRlaXT/XwLt7w+Duqc=)
2: b3_OpPf8172B3VmBU91u5bEuR98.crl (hash: /JU/t1ZpFCVyQLPTRT03BekUbNuVHRnukIviVZK/k6k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f3:89:03:df:26:73:35:ac:ae:e7:3b:2b:38:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f7fcea4f7fcd7bd81dd598153dd6ee5b12e47df
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=5fef5f82ee2c217853553c003ce1f782e15d95b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6e:e8:20:76:e5:86:b1:c6:ba:21:69:dd:af:
29:5d:d9:09:21:7c:6a:e8:17:3f:79:a0:1b:6d:02:
f9:3e:87:50:f2:28:b3:a5:03:31:40:83:b2:c3:0a:
cd:84:86:1a:4c:09:86:a1:f4:91:2c:76:8b:73:44:
81:34:40:a0:fa:90:4d:0b:85:f8:ca:39:85:3f:ec:
58:e4:a0:37:ea:a0:c3:1f:03:86:96:9f:00:82:88:
d5:dd:6b:d6:a8:d8:8b:60:38:a5:4e:4d:d1:f2:04:
2d:de:89:1b:83:6c:24:b9:45:f1:ef:61:77:97:bd:
23:4d:36:ff:91:8e:f6:9f:85:89:49:0d:fa:07:ad:
95:ca:94:ae:b2:02:18:a3:1f:46:90:bf:d9:a0:fd:
22:e3:5f:9a:16:4a:61:5a:ec:c1:64:ee:92:cd:c9:
81:bb:34:4e:8f:94:74:ac:31:49:e5:a3:74:bf:10:
e1:65:18:08:eb:46:6b:3f:64:b4:f0:75:a7:ce:c9:
b0:d8:ce:5a:fd:12:7a:90:de:63:11:ef:7d:c1:84:
c4:40:55:de:b9:e7:98:39:ff:d7:8a:72:93:42:f1:
f6:cc:b4:bf:b8:25:a2:e2:cf:d7:18:1d:e1:42:11:
78:9d:9b:71:41:39:b0:48:0c:27:08:54:5b:1f:c2:
a5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:EF:5F:82:EE:2C:21:78:53:55:3C:00:3C:E1:F7:82:E1:5D:95:B1
X509v3 Authority Key Identifier:
keyid:6F:7F:CE:A4:F7:FC:D7:BD:81:DD:59:81:53:DD:6E:E5:B1:2E:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3_OpPf8172B3VmBU91u5bEuR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6c3948-ca2a-40d1-8e17-ef518b4b463f/1/b3_OpPf8172B3VmBU91u5bEuR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a6:93:c6:d7:6f:5e:b2:0d:10:9d:54:93:20:e4:af:3d:a0:
ea:f4:50:3f:46:66:ec:50:18:97:35:79:b8:02:d8:34:db:47:
1f:7a:0e:19:73:69:bc:38:d4:74:61:eb:15:b4:60:86:8c:92:
eb:0b:97:82:13:bf:8b:0e:d3:40:cf:0c:c1:8f:5e:86:12:90:
50:6d:4d:f4:a9:6b:cd:be:3f:4e:5f:2e:be:fd:c8:9c:a2:46:
87:3a:8e:d7:f1:5a:75:7d:7c:1f:7b:62:44:9f:3d:49:4e:12:
9b:d9:20:e4:40:54:e9:b0:79:e5:fc:7b:fb:a6:42:8c:76:92:
b0:59:f6:66:1e:3c:99:ae:63:c8:db:2b:2c:71:18:f2:af:cd:
1e:32:1d:f4:7e:d3:08:74:9c:02:d3:6d:d0:b9:b4:08:56:22:
df:a6:62:25:ae:57:a6:37:d1:0d:75:cc:b7:aa:32:bb:e3:8c:
ef:15:a0:25:1a:c6:b3:bc:a4:19:6c:58:86:dd:0a:96:6c:68:
8e:57:6c:f5:fd:d0:22:c9:50:42:51:ad:b4:df:08:d7:3c:64:
13:4e:d4:f9:75:28:7b:f0:70:c9:e3:38:07:89:9d:65:72:7b:
89:83:a9:b1:ee:23:6b:65:e8:e1:75:53:bf:8a:09:1d:b3:a3:
06:5c:37:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:12 2025 by rpki-client