Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
File: OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft (raw, json)
Hash identifier: 8sVQCjGq8eN0/FKIB82Hfj2p0C4K1sFapVfq+vT9/Y8=
Subject key identifier: 49:0D:06:E2:F3:66:30:82:C5:C6:34:30:96:9B:75:B1:7D:F7:69:10
Authority key identifier: 38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
Certificate issuer: /CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Certificate serial: 0194BCE0A614E0EF85C4332B8CF34C69E303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
Manifest number: 0B3D
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl (hash: he7Oj2iDv0xAnmRWbkNV0NvPhpxvpR6tCapOXeji4wU=)
2: Pq3PJBDygUjjz_TTAnDa5kWUA6s.roa (hash: wl7p1VcPhHxXGT78nGLW8yRi9KyIJcca4JW840Jj2X0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a6:14:e0:ef:85:c4:33:2b:8c:f3:4c:69:e3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c13c6b3c1dc6b2215035a642f1efb9b00ddf5
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=490d06e2f3663082c5c63430969b75b17df76910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:bb:7f:f0:d9:4b:34:e7:fb:16:a3:97:d1:
c2:91:6b:50:f3:f4:47:ee:bf:e4:62:05:81:b0:2d:
9c:95:1f:89:eb:09:e3:f3:b1:d3:f1:c6:84:7f:7a:
7c:ae:a3:2b:ca:4b:cd:f1:33:7c:57:40:d5:19:ce:
02:99:ca:72:03:de:95:34:a2:65:11:de:ec:f2:51:
e0:e9:14:e8:12:89:f5:2a:c5:02:97:5c:5b:f3:23:
39:09:0e:fa:0d:de:d0:c2:16:f0:c4:d4:df:32:3c:
48:51:fc:be:bd:15:77:e5:cc:e5:1f:f6:80:3f:8d:
2a:ab:7b:1c:67:b2:51:33:a5:30:bf:3d:35:1c:66:
b8:54:95:42:49:5f:38:72:95:9a:d1:0e:32:35:b7:
a7:ec:5f:6d:71:c0:52:5f:40:9a:b9:00:48:1a:87:
b8:03:96:e7:74:d7:92:5c:61:90:95:bb:1a:73:ac:
90:6d:17:1f:f4:46:c4:ad:fb:5f:2b:96:27:f0:8d:
fd:90:75:20:5c:fc:8a:96:e9:e2:30:7b:df:62:59:
86:76:67:a6:3b:1f:69:1e:3f:ba:e7:5f:4e:bc:49:
a6:89:01:24:b6:f9:f4:6c:f8:8d:41:b8:e7:2d:38:
0f:60:26:48:cb:85:21:85:9d:20:d2:4f:13:51:1e:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0D:06:E2:F3:66:30:82:C5:C6:34:30:96:9B:75:B1:7D:F7:69:10
X509v3 Authority Key Identifier:
keyid:38:9C:13:C6:B3:C1:DC:6B:22:15:03:5A:64:2F:1E:FB:9B:00:DD:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwTxrPB3GsiFQNaZC8e-5sA3fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/80eb21-af20-48eb-a2dc-6210eab05b70/1/OJwTxrPB3GsiFQNaZC8e-5sA3fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7f:43:d1:66:b4:b4:8d:84:6f:95:94:d6:8d:1f:2e:c2:8d:
44:15:cc:76:e7:17:69:7b:c6:7b:4d:4d:e5:6c:2d:6d:01:e4:
e1:83:d4:e0:08:f4:30:fb:ce:e2:6f:1d:cf:94:ee:c6:af:d7:
1b:bc:5c:89:f8:fd:cf:81:85:6e:ca:8a:f8:1d:27:06:b8:2e:
7c:04:6c:28:d9:2d:57:5b:da:21:95:8c:8d:9d:4e:0b:4f:78:
2d:b9:4a:37:07:1b:56:6f:81:38:6b:ea:d2:d8:8e:ea:1b:32:
a3:99:2a:9c:1a:57:35:b7:04:5e:1c:7d:7c:c1:8a:ac:e2:6f:
3d:da:4c:dd:6b:1e:20:83:4d:22:b6:80:a8:53:3a:c7:c0:3d:
9b:36:79:c7:89:af:37:a9:ac:8e:5b:97:44:bf:58:59:23:ec:
22:b4:66:20:55:cf:07:f4:3a:5f:31:fd:7a:44:ce:2f:33:37:
92:da:80:ca:b4:6b:ee:e3:48:67:cf:46:5d:e3:44:1c:f8:8f:
7c:fd:37:5f:66:a7:9d:fc:14:89:43:aa:97:fd:15:70:d4:39:
d1:f1:ea:93:d7:e5:e6:d3:bd:1b:a6:18:d3:5e:b7:25:82:cc:
2c:e2:b4:f1:f1:2e:95:c6:27:91:88:67:0b:1b:a1:66:45:8f:
5c:bc:c8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:33 2025 by rpki-client