
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
File: ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft (raw, json)
Hash identifier: QAYJI4CrFCCFOYwZBaWpagjAROTnVxxVm2NaXyDu0WM=
Subject key identifier: CA:82:7D:37:83:21:87:C8:01:A4:DA:6B:79:C9:CF:43:12:39:08:1F
Authority key identifier: A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF
Certificate issuer: /CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
Certificate serial: 0194BBCDDEB1C749AADEDB87B79F411E7B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
Manifest number: 095C
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: FyzxwbgLSadTJLpy9TRdd9F-gGk.roa (hash: iyPnEDozqJhAVhpqbdklx7ETcR+WTKfp9SYU0Q+jnpE=)
2: ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl (hash: hfGgHlY7ugSFUjCrfoy6fyABPnjOtPMyGREaR4zx904=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:de:b1:c7:49:aa:de:db:87:b7:9f:41:1e:7b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a206dfffab1d518c132f6d56d8d4a31d9059f4bf
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=ca827d37832187c801a4da6b79c9cf431239081f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ff:0c:0c:f5:c8:6f:c9:36:fe:47:d5:8f:2c:
20:90:36:98:c7:9f:da:ad:7e:0c:0b:bf:81:8c:a7:
8d:eb:47:8a:f6:ad:7c:b4:4c:df:41:03:2f:7a:a4:
45:bd:ca:b0:33:14:f9:aa:35:b6:84:5c:24:26:3e:
b0:c3:5c:dd:0d:fd:f5:f1:09:16:72:64:c6:f0:18:
fd:1b:67:f6:51:ea:a7:34:37:c2:b2:f2:77:03:08:
7e:9d:4a:a4:6b:17:a3:30:8d:36:3b:88:be:db:d3:
b2:1e:3b:98:4a:61:dd:93:18:e4:e7:67:09:85:aa:
12:bb:c2:27:f1:de:07:be:3a:1c:b6:07:10:73:83:
cd:ed:24:b0:d4:32:ac:31:7d:62:d4:b0:7f:9c:c6:
a8:9f:5f:44:19:e5:dd:09:62:78:23:e8:5c:49:a8:
93:57:3e:a6:d1:55:47:b6:bd:c0:d4:6a:ed:00:6a:
3f:f9:9d:dd:84:00:1f:6f:0c:27:f2:92:a8:28:ac:
f7:ff:2f:a5:f0:cc:5b:a6:3b:82:7a:b9:93:91:0d:
3d:6c:de:e3:50:e9:a0:94:7a:dd:30:61:25:7b:ae:
10:84:a2:62:3a:8d:a4:67:79:6c:08:36:27:83:49:
96:5b:24:6f:bf:9f:ed:aa:5f:44:6c:b1:c0:3c:9c:
ff:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:82:7D:37:83:21:87:C8:01:A4:DA:6B:79:C9:CF:43:12:39:08:1F
X509v3 Authority Key Identifier:
keyid:A2:06:DF:FF:AB:1D:51:8C:13:2F:6D:56:D8:D4:A3:1D:90:59:F4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogbf_6sdUYwTL21W2NSjHZBZ9L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f5931e-0f84-40bd-ad0a-671a1f0af059/1/ogbf_6sdUYwTL21W2NSjHZBZ9L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0d:1a:fe:ae:d2:f6:68:d3:eb:89:a0:a2:43:88:68:17:64:
3a:12:b7:43:82:51:65:5c:93:2f:93:2d:bf:ab:56:e8:6d:bd:
18:80:86:b0:4a:d7:a2:52:05:37:af:90:9d:dc:5b:93:58:b1:
e6:6a:9f:01:51:54:08:4f:ed:74:c1:81:6f:13:b0:60:db:1b:
e7:9b:94:66:56:47:53:a3:09:ea:e1:cc:db:a8:83:3b:66:01:
ac:25:da:16:ee:ab:fd:ba:11:92:5e:e8:43:ab:cf:5c:c9:b5:
54:1c:e4:68:e9:d9:3f:82:6c:25:78:a5:df:b1:57:d8:23:b4:
24:58:a5:d7:db:78:f5:5a:1c:45:14:a7:c9:82:93:13:08:93:
4b:84:48:92:ee:e7:1a:29:c2:dd:83:6c:d3:72:a7:e4:93:01:
ae:82:7f:98:7f:29:0b:9a:3e:85:6b:bc:5a:a8:60:ec:17:04:
fe:0d:73:05:4d:bf:58:2e:f4:da:b2:46:b3:03:52:75:23:8f:
2d:2f:3d:39:85:53:59:75:03:c2:7a:80:85:08:72:fd:ae:27:
64:db:88:7b:f6:57:fd:2a:66:38:02:b8:1f:76:e3:d2:4d:41:
2d:19:cb:fb:96:eb:a6:ab:4b:0b:77:d9:2d:e3:e2:0d:0b:b6:
4c:c4:53:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:24 2025 by rpki-client