Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
File: OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft (raw, json)
Hash identifier: JwcEBfYEIqyW63Iovkg5/yYNZ1bq1r5KNSk+rnYOC94=
Subject key identifier: C9:C5:89:49:3A:A7:1E:B9:22:83:C2:C8:49:8F:7C:F1:88:F6:94:FE
Authority key identifier: 39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
Certificate issuer: /CN=397245d0492eede59b045b5be1fd4eb9161bc417
Certificate serial: 0194BCA9EFDB6F400D0DB0F3A77FE7BF883C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
Manifest number: 09BB
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl (hash: WmTlXXQm0iUkMwNpku0WGGerzgtnSvCvCqUU2R2ZamA=)
2: UKW0CudXmVsa94mwyxDedWLkDqo.roa (hash: E4C4f0Mq5JaE575lYSnINz97OAHbBRWbnBdkV1itt84=)
3: WainZrZS95pV_wUDdXdKx-4zd8w.roa (hash: qSjOELN6BypOnZ25i1Ntw/+kYsT/hMNWS9eAPB2j+R4=)
4: fkySyXgYloFA_rSIKapDu83z4nA.roa (hash: YRI59uMH17c60OUwKfHOzSVfz3vipSg0/ta9/6RebOI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ef:db:6f:40:0d:0d:b0:f3:a7:7f:e7:bf:88:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397245d0492eede59b045b5be1fd4eb9161bc417
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=c9c589493aa71eb92283c2c8498f7cf188f694fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:72:52:9a:be:1e:70:55:fd:df:4a:43:e4:
e6:d8:17:62:66:22:76:c2:e2:7d:3b:2b:9d:81:a7:
ac:6b:ec:2d:8c:1e:c6:c4:67:0a:75:b2:4f:8e:1f:
91:ec:1a:5e:19:25:45:44:40:d6:4e:4e:f6:18:bd:
0c:a6:f4:c4:9e:5d:d2:ac:b9:0e:7a:f2:09:2f:a4:
31:cb:d2:3b:1c:e0:4b:ce:1e:3c:b6:8a:f9:03:9c:
6d:94:40:96:82:55:fa:4f:49:34:e7:ee:44:ce:27:
da:f0:03:3a:d6:6a:e3:cb:e9:23:b0:ce:9c:7a:cb:
70:67:68:7e:fe:8a:da:88:fc:ff:4a:68:02:72:17:
5b:0a:a3:c1:12:0c:9b:13:d8:70:a9:c4:04:71:c9:
c0:ef:25:f0:3c:44:3f:ac:0c:48:48:53:1d:66:82:
93:05:72:a2:87:27:0f:82:3a:65:ea:2b:14:dd:7d:
59:a7:60:4c:fb:ac:2b:29:72:71:50:b9:10:2b:52:
93:a6:2b:2f:f2:8c:c2:c0:3e:01:7e:59:c3:7c:25:
45:ec:89:ac:b5:f2:ba:6c:86:0a:ae:3c:12:96:3b:
e0:07:48:85:ce:eb:71:bc:dc:c2:74:07:92:c6:03:
fc:91:63:43:fe:cd:f2:67:57:71:51:58:c5:00:09:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C5:89:49:3A:A7:1E:B9:22:83:C2:C8:49:8F:7C:F1:88:F6:94:FE
X509v3 Authority Key Identifier:
keyid:39:72:45:D0:49:2E:ED:E5:9B:04:5B:5B:E1:FD:4E:B9:16:1B:C4:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXJF0Eku7eWbBFtb4f1OuRYbxBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/eed9ce-aef9-4fc9-8a4a-c442a18f1efc/1/OXJF0Eku7eWbBFtb4f1OuRYbxBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:51:20:a6:64:f6:73:41:24:06:3e:b3:04:07:ef:a8:11:57:
ec:11:8e:73:da:71:4a:06:6b:71:ab:42:8f:d7:67:d4:d6:d4:
40:a8:ce:63:4c:50:dd:44:7b:e7:23:72:d9:09:9c:26:c8:66:
14:17:44:4d:b2:e5:96:dc:ec:43:dd:3f:ac:da:b2:b2:0d:9a:
f6:7d:80:96:7b:2a:4d:8c:12:51:2f:4d:62:79:d0:7e:d2:43:
89:a5:75:75:dd:20:bb:40:1e:28:da:ae:52:9a:ab:79:58:d5:
a1:50:c5:c5:31:3a:4c:24:79:91:32:cc:82:65:5d:c6:31:6d:
3a:a6:1c:84:77:ac:e0:ca:c3:8c:46:8a:01:49:b9:24:ac:6a:
db:0a:c8:5f:f1:7c:e3:f5:09:f7:f5:1a:89:11:8b:ff:c2:8a:
67:07:13:73:ec:d3:9f:6b:86:f8:3d:68:23:75:4d:5d:aa:ea:
71:5e:40:39:97:67:83:63:e1:d1:68:50:6b:a3:a0:07:78:b9:
69:e9:eb:04:b4:62:96:fd:01:31:b3:2e:0e:81:86:59:41:e5:
c9:1d:cf:d7:1a:19:36:55:19:03:44:06:90:53:83:cd:23:b9:
be:4e:0d:fe:43:fa:20:b3:6c:0d:fc:30:d1:02:ec:a6:60:ac:
1e:67:70:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:35 2025 by rpki-client