Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
File: oHFXHI4QtBnXo7824Qhf_VzXipg.mft (raw, json)
Hash identifier: hp++ztTBDC9XfrkKhSJiy+ojaJkMLId+jMEAhz9lWrI=
Subject key identifier: 26:3B:F5:F2:A8:8D:0D:AC:B3:8A:39:60:9A:F4:A4:DD:6E:64:E6:48
Authority key identifier: A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
Certificate issuer: /CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Certificate serial: 0194BCE07F9E101248B8D592505A333DEC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
Manifest number: 0DF2
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: _RMv1Q7O2CnoWhcrAcn90ZX5USk.roa (hash: I2FYErDanPUJADaKO92Q6jyRK2EK15cN4Qdxt/bs9vQ=)
2: oHFXHI4QtBnXo7824Qhf_VzXipg.crl (hash: bhdPfdR12lGaT2YvmrUtrr06JotyQ7sDAVZvTAdjdI8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7f:9e:10:12:48:b8:d5:92:50:5a:33:3d:ec:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a071571c8e10b419d7a3bf36e1085ffd5cd78a98
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=263bf5f2a88d0dacb38a39609af4a4dd6e64e648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d7:33:ea:37:71:3e:a6:9b:11:99:63:c3:e5:
9c:55:26:65:c2:47:1b:1e:7e:71:81:30:02:ee:e2:
67:3d:c8:66:39:17:dc:2a:c1:95:a7:cf:6b:c2:1d:
3f:89:46:10:b3:14:60:64:aa:d9:26:9e:bc:fb:55:
7d:94:d8:2f:f3:f7:39:f8:67:30:a7:a1:c8:96:9b:
d2:b4:c6:cd:b4:d6:0d:a9:76:b7:49:e5:2a:7c:aa:
e3:c0:93:20:49:56:f9:14:72:b8:6a:42:8e:a2:5d:
0e:9b:ab:02:00:34:fb:32:80:51:da:e4:23:9c:4e:
11:7a:e1:ba:10:34:9c:14:c7:13:49:15:bd:84:7e:
c0:9c:2f:c3:41:95:c5:54:a3:ed:44:fe:7f:f6:0f:
18:a2:a9:5c:fe:c8:3f:cc:33:00:8b:3b:fa:8e:49:
81:46:1f:b2:37:d5:63:55:92:ad:65:6e:a2:39:5e:
1d:27:1f:21:5a:2f:fb:ff:10:55:4c:8b:e4:6f:20:
8f:4e:3c:ea:3a:94:bd:60:aa:be:5f:3f:7d:6f:11:
78:aa:f6:75:09:ab:eb:d9:7a:7c:ae:64:6b:c9:d0:
bc:c8:15:2e:19:5d:b5:d2:d2:16:0b:41:3c:a8:ec:
69:b7:c4:bc:f4:a4:0f:a6:c4:3c:a1:3c:53:68:8b:
9e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3B:F5:F2:A8:8D:0D:AC:B3:8A:39:60:9A:F4:A4:DD:6E:64:E6:48
X509v3 Authority Key Identifier:
keyid:A0:71:57:1C:8E:10:B4:19:D7:A3:BF:36:E1:08:5F:FD:5C:D7:8A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHFXHI4QtBnXo7824Qhf_VzXipg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/c2829f-b3ed-44d3-a5cf-0c1f69b7aee7/1/oHFXHI4QtBnXo7824Qhf_VzXipg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7e:21:8c:ff:fa:d9:6e:75:4d:7c:37:00:a2:8b:54:38:e7:
54:b3:1b:6c:36:f1:8f:8e:0b:e1:c4:48:50:51:bf:a7:f1:b6:
a2:7e:60:e8:e5:2b:13:47:ff:22:48:22:7f:0a:32:0a:99:e2:
98:f4:43:09:69:8d:c2:e7:7d:21:92:cc:f6:b1:a0:45:3d:47:
6b:38:0e:32:cc:bc:8b:e4:da:8a:0f:9d:3c:b7:f1:97:97:70:
c0:e0:08:46:29:cb:e8:db:71:fc:54:0a:ac:62:0d:34:ec:2f:
2c:a0:30:1c:84:1e:b5:01:82:0a:4c:a1:2d:a4:67:75:2b:e4:
10:cb:79:38:d9:cc:89:16:99:d7:7e:3e:94:80:94:4f:b8:5e:
a9:bf:83:5c:b8:9d:e8:63:c1:f4:d6:e9:5a:b9:db:e9:20:40:
86:88:be:1a:61:75:13:68:14:ba:10:82:9a:4f:b6:c7:13:f5:
be:88:c3:2b:3e:7f:57:dd:a9:eb:5c:7f:1e:f4:13:d4:4b:46:
61:0c:60:b9:57:e7:ac:8c:5d:29:ba:fd:22:64:cf:e3:f7:13:
e0:12:72:d4:4a:8d:75:1f:be:98:56:d2:c9:e4:b7:25:14:17:
c2:b3:ba:61:9f:32:ec:21:c6:34:77:f0:8b:dd:5d:5a:c5:26:
e1:69:0a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:02:37 2025 by rpki-client