Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
File: ORhwDqnHvi31aIr_vt2KTlU5LeY.mft (raw, json)
Hash identifier: WWNUDUYl5pknu5JBLyO+2LCPoZvZKhhNpL9mjXaJcb4=
Subject key identifier: EB:A5:54:07:AA:18:9D:C7:F6:11:0A:90:E2:85:54:99:0F:9A:4E:7F
Authority key identifier: 39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
Certificate issuer: /CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Certificate serial: 0194BD4E8FD4C88640D15BEA9597F0633C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
Manifest number: 0513
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: ORhwDqnHvi31aIr_vt2KTlU5LeY.crl (hash: xD7kQAdehW+kokU0gQbadld6s4bb6RNUAh3UOJSMJt0=)
2: qqmAsjIJyxprjV-Z0wRBlVRs5QY.roa (hash: pdJ0sqOoN9EzOHOuHyXun8oq8xcslLUsNxeZED/f3bk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8f:d4:c8:86:40:d1:5b:ea:95:97:f0:63:3c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3918700ea9c7be2df5688affbedd8a4e55392de6
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=eba55407aa189dc7f6110a90e28554990f9a4e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b1:83:5b:3e:2c:12:c6:23:cf:e8:fd:69:a6:
6a:39:d1:6e:81:47:01:26:48:34:62:e9:10:a8:e1:
a4:c6:62:db:9a:4e:da:24:bd:75:2a:f2:89:c3:cd:
f5:41:d0:59:06:37:bd:4a:8d:fc:76:32:2b:73:64:
20:de:1a:47:1c:d7:a6:11:e2:42:67:66:38:1f:ac:
02:16:3f:92:bd:a0:b5:8a:62:1c:45:3f:6b:9a:43:
1d:fa:e3:7d:08:5e:0e:69:ec:7d:d7:7b:27:65:0f:
8f:fb:04:f1:29:88:23:d8:9a:3c:ed:64:a2:c6:13:
dd:ae:b8:6a:0a:de:3a:05:97:a8:23:56:c2:ae:ef:
50:6c:53:35:45:68:03:3c:52:fb:03:3c:e5:34:ab:
54:a8:f9:91:b9:fc:bb:e4:7b:5c:d6:89:68:0c:7d:
ee:34:3d:f9:90:68:30:a3:25:1a:1c:30:2d:9f:fd:
73:ba:fb:bb:28:d1:a9:f8:ef:a2:ad:9e:57:8f:8d:
e6:8f:69:86:07:2b:3f:43:a8:31:ab:cf:45:d2:d4:
80:4c:e5:91:43:41:33:81:2d:57:df:5f:74:6d:a6:
bf:98:dc:89:32:4d:bd:f8:87:e1:e4:58:4c:21:b1:
99:66:9b:2f:f4:1d:46:42:85:b0:b2:89:9c:34:4b:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A5:54:07:AA:18:9D:C7:F6:11:0A:90:E2:85:54:99:0F:9A:4E:7F
X509v3 Authority Key Identifier:
keyid:39:18:70:0E:A9:C7:BE:2D:F5:68:8A:FF:BE:DD:8A:4E:55:39:2D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORhwDqnHvi31aIr_vt2KTlU5LeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9d4274-fb10-42a4-bf9b-1c8be25eb686/1/ORhwDqnHvi31aIr_vt2KTlU5LeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:5f:bc:65:35:6c:7c:d1:97:f2:89:66:0e:88:91:a6:f1:98:
74:7f:c4:ad:2f:ec:a4:92:a3:e5:fb:24:74:67:11:13:61:2d:
32:bf:92:71:23:77:bd:3e:08:9b:f3:42:0c:d2:57:2f:47:f7:
67:c4:43:12:30:ba:86:cc:f1:e5:02:23:64:70:07:de:58:3e:
ba:61:8c:cb:f6:7f:51:51:1a:08:cf:e2:d0:b0:61:38:6a:d5:
a1:cc:74:b3:99:c5:67:8e:0c:30:e4:de:f8:69:e2:dd:1b:45:
cd:69:23:df:6f:25:ce:13:cc:99:8a:5e:8d:b6:07:a9:0b:1a:
f9:91:67:c5:4b:8e:6b:95:c8:a9:ba:e6:8e:96:c5:53:1e:fb:
a6:ab:5d:cf:f5:05:23:ee:73:53:be:2c:5b:3c:06:b0:9d:5f:
67:8d:83:f2:f6:f5:b3:29:56:f2:17:78:00:f5:cd:ab:14:13:
02:5f:ae:10:95:fc:7e:01:4e:0f:1d:b1:05:2b:a7:3e:9e:b6:
7c:57:df:3e:6b:34:b1:55:b9:51:e4:50:25:f6:e8:b2:97:ea:
3d:b8:65:ec:e1:fc:7d:eb:67:5c:4c:bf:07:f9:56:27:15:24:
cc:c5:09:8f:9b:8a:76:a2:5a:d1:f2:35:b5:98:4c:53:b9:74:
f1:49:57:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:56 2025 by rpki-client