Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
File: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft (raw, json)
Hash identifier: luZi0IyzDNasVClZSucjGtUFDiIOT2eT3Rx+iuA0ZhE=
Subject key identifier: 17:C0:52:70:4C:00:7C:0A:69:B3:43:6E:4A:4E:22:0F:93:4E:B9:74
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 0194BD177A620EB7B4812A5F14135A36A66B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
Manifest number: 49
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: GHoYC29SdZ8JHtSYpKsW5kablNc.roa (hash: Ggk2bB2uCoFFVfvkzavwaobQUbDhv+a9KTxQ1jDSQZ0=)
2: Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl (hash: vfq1awhIPz+dHaFQIKjHRXWIgksyhyqipaYmgJTN/I8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7a:62:0e:b7:b4:81:2a:5f:14:13:5a:36:a6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=17c052704c007c0a69b3436e4a4e220f934eb974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:10:8b:79:9a:4b:8b:75:ad:24:61:8d:e2:
dc:8d:0d:9f:82:12:d6:40:61:4a:c8:45:10:a0:02:
50:20:e7:2a:54:43:14:a0:3b:2c:36:80:1c:dc:70:
18:9f:6f:b2:46:88:fa:c4:a1:d9:93:f6:78:b9:d2:
b0:35:1d:f2:ba:aa:c8:33:e7:59:33:5d:b0:e4:82:
ce:b4:74:61:83:9d:0d:94:70:9d:8c:ec:e2:1c:65:
97:23:04:75:97:38:34:ee:29:13:ed:5d:9b:83:86:
03:05:e8:5a:87:26:20:98:d7:58:e1:9b:e4:32:56:
4e:b3:7c:55:e8:22:44:65:3c:af:71:06:df:ef:22:
89:21:4a:77:a8:76:72:43:a3:91:45:97:c5:75:a9:
1d:05:75:24:2f:c7:15:8a:df:6e:ca:6d:62:68:df:
af:4c:8a:75:4d:90:c4:59:aa:99:26:87:83:f3:f8:
e4:35:dd:d4:2c:5b:81:12:f6:1b:08:95:7a:81:52:
02:77:b4:3b:01:63:cf:b7:53:90:e7:e2:99:8d:98:
4d:77:d8:5a:6f:91:4b:7d:87:f9:7f:26:83:81:04:
e8:8a:54:6c:d6:83:4b:eb:e3:b4:b2:8f:70:65:4d:
4c:9a:a8:87:d8:a7:ee:4f:09:0a:65:d3:66:1e:cc:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C0:52:70:4C:00:7C:0A:69:B3:43:6E:4A:4E:22:0F:93:4E:B9:74
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:bf:c2:1f:81:cc:22:3f:26:20:e3:b3:a8:a6:92:b0:17:68:
36:3d:20:4c:b8:47:f2:33:8f:92:af:3f:89:f6:02:52:a8:27:
da:05:ae:fb:30:59:ee:bc:3d:e3:91:bf:4e:41:de:d7:14:49:
8d:8e:c2:07:dc:d4:81:58:f6:91:88:0f:f7:1d:1f:fb:ce:56:
2c:8a:0a:ed:3d:93:cc:f0:02:7a:bf:15:e5:8c:16:ba:a0:ec:
27:d0:97:7b:dc:1b:6e:94:99:f1:d7:11:20:8f:21:bb:ae:99:
b7:b8:19:07:5b:c5:53:2d:d4:07:7d:31:88:c5:ff:21:00:1b:
41:b3:e6:89:dc:42:b3:1c:7b:23:11:f8:23:6a:96:1a:e5:67:
68:15:44:00:b4:92:ea:cf:13:80:1b:00:84:fd:9d:69:9f:cd:
c8:dc:89:c4:af:1c:72:8f:4c:a5:bb:93:db:ce:d6:ad:50:ea:
00:1e:44:df:da:ce:40:f7:37:2a:bc:e3:68:4b:ce:ae:56:e4:
67:cf:3a:71:8c:98:92:74:c9:9e:b2:a7:ee:6a:db:a8:71:07:
c7:cb:79:02:bc:86:ea:01:85:7d:b1:f7:bb:22:23:a6:8c:16:
a0:61:10:fb:9b:08:a7:a3:89:cc:94:45:6d:3b:8b:ac:a9:2d:
be:93:53:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:17:52 2025 by rpki-client