Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
File: oM7xyqNFm4sDnCF4E2SNyrzowtM.mft (raw, json)
Hash identifier: bG9VrP0LOK3wo/nbg/kT8sfxvk2UMhR9Jup4VJ2niG0=
Subject key identifier: AF:3B:63:57:C0:47:BA:EE:58:D0:D8:9E:20:27:87:7D:B9:83:85:E3
Authority key identifier: A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
Certificate issuer: /CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Certificate serial: 0194BCA9A43D550F9009D5376CABA6AD5C46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
Manifest number: 045F
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: lBvtRmrC68CyqkDDaX9q7iM1fqk.roa (hash: QH6lN3Gw9cyb6g2dDlZDiBnyElb0DjJFI+B0oG5arYk=)
2: oM7xyqNFm4sDnCF4E2SNyrzowtM.crl (hash: ZGAr6joyX3hCShs4/DG9by4LTQ7MaqB5TWsMeRzjil0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a4:3d:55:0f:90:09:d5:37:6c:ab:a6:ad:5c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0cef1caa3459b8b039c217813648dcabce8c2d3
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=af3b6357c047baee58d0d89e2027877db98385e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:10:89:a1:fa:c9:cd:86:4e:6e:df:6b:f9:5f:
62:85:5a:3f:3b:4d:f5:49:df:b0:bc:67:d3:e5:43:
ac:96:28:77:2e:10:b4:9d:9c:3c:61:c3:9a:6b:60:
22:e7:db:5f:4e:53:79:eb:f0:b3:6c:c4:5e:81:7e:
5d:0d:40:65:70:ad:01:b7:e0:6e:15:55:65:13:be:
8b:a7:67:16:79:09:64:18:fc:94:af:ab:b7:44:25:
79:f1:32:6e:1c:bd:04:fd:91:9b:dd:70:71:07:78:
63:04:9b:41:53:74:ab:79:58:48:fc:b6:5f:6d:92:
d6:52:16:62:d2:c9:48:61:bb:00:80:ca:c4:1a:32:
0b:21:b4:3a:c0:ef:eb:74:e9:7b:fe:8c:8a:e7:a3:
d8:ff:52:83:65:48:2e:3a:7b:82:0e:4e:bc:60:c2:
0b:33:aa:c3:01:ef:72:73:53:44:25:44:f3:2f:5a:
4a:5f:e2:15:b6:33:05:c8:8f:0d:b4:74:5f:99:57:
53:c7:48:29:7d:80:90:10:d6:6b:4d:ee:00:43:16:
90:93:b9:bf:07:4b:27:79:4c:b2:7f:83:cb:b2:07:
7a:ff:2b:cc:59:f2:cf:e9:bc:42:97:68:73:29:c2:
25:07:53:30:14:9e:28:7f:ac:cb:ec:04:db:50:a1:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3B:63:57:C0:47:BA:EE:58:D0:D8:9E:20:27:87:7D:B9:83:85:E3
X509v3 Authority Key Identifier:
keyid:A0:CE:F1:CA:A3:45:9B:8B:03:9C:21:78:13:64:8D:CA:BC:E8:C2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oM7xyqNFm4sDnCF4E2SNyrzowtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/858ed8-731a-4761-82c0-6b0179ee1dd9/1/oM7xyqNFm4sDnCF4E2SNyrzowtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:65:a1:21:a5:d2:af:8d:e5:0a:38:ed:c8:89:1f:f1:90:2f:
c1:e7:dc:6c:8a:39:8e:f0:31:5c:1e:fa:e2:a2:85:55:1f:3f:
3a:4f:70:36:17:d9:7c:b0:95:ce:10:9e:72:e3:1f:26:26:72:
e4:86:32:ad:e7:d4:c5:c8:a2:23:32:9b:4f:9e:59:07:43:83:
93:ac:ad:bc:c0:f3:15:72:43:7e:c0:e5:54:be:4c:7b:fa:ce:
63:03:a9:6f:ba:6d:f6:b1:7a:3f:21:95:97:c0:9d:d9:8c:2b:
aa:56:9b:51:46:48:93:64:db:13:d9:17:1a:62:70:e4:bc:49:
e6:8c:75:85:cb:a6:4d:2d:c5:7f:49:5f:b3:09:f2:cc:30:c1:
5e:88:eb:7b:b9:89:d7:f4:69:d5:29:3b:9b:95:51:09:59:73:
7a:32:ce:a5:9a:3b:12:d3:5b:c5:4e:15:2f:3f:cb:30:c2:c4:
e4:51:38:c0:2e:d5:c6:27:d4:c1:84:d8:af:9c:07:30:24:d1:
8a:a1:01:c1:84:33:d0:71:91:c6:23:85:e6:8d:2d:85:23:db:
5f:09:14:58:33:ae:52:f6:ac:60:1f:f5:9d:cc:fb:36:6f:fb:
fd:35:94:c1:f4:ef:a4:c2:c2:9a:d4:19:f1:7b:17:2f:73:9e:
d1:0a:f0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:53:05 2025 by rpki-client