Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
File: o860BZh6Oqi75ZnY70ZjySQqNLg.mft (raw, json)
Hash identifier: Pxar3MCOa5MQbz1n4lI2rd+tY/20FkhDPhYZW8iqNl8=
Subject key identifier: 63:DB:BB:D4:A3:B7:00:8B:71:DD:FC:B3:93:BD:68:26:06:06:A0:0F
Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Certificate serial: 0194BD4E83FE0C7552A11708194DC8EDF87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
Manifest number: 1079
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: o860BZh6Oqi75ZnY70ZjySQqNLg.crl (hash: aNkhc/ZJLdJqaJMZ49gyLOEQnG5Z/hzcDzZ8cq/Dtwc=)
2: uvI_GRIq2GyJoG31og82hOgTWrg.roa (hash: OrH6axib8qnAg3xAnrBLPJ8IdTDHwClsXRZdDBToyxU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:83:fe:0c:75:52:a1:17:08:19:4d:c8:ed:f8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=63dbbbd4a3b7008b71ddfcb393bd68260606a00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2f:5c:43:31:ce:8f:40:79:f2:72:10:91:6b:
7e:f4:b1:77:fd:73:ae:f1:f0:1a:d8:c1:dd:b1:f2:
16:10:b2:f3:13:f4:3d:cb:1f:46:bb:35:10:e3:3a:
84:c7:df:9c:17:11:c0:c6:82:c8:4f:2f:e0:83:1e:
90:43:a7:6e:5c:b3:c8:f1:55:9e:5b:f1:a2:dd:78:
6d:62:28:d0:53:e4:7e:d8:60:f8:81:e1:44:73:f0:
5a:54:f3:4c:43:d3:d0:b6:f4:b1:08:e5:35:4b:9d:
ff:97:0b:ac:aa:97:19:a8:a5:a0:37:ae:20:fd:e9:
2f:05:ae:ea:66:b9:11:2a:c9:bc:7f:a2:57:68:09:
f9:d2:c0:60:8b:44:66:35:83:5d:16:df:fc:45:58:
da:d7:0c:7b:68:31:34:e3:4a:4a:79:88:ee:a5:c3:
20:f2:2e:08:18:b2:de:cc:2d:7a:f6:73:05:68:77:
8f:b8:bf:7f:5a:05:bb:61:99:2b:2e:da:61:9b:a7:
52:13:8b:6d:ff:28:68:57:c7:ef:3e:ba:7c:82:ef:
86:f9:e6:2c:ad:11:43:a5:20:93:19:2d:62:ac:01:
54:de:ef:14:67:21:99:a1:81:a6:d9:2a:e9:53:ee:
32:28:e4:14:7a:db:79:86:a9:59:0b:f3:98:11:f8:
33:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DB:BB:D4:A3:B7:00:8B:71:DD:FC:B3:93:BD:68:26:06:06:A0:0F
X509v3 Authority Key Identifier:
keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d9:33:92:c3:d6:6b:cd:60:6f:d5:d1:6f:6d:a9:37:88:db:
d7:e5:12:a6:98:0e:b0:4d:f3:28:d7:82:2d:61:3a:eb:6f:ed:
cc:3e:f0:56:15:e0:8c:30:d5:36:36:c8:64:68:6d:d3:e2:d4:
15:23:56:6e:78:8a:f7:f4:12:80:62:be:fc:54:d1:75:40:25:
73:39:28:d7:ab:e4:5f:15:da:74:26:ae:37:09:5b:e8:00:cf:
e8:12:6a:06:ba:60:ba:d3:1e:aa:39:87:c6:3a:fe:7a:48:a7:
cb:52:2e:ea:e9:f6:0a:5e:3a:09:e2:03:c4:41:23:1d:6e:c0:
cf:f7:1b:2e:94:66:87:ad:39:23:a2:27:30:7e:47:68:e4:4c:
39:17:04:ea:08:1b:72:9c:a0:34:a0:d2:4c:c4:ed:d1:21:8a:
09:3b:ae:f8:c4:02:af:5f:b0:28:c6:23:80:13:3f:da:08:6a:
d7:91:c6:f6:a4:54:a3:f8:4b:79:e2:0a:c4:0a:a3:26:76:91:
8e:12:db:bc:82:51:6c:c1:da:fb:04:84:b0:a8:05:ac:66:f3:
8d:4b:86:ba:87:6f:3d:32:c7:00:df:81:d8:cd:09:d4:0b:d7:
2b:b3:c9:9a:07:9c:10:db:a1:f2:71:11:8e:3c:6b:c4:a5:eb:
d4:43:32:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:23:31 2025 by rpki-client