Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
File: OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft (raw, json)
Hash identifier: xIiMOMiC8pS2DAasdj0Gzos+lIuiTPBFkeaXYfHJhEY=
Subject key identifier: 32:1C:79:83:7F:36:D8:58:E7:EB:48:98:30:08:C2:62:F3:F1:BE:C5
Authority key identifier: 39:F0:86:CA:62:11:BB:95:D0:64:30:89:C7:DA:57:6F:E6:7C:21:52
Certificate issuer: /CN=39f086ca6211bb95d0643089c7da576fe67c2152
Certificate serial: 0194BCA9D077584E8CCBAB30EFBB13A9E503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
Manifest number: 0B66
Signing time: Fri 31 Jan 2025 14:00:32 +0000
Manifest this update: Fri 31 Jan 2025 14:00:32 +0000
Manifest next update: Sat 01 Feb 2025 14:00:32 +0000
Files and hashes: 1: MxMYPJuJ2ahCKlSKTQjVM4W37Zw.roa (hash: 9t6kBtgaiu9wCZTnovzIZuJxrTyQ2HBBvSidXlmnqaM=)
2: OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl (hash: T8aXoIwjOX8YgCY8AinvlqmGZ4jfVlYcgB+Bg/sy/bM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d0:77:58:4e:8c:cb:ab:30:ef:bb:13:a9:e5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39f086ca6211bb95d0643089c7da576fe67c2152
Validity
Not Before: Jan 31 14:00:32 2025 GMT
Not After : Feb 1 14:00:32 2025 GMT
Subject: CN=321c79837f36d858e7eb48983008c262f3f1bec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:6a:03:47:ee:c3:5d:8d:d7:a4:29:75:53:
1a:21:da:5a:b3:7c:3f:1b:66:91:20:89:ed:86:4a:
f3:ec:bf:77:45:b0:f8:9a:ff:a8:c0:5a:63:9b:58:
34:77:60:f7:ab:c0:b4:5c:69:d8:9c:6b:57:2f:51:
21:9f:e7:10:37:0e:84:4c:bb:ff:f2:b9:5d:0e:43:
af:49:35:0e:07:98:03:a8:ec:e4:3a:a1:a0:02:0e:
79:e0:a9:ca:40:00:9d:69:49:88:fa:9a:9b:6a:01:
94:c8:99:e5:cd:76:bf:eb:09:4b:16:2a:2b:90:47:
b1:46:6d:e7:cf:29:c0:15:30:26:8b:2a:b1:ac:60:
69:ac:85:db:2d:56:11:0f:19:0f:59:37:31:db:9c:
7d:e2:76:4b:93:99:5b:93:f9:42:0f:7c:d2:d2:fe:
b4:44:77:e0:7e:e0:7b:39:23:f3:2f:cd:b7:40:a1:
f2:4f:01:ca:a4:4c:3f:9e:59:cb:d0:33:ed:2e:14:
67:00:30:64:32:4f:38:3b:4c:bf:28:bf:25:ad:1e:
de:d8:b1:b8:8e:5a:bd:0f:c0:fe:8b:f5:54:cd:70:
e9:74:f5:8a:14:7e:e3:1e:0f:1e:08:a5:13:21:4e:
5b:a6:6a:fc:74:9b:0e:b5:65:e5:e2:f6:00:46:18:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1C:79:83:7F:36:D8:58:E7:EB:48:98:30:08:C2:62:F3:F1:BE:C5
X509v3 Authority Key Identifier:
keyid:39:F0:86:CA:62:11:BB:95:D0:64:30:89:C7:DA:57:6F:E6:7C:21:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfCGymIRu5XQZDCJx9pXb-Z8IVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0d64e2-e2da-468a-8f7d-7fe328571938/1/OfCGymIRu5XQZDCJx9pXb-Z8IVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:93:fb:a0:24:4a:e1:a6:6c:84:c5:55:81:b4:76:fc:ae:5d:
88:fc:c1:22:a2:39:e9:5b:9c:e1:4e:4d:47:c0:fc:00:7e:41:
60:11:47:bd:3c:4a:f7:3a:35:63:46:7a:96:86:fd:45:22:1a:
a1:89:ac:93:05:6f:37:38:e0:49:11:7c:57:6e:25:48:32:20:
f0:55:4c:85:c3:8e:5f:4f:e0:02:61:76:f1:a6:00:1b:68:2f:
2a:b1:0e:80:56:a9:8f:39:74:f0:48:63:33:0a:ab:08:c1:c7:
ab:bc:85:a4:16:7b:01:18:4b:85:77:f3:21:7b:88:75:8d:a8:
7c:e0:b1:e5:79:30:b0:ef:48:95:3e:79:77:19:a0:a1:ab:a9:
92:60:2e:82:f4:f5:c4:a1:c8:c0:6d:bf:33:a4:95:e5:d7:a3:
19:ba:fb:5b:7f:fd:b5:64:35:59:3e:1d:42:87:36:ea:e5:96:
ed:bf:4b:a2:3c:a7:e7:c0:3e:30:ba:29:93:7f:a3:41:5e:f8:
22:f0:06:67:ce:a7:18:c2:6c:c4:3b:3a:eb:da:82:0d:95:d8:
df:f2:70:53:e4:bc:e2:70:3f:7a:14:89:96:59:1c:69:90:88:
10:c8:10:92:20:34:64:cc:38:c5:e9:b4:b0:e5:b1:50:f8:1b:
b4:6f:c6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:37:36 2025 by rpki-client