Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
File: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft (raw, json)
Hash identifier: 5dxVgefdtHNliCAjPCkOIH5J0FDtiNx7mHJcNt4++Q4=
Subject key identifier: 5A:07:D2:EC:8F:3C:3A:3A:8A:1B:20:64:FE:73:7A:7E:FB:0B:F6:3D
Authority key identifier: A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
Certificate issuer: /CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Certificate serial: 0194BD8554495E6657B8BFECBB0D2B4F447A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
Manifest number: 0CC4
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: 3MZjImGng2_TJgQfxQEXoUtKWiw.roa (hash: lYzKLS8Ppt5gW8YVgI20GBdeqEZoir6MkSHCqmVcyNA=)
2: oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl (hash: hWNpylJzCnWDvholOTHDjjfExmYjc1wMIhG1VdZWZho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:54:49:5e:66:57:b8:bf:ec:bb:0d:2b:4f:44:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1646d3f90758d8a3743f155f62bffff1bb6366a
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=5a07d2ec8f3c3a3a8a1b2064fe737a7efb0bf63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:52:09:73:9c:e6:26:e9:dc:cf:25:5d:7a:c2:
9e:e2:11:df:14:d1:45:da:38:60:85:3c:ca:44:20:
7b:ed:e7:05:e9:d4:ae:d7:5f:9e:1c:bb:b2:a1:2f:
7b:5d:47:7f:50:4c:23:13:24:fa:f6:8c:6b:8e:4f:
8c:81:42:a1:86:28:6d:0d:7a:a5:e2:f5:0b:a2:8b:
51:88:6c:9f:97:85:1a:ef:76:3e:68:13:de:4d:cf:
cd:22:f7:a2:8f:1c:32:e9:81:3b:83:08:02:d1:93:
2b:4c:a5:51:c0:22:a5:7d:1a:f6:88:47:3e:d8:3e:
c7:08:9a:00:54:6d:b0:ed:15:e5:f8:a1:29:18:a3:
fe:b8:a2:e9:9d:f6:7b:10:41:92:48:a0:82:e7:d9:
51:49:1a:9a:a4:5c:31:3f:ea:7c:50:e8:79:55:71:
3d:85:75:6a:5c:7e:c9:95:58:a1:8a:35:00:e8:85:
ad:c1:58:97:d0:0f:f7:77:56:58:97:ee:1a:02:c8:
ac:f2:c6:aa:b1:23:d0:39:a8:6a:87:1b:df:48:53:
51:23:47:14:57:67:6f:35:4e:20:20:22:83:27:d1:
b4:69:2d:b2:35:11:8c:78:eb:2b:21:6b:2d:f0:78:
f6:76:fe:4e:90:dd:c4:6b:07:51:ab:25:9e:b1:c2:
4f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:07:D2:EC:8F:3C:3A:3A:8A:1B:20:64:FE:73:7A:7E:FB:0B:F6:3D
X509v3 Authority Key Identifier:
keyid:A1:64:6D:3F:90:75:8D:8A:37:43:F1:55:F6:2B:FF:FF:1B:B6:36:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/2b70f0-4da3-4b45-a95d-48a20e6e5d8b/1/oWRtP5B1jYo3Q_FV9iv__xu2Nmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a7:ca:8c:56:19:c0:24:9d:7b:0d:5b:f4:4b:06:02:43:a2:
08:f1:9f:c5:bd:61:bd:64:0a:26:14:be:5d:fc:e1:7e:78:0a:
9b:9a:02:e5:b6:24:dc:45:44:41:a4:21:5f:64:ea:86:aa:53:
c8:25:aa:07:ec:ea:63:64:ab:18:c6:2b:de:57:4b:a6:11:b6:
b2:8f:56:f7:75:01:a0:17:8c:8f:42:34:49:b4:77:3a:da:e9:
64:28:49:64:bd:46:9b:82:16:0b:0e:59:fe:70:f4:76:92:fa:
22:06:49:ec:52:9c:36:b2:1f:5c:13:d0:88:1e:30:7a:74:a1:
b4:3d:c7:dc:fe:73:fb:f4:e3:b1:4b:99:a0:a1:8f:6e:80:18:
ba:f6:0a:24:c1:08:da:15:fe:ce:b7:4b:82:15:99:c8:0d:ee:
15:42:3c:30:4d:9e:74:1b:c9:13:dd:79:27:02:6f:46:26:cc:
66:08:0d:00:a9:5c:1c:e0:34:06:61:82:2e:62:e7:d7:5e:35:
b6:39:26:a2:54:79:0c:13:4d:46:c2:c5:9a:56:16:10:33:12:
da:60:38:7d:10:4d:bc:74:97:4e:a3:0b:6c:85:99:ce:3c:84:
82:ec:32:e6:fb:9d:a9:65:0e:fc:06:2f:58:da:ab:1f:d9:de:
0b:2d:dd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:20 2025 by rpki-client