Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
File: Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft (raw, json)
Hash identifier: wtWvyIWN+OVd7Jqzgorn9CrN3raCxRzmmNUP9oXzdn8=
Subject key identifier: 35:96:87:EF:02:09:00:BE:4C:C3:B0:3A:E8:B8:34:C2:0B:B3:FC:5E
Authority key identifier: 3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
Certificate issuer: /CN=3b3daef89306a75f0b88191440742a720afb3f20
Certificate serial: 0194BC04B8A09A3EE8DB056E4BB3C8BEE16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
Manifest number: 1436
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: KDWeBpmTxUa0Mz4yXMRZvKpUp-8.roa (hash: cjL5/Zk/+WeXJvz0YYNjQhBLpfiAvQEqmGubWQog+uE=)
2: Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl (hash: +h/VfDS00GhbW/F0SjmnibWepNdL2f6iRTK0qGxJEWI=)
3: bAjDorqsH0l1Z5y5sLAQ1L3oxPI.roa (hash: hy33S2WmDHWhsVWNOD45uiD/OAwJxK2zH5rOVfuPuyk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:b8:a0:9a:3e:e8:db:05:6e:4b:b3:c8:be:e1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3daef89306a75f0b88191440742a720afb3f20
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=359687ef020900be4cc3b03ae8b834c20bb3fc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c0:de:83:ae:d2:74:17:7d:3e:6c:63:f2:1a:
b9:1c:59:fc:76:79:33:4c:20:45:68:ff:a6:d4:5e:
1a:bc:ae:8f:f5:36:13:8c:4b:db:7a:52:8b:4b:dd:
38:17:e7:8d:c8:47:04:2e:75:37:c9:7e:5a:3a:6f:
0b:74:00:82:67:67:33:60:9a:c7:fd:b1:46:d8:d3:
a1:e4:cf:e9:b7:38:a6:dd:41:0a:5c:93:6a:cb:c7:
3f:b1:07:04:db:5c:3f:d1:b8:bc:ae:4f:ac:f3:5f:
66:36:5a:dd:73:b9:9e:7e:eb:12:3c:1e:3c:8b:6e:
b8:80:70:28:23:be:6b:f1:15:34:ac:ac:81:27:60:
84:4d:6a:0d:e2:04:07:52:e6:a1:09:93:3e:d6:f9:
80:d8:a1:00:5e:25:04:86:b3:01:46:f1:08:cf:33:
a4:f1:ad:b7:2e:62:ce:6b:03:4b:74:98:79:e0:96:
6a:b0:a9:41:63:93:22:94:af:40:c2:3e:29:e1:ad:
52:5a:6e:7b:fa:6f:0e:df:02:17:51:3b:8a:31:6e:
de:a2:69:78:fa:0a:b3:1c:9f:15:8e:52:01:d5:28:
35:1d:d6:79:4f:e9:f7:55:03:75:49:53:e5:04:73:
e3:c6:81:6b:93:b0:bc:12:2b:d1:07:a5:ef:ee:21:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:96:87:EF:02:09:00:BE:4C:C3:B0:3A:E8:B8:34:C2:0B:B3:FC:5E
X509v3 Authority Key Identifier:
keyid:3B:3D:AE:F8:93:06:A7:5F:0B:88:19:14:40:74:2A:72:0A:FB:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz2u-JMGp18LiBkUQHQqcgr7PyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/f150b1-43b9-4911-a005-aacad86c617d/1/Oz2u-JMGp18LiBkUQHQqcgr7PyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:fd:7a:1f:03:b6:62:98:f3:f4:70:46:b5:7c:21:c6:85:55:
0c:f6:e4:f5:11:6c:c7:71:c7:fa:14:58:4a:0f:14:18:50:d8:
d7:7a:dc:86:33:ee:42:7d:80:bf:5a:f8:16:42:48:61:1b:ec:
32:21:da:ba:7b:55:b9:75:e1:2f:1c:6c:94:40:0c:02:d0:f5:
08:c4:7e:41:ce:fa:d7:28:53:51:b4:5f:17:a4:25:6e:bb:b5:
a2:1e:9f:1a:3e:d5:61:72:77:92:ae:81:9c:5e:a3:0e:12:33:
f0:b8:0d:b6:8f:cb:b2:9a:0a:a9:41:41:6d:38:d3:48:e5:06:
33:c5:1d:64:45:3f:2c:d1:d6:26:30:71:7b:ea:74:aa:56:84:
c0:84:83:ec:80:66:08:21:01:16:9f:30:52:60:62:58:65:38:
ce:67:e6:47:32:79:98:c8:9e:47:65:52:c5:82:d2:ad:ba:0f:
a0:a2:bd:6b:5e:66:71:ac:bc:61:ac:de:48:18:3b:b8:e0:0f:
13:04:07:8c:0c:da:b1:84:7d:ff:eb:61:94:9f:ec:0b:6d:9a:
1b:47:d0:8f:b0:e0:c1:0a:f4:fc:93:5f:32:4d:25:13:ef:01:
77:60:5d:ee:d3:2b:ae:46:40:1a:67:4a:3d:b6:b4:6a:4c:5d:
ff:56:eb:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:19 2025 by rpki-client