Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
File: OstMHbOigqLFrhaULo1gYb50UWs.mft (raw, json)
Hash identifier: ekhpQqLPgsOeoWv5lTsPVH0Ro4f8ctGTA/n/MLuZRIo=
Subject key identifier: A7:04:2A:77:A7:AC:72:00:1B:81:0D:AA:B8:82:05:E7:21:84:4E:DD
Authority key identifier: 3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B
Certificate issuer: /CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
Certificate serial: 0194BBCE8190CD1465E2A2C3053257591B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
Manifest number: 0C98
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: OstMHbOigqLFrhaULo1gYb50UWs.crl (hash: Ma1wM4dzUsmVFp7azXTTVScTc7WXpFoLKB1AAmyJaMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:81:90:cd:14:65:e2:a2:c3:05:32:57:59:1b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3acb4c1db3a282a2c5ae16942e8d6061be74516b
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=a7042a77a7ac72001b810daab88205e721844edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:f5:9c:18:7a:95:51:0a:d3:f7:e9:9a:36:
b7:ac:ab:18:00:d9:76:72:39:a6:c6:92:4c:68:86:
9f:8c:48:6d:88:a6:cf:28:81:c9:79:c2:52:b0:0c:
16:de:f0:ea:16:45:a0:0d:03:26:54:54:48:80:e4:
54:57:0d:8e:31:74:d4:5c:56:b9:00:34:6b:a3:74:
b1:58:8a:b8:60:10:f0:a8:81:1d:a5:6f:a5:57:ba:
19:af:3a:f2:84:5e:01:ce:f3:55:6d:30:8e:2e:6c:
cb:c3:ac:e4:a0:c3:87:b8:f9:96:0d:b0:73:9f:ee:
48:b1:a1:6c:88:67:ae:7e:40:76:fd:5a:e4:cd:43:
ea:d4:15:87:6f:4f:24:10:44:de:f6:63:03:0d:9f:
9c:80:f9:a9:ad:64:a8:ac:c9:7c:88:be:52:02:ec:
44:93:d4:1d:3e:9c:00:b3:a0:df:cd:b6:76:f8:c3:
02:0c:e5:9c:62:56:ab:dc:cb:19:2b:64:19:98:51:
e4:5c:22:fe:77:fc:ac:11:9b:ce:b9:22:f6:1d:e1:
e3:9f:1f:1c:25:51:ab:94:bd:ec:d7:14:83:65:f3:
84:4b:4c:e1:e2:7d:57:3f:25:5c:43:74:08:f2:f6:
e4:72:a4:d2:f8:47:fc:31:24:17:91:d0:ab:78:34:
c9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:04:2A:77:A7:AC:72:00:1B:81:0D:AA:B8:82:05:E7:21:84:4E:DD
X509v3 Authority Key Identifier:
keyid:3A:CB:4C:1D:B3:A2:82:A2:C5:AE:16:94:2E:8D:60:61:BE:74:51:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OstMHbOigqLFrhaULo1gYb50UWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5a82a7-8f61-4749-9118-cbf34ebca4b9/1/OstMHbOigqLFrhaULo1gYb50UWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:29:0b:5d:dc:8a:de:26:a8:8d:e3:e9:83:25:a8:ce:6e:c6:
64:64:f6:8e:4d:e4:64:16:73:e4:18:d1:71:fd:dc:0b:f5:b1:
47:ac:20:7d:71:2c:37:5d:e7:33:60:22:cc:78:aa:06:94:4c:
3d:3f:72:5b:b5:23:ba:49:0f:01:f4:4a:a1:55:33:65:11:ae:
30:1b:4d:52:00:8e:43:80:8e:a8:d9:2f:67:09:b2:1a:f0:eb:
6d:59:21:4f:1e:87:60:f4:12:76:78:9e:28:ab:8f:b1:b6:2e:
5c:5e:da:30:ec:c6:48:d5:c1:4c:ce:a9:3c:bd:e9:9b:25:e5:
86:c2:23:0f:31:b8:1c:08:44:0a:77:e2:65:0f:64:a2:68:17:
69:80:87:02:0f:fe:1c:60:06:3e:d0:1b:35:26:ab:f6:b9:ce:
8a:64:9c:9b:a9:30:21:40:41:19:27:b7:5e:2c:ea:9b:30:e1:
b4:cb:5e:af:30:15:d0:6b:53:20:f7:d7:a2:e9:68:9c:75:96:
6c:b8:ad:c0:5e:90:a3:c8:12:21:65:94:a5:7c:32:c7:27:9b:
e8:7d:09:47:fa:e1:f9:0b:dd:2d:89:91:76:a0:f1:cf:70:87:
aa:c6:51:e2:a0:98:a3:68:28:46:a9:c4:69:79:50:50:19:c3:
d6:1a:de:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:52:13 2025 by rpki-client