Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
File: ook6SyhKy12KQWQokEVJIQlRFog.mft (raw, json)
Hash identifier: XliyKNuuFl1q9fhWqUrjXKhYCHVsutehWLOS0p3179I=
Subject key identifier: 3E:39:1D:E9:BD:42:22:5A:C9:D6:CA:54:FA:65:47:A1:F1:9B:AC:90
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 0194BC3C0860A85BC98145A85D780FC1F294
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: cdMOuRF7uOMr3eiWtLluBITicTo.roa (hash: 2zf3i/TaVgEDUbWisH1c3bo8xEvWjGA35Bw+WbjbFqQ=)
2: gPmJ919io92zLM0qUcMa5dmkecM.roa (hash: m1AiD3SH7JRse/Y0z+yKore/EQyRkJUXQ2NtfWymxSY=)
3: gVangjOt-W6Q-QV_s66mXYPcc_o.roa (hash: DiTRQhaMQ99SN8kWmrVuQekBFcD8SdmyYMIP7Glc7p0=)
4: ook6SyhKy12KQWQokEVJIQlRFog.crl (hash: h16VPzuiUDvzfPQs5oF5cvecZTYw3NJOgyupusV3l34=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:08:60:a8:5b:c9:81:45:a8:5d:78:0f:c1:f2:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=3e391de9bd42225ac9d6ca54fa6547a1f19bac90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b7:2f:3c:7d:53:a2:93:11:7c:b3:32:9d:28:
cc:e4:f4:4f:23:58:cc:90:d5:99:eb:0d:8b:dd:93:
59:31:b6:5e:00:fd:d9:71:f6:48:1e:28:a8:08:1c:
6e:94:10:89:60:9e:d8:02:bb:0a:31:e6:2a:d3:6a:
9d:2c:a0:29:e7:ad:8f:ed:7e:59:5b:7e:a1:af:05:
fa:99:90:5f:79:57:02:e9:1e:d3:30:99:f6:5f:de:
d0:97:5b:be:9c:24:27:51:d2:fb:9f:d7:51:f7:3c:
8a:ef:a2:a4:b6:5a:d9:ae:01:06:f5:36:1e:ca:ed:
75:8e:0b:6f:df:25:45:e6:2a:8c:73:56:b9:0b:b1:
c2:79:71:2d:6c:97:0b:4b:ca:a3:02:36:d9:de:5a:
75:90:6d:9e:db:07:14:4a:c1:20:9d:75:0c:07:ce:
a4:e7:d9:a3:36:ca:b8:9c:a7:36:a7:ab:a6:32:7d:
e7:07:29:b4:97:7e:34:39:1d:53:bd:f1:fa:93:8a:
87:71:27:96:28:a1:65:49:00:44:30:63:55:6a:38:
4b:86:71:69:e5:75:d0:85:15:11:b7:68:90:3a:f4:
40:c4:29:38:93:86:90:da:ed:17:65:8d:2c:8a:bf:
41:84:54:6d:10:29:a8:95:87:fc:0c:27:36:a6:87:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:39:1D:E9:BD:42:22:5A:C9:D6:CA:54:FA:65:47:A1:F1:9B:AC:90
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c8:a6:14:b7:9e:03:02:8b:f9:0f:ca:7a:bb:cb:77:73:10:
c9:94:76:4f:c6:bf:34:e2:aa:ff:0f:8f:f9:12:c2:e0:7a:ea:
e7:a3:89:a0:cb:29:a7:45:92:06:a7:02:df:59:f7:72:bf:56:
89:a1:0a:13:f0:0b:d9:a7:d3:42:e8:63:35:b2:de:5f:d8:9a:
90:45:72:20:be:40:ac:69:1d:c8:c6:1d:b4:21:4a:20:c1:27:
fa:6e:cc:04:a0:33:61:e8:de:68:d4:37:1a:71:61:6b:e5:f3:
21:33:36:e1:5d:e6:bc:88:af:96:77:fe:d2:e2:92:24:59:93:
31:ae:79:67:de:b4:ed:d4:18:84:e5:65:c8:b4:45:5b:8e:73:
24:48:8d:61:e5:0b:95:48:36:7e:64:8c:da:09:22:5d:2f:ce:
d7:d6:46:1e:81:39:08:7b:bf:56:ea:25:5a:b1:29:55:72:93:
ab:87:92:c5:d9:13:7e:66:df:48:6d:5c:b8:d0:19:1e:ef:0e:
e9:03:e0:a2:99:98:02:8e:64:73:ff:cf:72:fa:c2:09:3c:eb:
2d:90:55:af:2d:ca:89:be:7d:c7:31:08:5e:85:9a:d4:6b:76:
e9:1f:95:21:44:9e:cc:76:06:be:35:e9:2b:3f:de:29:21:f9:
77:38:4e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:21:48 2025 by rpki-client