Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
File: O9VD0EZeovb-uCjxhQSwP0A6xmk.mft (raw, json)
Hash identifier: xIFj0Zlb2luXNn9OxTGauneq/y7gUy7POU6Wv9zzlto=
Subject key identifier: 45:54:58:E4:99:58:14:2C:EB:B0:5D:61:61:66:E9:9C:27:BE:36:6A
Authority key identifier: 3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
Certificate issuer: /CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Certificate serial: 0194BBCEA4361DFD7EB217028BE37982423D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
Manifest number: 0E64
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: O9VD0EZeovb-uCjxhQSwP0A6xmk.crl (hash: pNDvURRnrXGeHujzJ30+IshX8fh3UODvQjLQNPwVRYo=)
2: x4WRkvTk4Qfvxow9VzZXx3rDXCk.roa (hash: RyOgBcFttRpc6DEmQeaGYO0tOWZlEQp1Uhl8vvwB5VE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a4:36:1d:fd:7e:b2:17:02:8b:e3:79:82:42:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd543d0465ea2f6feb828f18504b03f403ac669
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=455458e49958142cebb05d616166e99c27be366a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ea:02:03:e5:f9:4a:63:d9:71:1c:89:e3:02:
c1:a6:e1:a5:0b:c1:88:02:e8:c1:08:19:0d:8e:5d:
c6:d3:8f:c2:23:80:0d:01:60:de:4e:85:da:19:62:
94:49:5b:99:54:f4:88:5f:53:90:6c:28:7e:6f:d4:
93:df:48:ce:4c:57:2e:7a:28:f3:2b:40:34:ec:22:
dc:1d:1a:84:07:e7:4b:9b:38:47:91:22:7f:5f:7b:
a7:c7:49:48:cf:56:ed:ae:ef:17:a5:36:53:4b:36:
c2:89:f0:13:a0:79:33:a2:1f:18:f4:eb:bb:6a:81:
30:f0:93:cc:41:7d:92:83:92:aa:6a:5f:a0:3d:94:
52:8b:56:31:61:dd:61:50:91:cf:e2:05:b8:d9:7c:
86:7f:1e:85:81:44:00:e7:2f:3a:44:d7:c8:50:f7:
6e:75:a3:20:6b:12:9a:ce:64:c7:6c:0a:c8:1f:40:
e5:67:d4:6f:d6:60:6b:bb:e8:6a:c4:e4:79:f9:1f:
96:64:d1:0e:43:0e:68:39:51:21:b7:43:61:8e:0e:
d3:8f:36:ef:e9:d8:46:f3:bd:77:65:f1:d8:f7:de:
af:58:bb:30:cf:db:8a:17:28:17:dc:7a:51:27:e9:
69:0d:d5:42:e4:53:78:b1:a0:b2:15:4c:9b:82:cf:
ff:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:54:58:E4:99:58:14:2C:EB:B0:5D:61:61:66:E9:9C:27:BE:36:6A
X509v3 Authority Key Identifier:
keyid:3B:D5:43:D0:46:5E:A2:F6:FE:B8:28:F1:85:04:B0:3F:40:3A:C6:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9VD0EZeovb-uCjxhQSwP0A6xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/78fea9-efac-4983-ac2b-df45054dd934/1/O9VD0EZeovb-uCjxhQSwP0A6xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:15:73:39:34:9a:33:d5:ba:70:71:2d:1b:a8:d4:31:5b:fd:
78:0c:a9:3e:51:20:9e:5d:33:aa:94:fa:d9:91:8e:3a:42:6e:
6e:35:e5:1d:d5:a3:08:5a:91:0d:b7:73:0f:62:44:f1:42:02:
c9:a1:31:9f:39:a8:12:cf:76:bc:89:4b:f5:0d:eb:48:6f:39:
48:6d:d4:26:6b:ed:77:b5:62:d6:de:08:02:da:c9:44:93:f4:
3d:79:ae:4b:7c:a9:0d:8b:46:df:f8:d3:8b:cb:a2:87:e7:45:
da:b8:08:a5:58:21:4a:e5:ef:0c:05:12:68:f9:58:25:a3:ff:
2d:5b:9f:66:02:04:63:fd:ae:05:4b:d3:7c:dc:53:8a:8c:8a:
7c:82:23:58:79:d7:96:d6:ec:6d:ed:d8:9a:14:be:dc:b6:16:
be:12:4e:64:5a:e3:7d:08:5a:e8:9b:12:d2:a6:ca:3f:62:7f:
21:90:36:8e:22:0c:1e:e9:24:9f:1f:ca:46:9b:63:77:d7:90:
5a:fe:48:3a:dd:7a:4a:79:7a:df:26:ae:11:db:15:f6:ff:9a:
59:6b:96:2e:bd:16:42:f9:5d:0e:fe:8d:dc:93:22:58:bc:6b:
c5:92:e6:71:5f:f5:95:15:f6:0b:7f:6d:ac:33:a2:69:21:a2:
3d:9c:50:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:37 2025 by rpki-client