Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
File: oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft (raw, json)
Hash identifier: Emh0kOZXH5N4u8jKQb7jXVMpyIBMtdBpCOidCgjsnhQ=
Subject key identifier: 83:DA:95:3C:7A:BE:AF:CC:82:7C:71:5B:AA:21:4B:6F:56:A1:ED:40
Authority key identifier: A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
Certificate issuer: /CN=a1a55bf2888753e44675b61dda30394d90156c0a
Certificate serial: 0194BC3C52AAE18F487DA06936AC90A81037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
Manifest number: 036F
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: RAu0fNtqwivhpDFk4ehwbUssHTc.roa (hash: ASO7jKRNvxEqEpBOo5wevxzSp2tNnkfm3RRt0ZwZtAw=)
2: oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl (hash: BFIuBgLaKwSRHNNvPGWIJ2edsL27EtJPeRrHgwSypBc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:52:aa:e1:8f:48:7d:a0:69:36:ac:90:a8:10:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a55bf2888753e44675b61dda30394d90156c0a
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=83da953c7abeafcc827c715baa214b6f56a1ed40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b7:b0:51:03:35:6c:65:db:66:c8:3f:9f:32:
65:18:23:6f:31:d4:1b:e2:af:e6:f2:51:19:9d:00:
bf:ad:2d:73:2f:9e:c1:7c:fc:03:bd:1a:63:f3:43:
98:0a:f5:a2:eb:15:90:6f:79:58:06:dc:1c:99:bf:
03:02:9c:77:3e:5c:a8:90:75:ce:5f:9e:e4:36:f7:
ff:ff:91:80:ee:11:81:99:80:d6:a1:ac:44:41:a9:
2d:a0:47:a6:ba:94:37:d8:33:a5:21:1e:da:80:e5:
3f:56:d3:13:ff:d0:51:b4:4d:5f:02:d7:ef:72:8c:
82:0e:ca:4b:78:67:60:00:12:63:6d:f9:c4:00:f9:
7e:38:ad:3a:23:e4:95:8d:3f:71:c0:6c:9b:3a:f7:
50:d3:d0:d9:a7:8d:b8:b6:72:f0:39:45:4e:e0:ae:
0c:1e:6e:b3:dd:b5:c8:38:06:80:61:70:ea:c7:d0:
8d:44:d7:ca:10:5c:2f:f4:b8:6b:14:9a:12:2e:0f:
78:27:97:3f:ac:d7:1c:66:b7:1f:78:23:21:3b:d8:
02:f4:8d:99:68:17:23:7e:72:32:8d:9a:d7:4c:2c:
8f:5d:fb:94:35:33:fa:00:4e:b8:67:58:cf:66:64:
f8:ed:c7:d5:8c:be:52:66:64:37:4a:40:14:be:3b:
78:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DA:95:3C:7A:BE:AF:CC:82:7C:71:5B:AA:21:4B:6F:56:A1:ED:40
X509v3 Authority Key Identifier:
keyid:A1:A5:5B:F2:88:87:53:E4:46:75:B6:1D:DA:30:39:4D:90:15:6C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaVb8oiHU-RGdbYd2jA5TZAVbAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/2dab18-7bb7-4aa1-98ad-27c9d9114238/1/oaVb8oiHU-RGdbYd2jA5TZAVbAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:da:b4:3a:a0:23:7f:90:34:16:f1:2b:8d:64:b8:7c:e1:fa:
6f:c7:47:b2:f4:ad:38:a4:31:4d:28:1e:f2:25:66:28:d4:ee:
5f:0b:d2:a1:b7:76:20:c2:f2:f6:a7:69:00:37:2d:24:e6:02:
1f:62:0e:7c:1b:2c:52:15:1d:af:39:86:19:b1:48:ed:36:05:
7d:d6:2c:35:39:21:92:28:4c:d6:48:a1:39:a0:c6:36:c6:9e:
08:f2:b9:a1:8e:06:73:49:87:bf:0c:d3:88:f6:89:21:c2:01:
d1:f3:fd:37:40:42:bd:c3:53:49:14:e1:15:94:a1:7e:0f:4f:
16:bb:aa:28:91:15:43:b9:c3:1f:4e:03:e7:79:ff:77:df:c0:
73:29:ac:41:9c:df:17:28:87:da:21:11:fe:a2:da:62:1c:1a:
d7:92:c0:3a:50:7a:fb:a0:31:48:14:cb:44:8f:09:e2:a8:c3:
0e:17:50:55:be:05:91:9f:a3:e4:23:89:02:b6:7c:2f:52:3a:
31:bc:0b:f6:46:78:24:7d:37:c3:89:02:a0:ec:e1:bd:d7:53:
2b:50:5a:9d:f4:62:ac:44:99:e1:4f:1b:cf:6c:fc:6b:99:2b:
2f:a9:d7:56:bc:95:45:fd:9c:66:53:3c:b7:0a:5c:ab:75:65:
8d:2a:5a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:07:52 2025 by rpki-client