Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
File: OtL3zCdTMJgzAxuolGSagM_7E-g.mft (raw, json)
Hash identifier: eQV9/hUrbDuqWOHEE/Rc/R/MKUTTnaCqXyODP6un/i4=
Subject key identifier: 5F:25:F9:58:3D:8F:E1:89:07:59:92:B4:5B:AD:62:73:98:AE:F1:28
Authority key identifier: 3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
Certificate issuer: /CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Certificate serial: 0194BD17486110864CEBED35F9F37599067B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:06 +0000
Manifest this update: Fri 31 Jan 2025 16:00:06 +0000
Manifest next update: Sat 01 Feb 2025 16:00:06 +0000
Files and hashes: 1: OtL3zCdTMJgzAxuolGSagM_7E-g.crl (hash: fzXMQEwFjz6yqmhw0C4a5/jPVpy40NJsdmzJZSlidGQ=)
2: u1VOczY0GtYqmMxkx1bvtbbyBno.roa (hash: ZYoGR8269MdLBwkunDrMw1B9ylh+XJUv3tEqHGtF+N8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:48:61:10:86:4c:eb:ed:35:f9:f3:75:99:06:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad2f7cc2753309833031ba894649a80cffb13e8
Validity
Not Before: Jan 31 16:00:06 2025 GMT
Not After : Feb 1 16:00:06 2025 GMT
Subject: CN=5f25f9583d8fe189075992b45bad627398aef128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:95:d3:d5:19:f6:80:40:65:20:fe:d9:97:89:
5f:b4:4c:7a:07:f1:7b:9c:24:f6:76:f8:48:f3:2b:
8d:ae:cf:fd:03:2e:4c:a7:63:72:a4:be:ff:4c:f5:
29:08:0b:72:8a:69:eb:46:68:a9:e0:79:6c:b2:24:
0f:00:fd:e7:10:90:79:09:9d:35:5f:4d:48:26:16:
18:0c:05:2d:af:77:bd:a6:db:b5:6c:89:04:ad:0e:
e6:29:43:e2:f3:d4:1b:8a:e4:8f:3b:2d:3b:4f:25:
08:76:d1:cc:f7:90:c8:8b:50:11:c6:42:29:30:34:
b4:11:95:2e:39:30:9c:44:2a:87:d3:3f:5f:bd:98:
b3:d2:ce:ec:48:35:71:9a:50:88:60:36:93:fd:ac:
72:20:ba:0b:c1:65:a1:54:1c:eb:d3:48:ab:e9:e6:
a1:a4:8e:67:57:e3:26:20:69:03:8f:ae:ee:28:c5:
73:3c:53:fe:07:74:3a:0a:c9:a7:06:f9:3c:d9:e3:
69:ef:79:9b:a1:1e:05:11:f9:aa:f7:f9:d3:09:b7:
ea:50:8f:11:ff:81:f1:2a:9e:63:40:60:91:d3:42:
87:4a:17:f1:c0:65:49:d0:e9:2b:b2:52:41:12:9b:
2c:da:22:7e:c4:84:77:ca:58:db:2e:b7:32:a1:e6:
f2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:25:F9:58:3D:8F:E1:89:07:59:92:B4:5B:AD:62:73:98:AE:F1:28
X509v3 Authority Key Identifier:
keyid:3A:D2:F7:CC:27:53:30:98:33:03:1B:A8:94:64:9A:80:CF:FB:13:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtL3zCdTMJgzAxuolGSagM_7E-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6ebc1c-42ab-4559-84b1-f6ad9330c4b0/1/OtL3zCdTMJgzAxuolGSagM_7E-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:b4:12:66:c5:50:3b:2d:d9:f0:54:92:a5:0c:0f:66:22:49:
5d:0b:04:b0:b0:74:b8:a0:68:cd:e1:ca:0f:a9:f4:9c:3c:15:
cb:da:ec:2f:3b:56:a2:33:03:8d:a1:b7:1e:db:89:05:47:d5:
28:3b:54:1a:d5:b9:f7:af:20:e2:1d:b9:70:d1:8c:d3:79:f1:
18:84:e5:97:f4:ba:ee:2c:6c:96:10:0e:a1:2b:63:9d:fc:c8:
ba:a5:aa:a4:ff:13:f3:c9:62:83:58:6d:a3:81:75:8f:1f:56:
9b:45:3d:0b:a2:da:68:3f:d8:bf:32:e8:78:ef:13:5c:10:68:
f3:80:2d:87:c3:ab:2f:66:d6:f8:43:2a:a6:79:4c:bb:b4:cd:
36:96:42:88:f6:ff:dc:03:27:dd:83:a2:da:37:20:7f:00:12:
8b:a3:b6:65:c7:70:a7:f1:fd:ca:00:72:92:df:57:ea:5b:48:
ac:3a:9f:f0:c2:be:e2:17:73:b9:7b:97:6f:96:ef:15:f3:cd:
45:e7:25:26:d0:b3:5a:1b:4a:b6:b8:e7:4c:7f:a9:08:11:16:
5f:a1:84:e2:c7:33:9a:a3:78:cf:25:40:9d:35:e6:3c:5c:94:
0f:bf:ea:7b:d7:18:95:02:8c:07:8f:a3:38:2d:11:f2:5a:7d:
84:01:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:37 2025 by rpki-client