Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
File: oAy0uNVpR3USzleIW6aiiY-8LZU.mft (raw, json)
Hash identifier: DA0UK+xIP6aa0Smg63yQWwKkqwRYd0NFSmM7ZhfqQSk=
Subject key identifier: 2F:21:9A:76:02:B5:DA:84:8E:20:40:2E:D5:40:CE:43:74:1C:AC:CF
Authority key identifier: A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
Certificate issuer: /CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Certificate serial: 0194BD178773CE59F1C3D09D11402AD63517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
Manifest number: 0F32
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: RDMJmsptAt79z1bZNxCRYGoDbOA.roa (hash: psHiDB3pvgN7EOgCxCvfgOl6kkNmShVGm0R8glPdahE=)
2: oAy0uNVpR3USzleIW6aiiY-8LZU.crl (hash: Vjgg0qWr+3HNdp/ID6YVFKn/BQuqqgZ2wXLF4jjNJes=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:87:73:ce:59:f1:c3:d0:9d:11:40:2a:d6:35:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00cb4b8d569477512ce57885ba6a2898fbc2d95
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=2f219a7602b5da848e20402ed540ce43741caccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:83:78:59:98:c5:c9:b5:71:ad:bb:b5:45:
e7:c7:ce:38:c5:ee:30:22:36:e8:3e:a4:e8:8f:e5:
51:7c:15:15:3d:58:f2:d2:be:c1:b0:51:4f:6b:78:
5e:bc:ba:de:88:b4:22:69:14:19:0a:fd:a7:9f:bc:
53:9c:e9:16:15:65:03:61:24:30:e4:1c:c6:17:c2:
ab:d3:72:14:25:7a:3f:ee:23:da:dd:c9:72:b0:b6:
a2:14:72:06:85:77:7b:01:33:fe:01:96:ff:20:9e:
6c:b1:0e:8b:e6:49:58:c4:91:0c:81:94:cd:2a:fb:
23:58:a5:8b:7b:78:54:2c:35:7a:d3:3f:6d:0c:20:
7c:b6:6c:c7:92:84:43:15:9a:91:68:77:96:58:1b:
ef:69:f5:8b:a9:05:ea:8e:7a:e1:d9:d9:5a:1e:8c:
8e:fb:c0:56:23:de:89:b2:b8:9d:3d:4d:37:d9:41:
d0:5a:06:1f:cd:dc:45:fc:73:33:7f:4b:e5:25:01:
54:69:32:5d:12:0d:76:30:4d:41:42:58:94:67:30:
4d:3c:ab:32:bc:4a:fa:e3:ee:bd:22:ed:0a:e7:70:
9e:a7:24:f8:16:24:3e:7f:c7:5a:7c:3d:ed:d7:65:
7e:ab:9e:76:7e:04:32:4d:d6:02:2a:b7:59:ad:e2:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:21:9A:76:02:B5:DA:84:8E:20:40:2E:D5:40:CE:43:74:1C:AC:CF
X509v3 Authority Key Identifier:
keyid:A0:0C:B4:B8:D5:69:47:75:12:CE:57:88:5B:A6:A2:89:8F:BC:2D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAy0uNVpR3USzleIW6aiiY-8LZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f8fd59-0115-4db3-bd85-18c70ebf681a/1/oAy0uNVpR3USzleIW6aiiY-8LZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:38:a7:4b:ab:59:d5:63:ed:6d:fb:28:f4:ca:14:16:ad:94:
52:fe:07:6f:87:8d:67:7a:4a:f5:e2:6e:06:f2:2a:49:97:0b:
f8:b4:d1:57:4c:46:1a:12:33:76:9b:61:63:7d:21:ac:dc:41:
38:c2:e2:8d:a0:87:46:e9:7f:d7:c4:75:cb:f5:29:05:27:cf:
ac:76:d7:a8:86:8b:2b:c1:db:d1:13:fa:7a:50:57:e5:8d:e5:
45:f0:69:c0:3e:5c:70:aa:75:ef:17:0f:30:69:a8:fe:53:a6:
67:dd:a2:60:ec:22:34:92:dc:59:a4:4d:15:a1:f4:94:4f:c6:
df:8f:a6:75:4a:85:24:48:24:68:38:ce:58:20:d5:c5:bb:c2:
7e:02:a0:97:36:22:00:3b:65:02:0e:b6:e1:9f:34:8d:f0:4f:
04:07:54:62:b4:2e:a8:0f:99:65:80:ab:29:4d:85:6f:c3:f5:
b3:0e:82:d0:db:64:58:80:49:e0:d1:b8:ad:d8:20:51:45:da:
2a:40:e6:c2:50:60:27:53:9f:a6:b4:05:36:60:43:9d:e2:39:
61:94:b7:9e:94:40:bb:f6:e5:db:03:13:5f:48:3c:3e:e4:8c:
3a:c8:fe:80:a0:03:de:5d:b7:96:43:52:66:ff:1c:8f:9a:92:
76:d5:d7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:50:06 2025 by rpki-client