Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
File: Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft (raw, json)
Hash identifier: NV05i+9ZpeaTlrrvN2f7SFoWXiHykD2r7DEqcbIcJbQ=
Subject key identifier: 7D:08:13:0B:78:F6:30:67:2E:1C:46:1D:74:2F:4A:FE:24:BA:2C:0E
Authority key identifier: 3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
Certificate issuer: /CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Certificate serial: 0194BC7306A0C61349D2DC1FBEFBAE0B5D72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
Manifest number: 0258
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl (hash: VnYR9Dvp/NJHCXa3Xi8p6FJWXD6jdrwYOQXL1C4cHGc=)
2: cYvxi7xV5fqCitPQ_WwQHBPwDXE.roa (hash: Gq0wR4j7Ol8IdxTrvJ6E6hDp/JbrTAcp5TRysGKEzyk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:06:a0:c6:13:49:d2:dc:1f:be:fb:ae:0b:5d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b389f9b567e745c9521bb1c1541a3459ae0e8a5
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=7d08130b78f630672e1c461d742f4afe24ba2c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:5c:d1:8a:e0:d8:92:9e:c6:5a:7e:06:7c:
19:48:4d:ce:8f:a0:51:8b:f2:7a:c8:16:5a:c8:59:
72:00:14:af:d8:a5:9e:c9:d8:1b:6d:b0:49:5e:d9:
f1:e6:89:d2:af:19:bd:0a:73:4f:85:c2:a3:5b:d0:
cb:3d:6a:9e:ad:94:56:b6:46:1f:ae:4f:b4:fd:79:
60:ea:a6:74:e5:53:31:46:6a:e8:98:f4:ab:97:cf:
b3:f8:b3:d8:c9:25:fe:d1:17:4f:26:0b:2c:b6:96:
b8:8e:e1:fa:07:b9:ff:62:dc:20:dd:91:02:5e:e2:
75:f0:23:1d:ab:2f:07:54:7c:09:84:4e:08:82:62:
86:95:cd:f3:18:10:c1:6d:2e:f5:2c:96:d7:d5:1e:
91:ce:8d:38:80:a6:db:20:1c:53:58:3c:6d:80:1d:
76:cd:f1:99:f5:bf:ec:32:e9:94:76:c7:36:2f:b3:
0f:40:72:b7:8c:32:dd:a5:7f:81:e2:96:cd:46:b8:
09:73:87:ed:4f:d2:ba:b3:49:2a:6a:00:13:b1:72:
34:98:da:91:d6:80:2a:59:62:f9:3f:20:c5:3c:58:
62:b9:3c:16:cb:62:44:ab:89:4b:95:97:f0:a0:8b:
6e:48:ac:a1:6a:94:5b:6b:29:61:65:03:8e:a1:ac:
da:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:08:13:0B:78:F6:30:67:2E:1C:46:1D:74:2F:4A:FE:24:BA:2C:0E
X509v3 Authority Key Identifier:
keyid:3B:38:9F:9B:56:7E:74:5C:95:21:BB:1C:15:41:A3:45:9A:E0:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ozifm1Z-dFyVIbscFUGjRZrg6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5e118e-110a-4ebb-847c-bf351c0f0ebc/1/Ozifm1Z-dFyVIbscFUGjRZrg6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:8e:25:d7:1c:56:81:a0:98:27:52:4d:ae:c3:1f:a7:a0:05:
14:2d:64:bb:c8:a3:e1:20:87:93:e4:75:2a:1d:ed:92:b4:2e:
3e:c5:90:8c:11:da:52:2a:55:0d:59:35:c8:68:60:3d:6a:7b:
85:ce:89:25:3d:04:20:f9:af:ee:f9:65:8d:cb:46:f8:f2:1d:
81:5a:c9:ea:4e:0e:87:e8:e1:aa:b4:00:f3:f7:69:21:4f:d6:
f0:97:7c:c8:35:e9:17:16:b2:26:08:36:85:4d:16:cc:7b:ef:
07:75:55:e9:fb:b0:68:49:d2:cd:3e:05:7f:7b:5c:70:bf:ec:
ff:75:9b:15:89:93:a6:1c:8f:1c:34:60:6c:02:08:dc:a6:fb:
f9:45:90:89:00:8f:eb:04:da:fd:7a:73:15:5f:08:d0:f4:8f:
a0:b3:98:af:b5:22:af:5a:87:42:32:d4:dd:96:40:4e:bf:12:
fc:90:a9:27:9c:1d:71:d3:f9:69:20:45:f9:af:50:d2:1b:18:
d5:19:fa:a2:08:2d:d5:cd:63:b8:0f:4a:39:61:f7:5b:f6:ae:
72:d2:3d:7c:72:b9:b6:cd:80:0f:2f:22:c8:a7:72:ec:8d:c0:
af:72:8a:26:1a:d6:09:67:f4:6a:2c:a9:a4:db:b6:df:c1:e4:
65:45:ed:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:45 2025 by rpki-client