Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
File: oILdW4b5WNW-c_2-PwzPbf8C9yE.mft (raw, json)
Hash identifier: 5u7fKvPMTZh9YI/eOM/XZeOYPiBFwfgylFdbtUFbTQk=
Subject key identifier: 24:37:85:FF:0A:B4:A5:B5:9C:83:92:7A:31:11:E2:58:29:80:DA:B6
Authority key identifier: A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
Certificate issuer: /CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Certificate serial: 0194BD176BCEBEB9FFC19ADBF5AA9A41DECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:16 +0000
Manifest this update: Fri 31 Jan 2025 16:00:16 +0000
Manifest next update: Sat 01 Feb 2025 16:00:16 +0000
Files and hashes: 1: PKIB0NDZswSqU-d6MbwA9JZfGMk.roa (hash: OewUcdT2Rw4jRK7U2p1ljpQHoVklDy1bcntiR+wXIOw=)
2: oILdW4b5WNW-c_2-PwzPbf8C9yE.crl (hash: gsHnY3uxaSsVbEsPrhJR3regAbVk85YY9HsIUAXNpio=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:6b:ce:be:b9:ff:c1:9a:db:f5:aa:9a:41:de:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a082dd5b86f958d5be73fdbe3f0ccf6dff02f721
Validity
Not Before: Jan 31 16:00:16 2025 GMT
Not After : Feb 1 16:00:16 2025 GMT
Subject: CN=243785ff0ab4a5b59c83927a3111e2582980dab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:30:7c:80:98:d6:1a:f7:41:4a:82:55:4f:06:
a1:7c:ff:07:43:0a:8d:e7:56:76:37:a1:03:1e:15:
98:17:7f:76:42:4e:3c:59:86:e8:90:77:6a:fa:58:
26:50:15:f8:3e:31:30:7d:48:f6:65:d9:15:85:9c:
3d:f3:1e:6d:a0:72:a9:8a:6a:c7:8c:87:fc:96:8f:
56:6a:b7:55:1a:e7:a2:77:a2:01:cd:7a:3f:1d:8a:
4b:7e:e3:48:30:2a:a7:33:6e:60:e5:44:28:3d:e1:
5e:7a:4e:3e:da:1c:ab:35:c6:7a:eb:ae:73:21:b4:
80:3e:1b:a4:d5:f0:4c:6a:da:8d:84:c4:d8:cd:ce:
14:39:06:5e:e0:b2:56:57:bb:20:d6:99:4b:2a:3e:
8d:65:25:ab:94:c9:bd:d2:cb:8f:e0:83:4b:8d:2a:
7c:52:8e:0c:d5:0a:49:52:4d:03:87:77:8d:e9:96:
2a:05:86:cd:c9:65:08:b5:12:16:75:02:af:3c:91:
94:2f:b3:c3:f8:56:a0:dc:27:d2:cd:06:da:2b:23:
76:d2:34:9c:2f:65:9d:a8:9d:3c:dc:53:30:8a:4f:
90:9f:17:32:5f:d1:20:64:70:13:d8:70:85:8f:85:
fe:ad:3b:f4:d8:85:45:2f:6c:38:7d:29:6a:a3:cd:
d1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:37:85:FF:0A:B4:A5:B5:9C:83:92:7A:31:11:E2:58:29:80:DA:B6
X509v3 Authority Key Identifier:
keyid:A0:82:DD:5B:86:F9:58:D5:BE:73:FD:BE:3F:0C:CF:6D:FF:02:F7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oILdW4b5WNW-c_2-PwzPbf8C9yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7279d6-f952-4e35-9796-f303de4a2d5e/1/oILdW4b5WNW-c_2-PwzPbf8C9yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2e:b7:2d:36:1b:7b:2e:fd:73:04:2d:28:e4:b4:06:42:c8:
1e:d6:10:e3:3e:b6:91:17:76:c9:83:96:95:a7:6b:b3:96:85:
a4:29:85:40:fa:72:b6:24:34:67:ec:f0:8d:ab:b4:4b:1f:18:
1d:c3:47:06:06:67:0e:60:75:cd:26:9f:81:63:4a:08:df:24:
98:4c:18:9b:b0:a1:31:1e:5c:75:07:91:97:f2:41:90:cc:e3:
5c:d0:8e:9c:54:c2:00:17:54:a5:d0:6e:48:e6:b1:ba:6c:11:
bb:0d:00:64:37:4e:19:ef:5f:b5:e5:04:80:6a:17:a7:5d:55:
eb:5a:dc:10:92:8d:c7:e7:79:1a:5d:31:19:fa:4f:7e:65:37:
60:db:f8:d4:1a:dd:0b:fe:50:2c:82:62:ba:3a:33:73:60:e3:
25:b9:fd:eb:0f:43:3a:4b:ed:4c:db:59:7f:36:77:53:eb:6f:
1f:24:fb:11:1e:d0:f4:f0:5a:7c:6f:15:c0:65:0c:6b:2e:0d:
fd:49:14:7e:cd:c1:6e:ef:45:e0:8c:94:c3:67:75:12:b2:f5:
2a:65:88:09:8a:92:7d:c1:63:63:75:c3:ca:17:63:22:36:0f:
c9:ae:2d:b5:78:c3:05:91:a6:c8:d8:4e:a6:8d:4b:a8:94:b8:
c0:0f:94:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:56 2025 by rpki-client