Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
File: ovl077UOcpyeAVqLwrbCsGGd_IQ.mft (raw, json)
Hash identifier: zZq2F6r6sJGxCZAmAmznZjQ+rMh6PjOhKsSpmAHZJpg=
Subject key identifier: 70:8B:33:D4:B6:B0:12:22:A3:8C:3F:36:57:DC:FF:14:F7:05:3D:5C
Authority key identifier: A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
Certificate issuer: /CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Certificate serial: 0194BC72DA510001BC8041D3C367BB8A67AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
Manifest number: 08F5
Signing time: Fri 31 Jan 2025 13:00:31 +0000
Manifest this update: Fri 31 Jan 2025 13:00:31 +0000
Manifest next update: Sat 01 Feb 2025 13:00:31 +0000
Files and hashes: 1: Uk_aanYMRxowJq16GMNyhbsFOEw.roa (hash: creuRsSl8nSakc/hCQHakSFNIaRZLii8X1gMM9BUYWY=)
2: ovl077UOcpyeAVqLwrbCsGGd_IQ.crl (hash: lSNWnqPhDx87Sx11N+Qe1itxhLFHDxpY52ygmiQvE6A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:da:51:00:01:bc:80:41:d3:c3:67:bb:8a:67:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f974efb50e729c9e015a8bc2b6c2b0619dfc84
Validity
Not Before: Jan 31 13:00:31 2025 GMT
Not After : Feb 1 13:00:31 2025 GMT
Subject: CN=708b33d4b6b01222a38c3f3657dcff14f7053d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a0:67:ae:91:43:a6:c6:d7:56:ce:5e:bf:58:
42:ad:aa:20:d4:a8:84:42:67:c8:0a:c4:3c:8c:b3:
20:d4:a7:4d:83:d1:1a:57:6a:1f:5a:50:19:d5:83:
c1:8d:55:e9:4e:8e:e0:5b:a4:c7:1d:b1:46:b1:c2:
49:c1:91:a5:6b:23:6b:81:04:2f:93:11:d3:95:89:
ef:5a:36:f9:67:95:f4:f5:df:1d:f6:e0:86:97:e5:
a5:c0:65:2f:a8:96:82:51:4d:15:8e:d1:dd:e1:55:
93:74:d9:81:a1:a8:7d:e9:05:31:fc:a3:1a:8f:58:
3d:b2:11:96:27:df:f3:29:88:5d:83:2c:c5:16:44:
75:b6:6f:cb:4a:c8:c2:21:61:27:3c:49:df:25:a5:
a5:b8:7e:5b:80:ce:3a:f2:f9:6b:e2:3d:56:66:3a:
9f:fd:3b:a9:24:9f:d6:85:57:bb:5e:c8:68:23:d4:
fc:39:b9:92:cc:07:1b:e1:74:58:9e:73:f5:1a:4b:
a3:82:ba:5c:f6:74:1a:b1:4a:28:6d:46:a6:8f:a9:
9d:3f:44:a5:1f:b6:a4:14:58:95:4d:eb:e4:8c:3d:
b8:40:82:f8:a6:ff:43:a0:98:1c:4a:bd:9d:f1:61:
d3:e1:d4:75:e5:fc:8b:45:99:f9:b7:e5:5d:d6:83:
74:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8B:33:D4:B6:B0:12:22:A3:8C:3F:36:57:DC:FF:14:F7:05:3D:5C
X509v3 Authority Key Identifier:
keyid:A2:F9:74:EF:B5:0E:72:9C:9E:01:5A:8B:C2:B6:C2:B0:61:9D:FC:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovl077UOcpyeAVqLwrbCsGGd_IQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/668345-f5bc-4a3f-b6ff-10df49f65616/1/ovl077UOcpyeAVqLwrbCsGGd_IQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2e:84:09:58:c4:84:6f:b0:67:12:a5:4d:5f:49:ef:ad:18:
24:d2:aa:7a:64:1c:f9:11:f0:bb:65:13:6a:df:c1:4e:26:af:
87:d1:4b:33:8a:46:e8:aa:c5:8c:ef:85:04:a8:87:fd:30:ad:
62:a1:46:5b:ce:ad:95:26:31:23:40:dd:c9:c3:8c:f1:fa:c4:
26:5f:dc:2b:71:29:36:38:5b:3a:5f:f3:43:12:66:77:ba:cb:
eb:62:ca:8b:3d:14:d0:e5:9a:3d:0c:07:d1:10:8c:1f:b2:f6:
f4:b7:90:82:a6:91:09:bd:e6:ee:3b:2e:bf:5f:e7:37:12:fb:
55:cc:bf:0c:f4:83:13:75:8e:c2:58:23:97:d0:4e:7d:ad:d3:
19:da:69:01:a4:10:0c:97:38:aa:17:28:5e:47:d9:44:a1:bb:
9c:ee:40:f5:16:8c:85:98:7c:63:cf:b5:ed:f2:26:81:a2:a7:
f2:c1:83:59:91:91:d6:bd:f6:3b:cf:bd:a2:03:ff:c4:92:44:
28:e1:5c:ac:95:aa:89:a2:72:50:16:24:0a:a5:c2:14:be:a4:
d8:0c:c9:5a:95:12:ef:a8:2f:8c:c9:78:3e:29:ab:0d:59:0a:
07:56:71:b7:20:cd:ff:87:e9:fc:cc:ed:35:7f:f5:79:9d:c0:
0e:af:b7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:55:13 2025 by rpki-client