Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
File: OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft (raw, json)
Hash identifier: +EPTiHS/IHbAfOuGDMdqPOlY4A4UUNke4qfFt7kUNuE=
Subject key identifier: 20:7B:7F:55:AD:92:AF:25:16:30:DA:74:60:73:EA:A3:25:8C:C2:88
Authority key identifier: 39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
Certificate issuer: /CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Certificate serial: 0194BCE05FFF1B48F607E0CCC18ECF30A75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
Manifest number: 0BAD
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl (hash: WtX8bF168uY4Tz7iFOxoXaoju8S3rnHEzo0kOd3+d9Y=)
2: m3UPJQ_Zh7wapyw5537rzzPo3os.roa (hash: EUy+4/7WXUAZtQJhe/6fh4vD4Ks9aUtYKkwAIbRuQrA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5f:ff:1b:48:f6:07:e0:cc:c1:8e:cf:30:a7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399dc13619aaba7f222ceacb05f1bbac59bd3a9a
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=207b7f55ad92af251630da746073eaa3258cc288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:f9:87:27:ac:94:3a:5c:d3:7b:e4:ad:80:
33:dc:c2:17:e6:c6:24:28:05:0c:ca:58:9b:56:c5:
b3:e0:fe:cb:aa:f3:f3:c0:1c:04:26:98:ee:a1:6f:
ab:08:e5:04:02:bd:1b:8b:18:0b:14:b1:70:1e:65:
16:cc:44:81:77:13:a3:98:cd:da:79:38:a6:70:78:
8d:c0:cc:fe:c7:21:9f:41:53:90:46:ed:5d:93:5d:
3e:7f:6e:3e:78:c5:91:74:e3:5a:1b:07:3e:25:88:
df:3f:ae:bf:65:3f:93:20:c0:1a:1e:e1:54:31:97:
8e:44:a6:ca:3f:77:9b:41:e5:c6:cf:0f:d6:2c:b5:
75:6a:6e:c1:fe:f6:98:e9:09:4f:d1:11:5a:11:79:
83:ab:a7:31:65:16:96:af:60:80:b7:e5:c4:e7:53:
32:0f:2d:21:00:10:cd:b9:59:20:db:a4:13:c3:46:
f9:b6:10:b2:ab:90:60:21:08:bf:3a:5b:c1:38:02:
11:c1:00:b9:99:e0:20:7c:b4:a3:49:46:4c:da:58:
a0:d1:4f:f3:75:2f:b8:a9:47:57:e1:f7:5e:b9:96:
ba:3a:bd:8d:68:90:02:32:78:ae:28:c1:cc:ad:3f:
c3:3a:74:0d:b2:2c:52:ff:92:b6:2d:51:a6:0a:4b:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7B:7F:55:AD:92:AF:25:16:30:DA:74:60:73:EA:A3:25:8C:C2:88
X509v3 Authority Key Identifier:
keyid:39:9D:C1:36:19:AA:BA:7F:22:2C:EA:CB:05:F1:BB:AC:59:BD:3A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ3BNhmqun8iLOrLBfG7rFm9Opo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/efa225-16dc-4f43-aae9-0032fdc5450b/1/OZ3BNhmqun8iLOrLBfG7rFm9Opo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:76:df:f6:0a:c2:40:c6:8e:2c:e7:20:56:0b:2e:32:4f:dc:
af:c5:fc:15:41:ca:71:62:04:86:ce:9c:9f:3f:06:a5:0b:fd:
13:5b:36:46:cb:98:50:07:29:70:2f:ee:b5:82:4d:b1:98:6f:
ef:9f:d1:5c:be:e0:fa:3e:b4:e2:53:4f:11:cf:30:7d:4a:17:
bd:f2:55:ab:98:de:26:0f:cc:2d:b9:2f:36:f4:7f:4f:8c:b5:
76:25:e7:f4:d9:6d:1c:6f:9e:12:40:90:d7:ea:7d:e8:f9:61:
eb:3c:19:a5:58:f8:40:0f:bd:f9:70:6e:a3:42:d8:d4:45:ce:
93:f5:c1:56:52:d2:ae:5f:12:ce:dc:56:52:c7:e8:4d:1b:e3:
6a:c7:95:30:42:a7:b1:28:73:17:e1:50:02:b9:40:90:f5:df:
c0:47:d5:d5:a8:17:7c:11:16:c0:42:4e:d0:d1:e2:56:90:e0:
ef:1e:82:49:0c:35:37:89:cc:14:02:58:c7:7b:93:35:0c:01:
0e:78:81:be:10:c3:69:2b:cb:04:ec:1d:b5:ff:3b:6f:fc:11:
97:e1:df:50:d1:b5:66:63:d8:c6:de:44:b9:d0:1b:06:f8:b6:
f0:f4:8d:d4:ee:d0:ab:7b:8f:22:11:8e:c9:bd:e7:a7:09:0a:
1c:ce:4a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:50:57 2025 by rpki-client