Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
File: oZxkOUagWTlzVUINc7xF8U2ip2s.mft (raw, json)
Hash identifier: QDYmCS8fNE8M/SJI0093wJdDekyyhTAmnjx6oIGRT7U=
Subject key identifier: CB:A1:DD:AE:62:2B:49:49:C7:E5:09:41:69:58:32:7D:83:28:CB:5B
Authority key identifier: A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
Certificate issuer: /CN=a19c643946a059397355420d73bc45f14da2a76b
Certificate serial: 0194BD1772A75F2E0037BF6904D99E4FDFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
Manifest number: 1392
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: ID7EJVgdGpnmyne0NupoGtnpzek.roa (hash: ZeCQXddR8S6+kjzcEpoW2z9l/rn9G5gRDRbTRJiZ+0o=)
2: oZxkOUagWTlzVUINc7xF8U2ip2s.crl (hash: gauTcuJjfKIpK4Zly7/LzKv3oajd/w1XPLQZ8Q494qs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:72:a7:5f:2e:00:37:bf:69:04:d9:9e:4f:df:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19c643946a059397355420d73bc45f14da2a76b
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=cba1ddae622b4949c7e509416958327d8328cb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fa:49:1a:74:08:9d:55:12:3c:f6:7f:d9:53:
c8:bc:80:16:79:8b:20:4b:83:9c:e5:78:8c:82:e4:
e3:6d:ca:0c:f8:b6:b6:19:7c:f9:41:fa:fa:b2:51:
9e:72:7f:c0:25:d5:4e:56:7c:22:50:5f:e0:6b:6f:
68:ba:3c:02:d8:d7:1b:9f:bf:07:a5:02:88:8a:86:
44:7a:ab:ca:18:04:70:57:01:aa:53:d0:db:87:ba:
fe:ef:01:8e:54:37:42:22:e7:de:fc:3a:57:ff:a4:
87:c0:f6:b3:10:31:36:eb:1d:5f:ad:90:bd:ed:16:
ac:55:26:e5:13:8c:0a:6f:c9:21:a9:dc:ea:35:88:
ea:c7:45:77:7d:87:f3:e4:d7:48:88:b0:e7:31:64:
2b:cc:1b:34:ee:9d:7e:51:07:30:e0:b4:a1:db:4a:
51:e7:3f:8c:d0:9e:d0:e2:d7:05:04:c5:61:b6:c4:
f7:d3:20:7a:6b:e4:82:72:2e:a8:6b:9e:cd:b9:f3:
3d:0d:ba:42:77:03:ae:89:3a:11:5e:2e:e7:31:8f:
b1:41:43:35:91:9a:1c:3b:b2:30:b5:05:5e:60:78:
27:89:74:59:1c:98:6d:0b:33:79:33:fa:17:a2:97:
e7:d1:b7:1b:10:5e:77:98:7b:a7:74:5b:88:0c:e8:
4a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A1:DD:AE:62:2B:49:49:C7:E5:09:41:69:58:32:7D:83:28:CB:5B
X509v3 Authority Key Identifier:
keyid:A1:9C:64:39:46:A0:59:39:73:55:42:0D:73:BC:45:F1:4D:A2:A7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZxkOUagWTlzVUINc7xF8U2ip2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/eeeb85-29d4-46bb-b3f6-ac3b6a4567ba/1/oZxkOUagWTlzVUINc7xF8U2ip2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a6:20:c7:7c:79:1a:05:07:26:5f:d9:bc:9b:a1:22:28:4a:
e6:34:09:b4:2f:5b:9c:95:54:17:d9:8a:dc:18:54:77:1e:98:
5b:c9:94:95:0e:89:79:ee:25:f1:76:8d:f6:cd:db:7e:f9:01:
e0:10:0e:08:dd:8f:4f:15:4c:4c:5f:37:d8:51:f0:b8:d9:04:
dd:1e:91:67:2b:a2:95:72:9d:61:7c:9b:a2:ea:c3:cd:fc:54:
de:7b:07:90:d2:c3:aa:4b:1b:b2:c1:62:db:6f:9e:3a:fb:1c:
e1:58:17:95:71:2f:28:99:14:0b:f5:80:32:8f:16:bc:a3:f1:
12:92:25:f4:ba:f7:40:1f:de:7d:1a:d9:01:7b:83:b0:f4:e7:
e0:7a:e4:24:27:77:a3:b8:fd:42:d7:a7:fd:55:82:bc:38:fc:
64:85:4f:64:af:91:fe:a7:3d:b8:72:f9:05:87:38:74:06:7c:
f1:1c:d9:c2:1b:87:fe:a4:a7:40:bc:15:69:d2:ca:39:b5:79:
df:2e:83:0a:b1:a8:a4:b9:7f:ee:02:77:23:4d:63:c8:37:7b:
41:d5:2b:54:19:57:1e:43:22:e7:83:4d:c2:12:35:2d:9a:c5:
3b:98:c4:fe:42:9a:f4:2b:14:5f:b3:c8:c1:d3:1b:77:57:a8:
77:81:af:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:56 2025 by rpki-client