Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
File: os1DAbKJXx2YqFDlic58BjxTn00.mft (raw, json)
Hash identifier: DzKZDRS2BelhRa8rp2KpyQ/XQZFjlJ/QLdD8ap/f+Po=
Subject key identifier: 6F:4B:0F:A6:A6:3A:D7:05:87:2C:B8:4C:E8:CB:C3:61:49:E5:C2:8C
Authority key identifier: A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
Certificate issuer: /CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Certificate serial: 0194BC050BA934A430F52CBF1F6E6F22BFB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
Manifest number: 0F8F
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: KAKz0xo2XXEBIDI7U4s2tUakP98.roa (hash: nzwZHLIuL4E1A+Jcxn7qeWA8mqGxoFVori2v9JbkLPE=)
2: os1DAbKJXx2YqFDlic58BjxTn00.crl (hash: bbyRBrSsbZ9az0LiBaS5Xq1yxpC5gQo3WPfTV60zfU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0b:a9:34:a4:30:f5:2c:bf:1f:6e:6f:22:bf:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd4301b2895f1d98a850e589ce7c063c539f4d
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=6f4b0fa6a63ad705872cb84ce8cbc36149e5c28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:2a:33:b7:30:c0:f4:dc:3a:99:e9:61:e9:
42:db:67:97:48:06:45:69:68:d6:9a:1b:74:7f:86:
33:34:0c:b2:42:d0:2e:95:bc:3b:27:b3:93:bc:84:
cf:b1:61:cb:35:79:5f:dc:16:03:7e:57:3d:76:ba:
33:6e:f0:ae:ce:27:2e:d8:c4:70:e5:0b:10:f1:9d:
c6:56:1f:68:e5:ed:bd:76:2d:b2:0d:15:52:0b:56:
fc:86:f7:a1:82:ac:7a:96:a5:9d:32:f9:08:de:41:
71:29:74:f7:0d:3e:bc:f5:f5:50:7f:f2:f0:e5:57:
cd:1e:06:92:e6:19:5d:85:21:c5:d9:23:19:9f:67:
f7:9a:f9:91:20:5f:83:af:04:d3:dd:cd:23:28:de:
8f:9e:69:da:e6:b0:a6:71:8c:f0:05:82:db:64:db:
53:aa:74:83:43:52:d6:7b:40:58:69:b6:54:e6:07:
89:a8:b5:95:7c:1f:1b:69:0f:34:9a:58:df:a0:ea:
9e:b0:80:87:f8:f2:ce:04:bb:24:3d:c2:aa:4d:eb:
f3:2a:15:0d:43:6c:5a:20:89:7f:2f:a1:67:89:40:
3e:65:1c:11:f3:53:88:25:ac:39:c6:ea:d1:89:ed:
02:8a:d1:a7:f5:c4:3a:bd:87:8a:64:ac:60:3f:a4:
53:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4B:0F:A6:A6:3A:D7:05:87:2C:B8:4C:E8:CB:C3:61:49:E5:C2:8C
X509v3 Authority Key Identifier:
keyid:A2:CD:43:01:B2:89:5F:1D:98:A8:50:E5:89:CE:7C:06:3C:53:9F:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os1DAbKJXx2YqFDlic58BjxTn00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/38486c-9de3-44ef-ab29-58f3f37ccdd9/1/os1DAbKJXx2YqFDlic58BjxTn00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a9:27:ec:56:f5:7d:b6:d4:f4:4b:c6:59:7a:d1:b2:1e:ee:
73:66:95:3e:a5:1d:46:65:e9:45:7c:bf:b3:5e:3e:9b:5b:ac:
d2:61:91:54:4d:33:fa:3c:c1:f7:e9:c1:88:19:b6:b1:16:ac:
5a:7c:9d:6e:37:94:b5:52:e0:27:08:d3:38:65:ee:5f:87:df:
2e:b5:7c:45:fa:51:06:de:05:a4:24:3e:ea:20:94:54:f2:e0:
47:51:ea:f7:90:8b:b7:d7:72:fa:d2:1e:7e:74:44:63:dc:72:
c0:1b:75:f9:ae:85:6b:5e:a4:64:63:01:7a:2c:de:d9:7c:3f:
bd:3e:49:4c:9f:b3:7a:74:b5:d4:8e:35:c7:de:6f:ad:6c:6a:
02:5d:72:95:4d:ae:13:9c:17:03:61:38:06:64:7c:32:4e:e8:
74:43:35:fd:b7:bb:12:34:20:9a:c5:ef:85:68:14:bf:4d:33:
54:18:3c:89:c3:63:79:0d:aa:3e:11:eb:42:ed:49:97:a7:b6:
76:cd:af:d5:b3:9b:9f:9d:7e:cc:19:da:84:4e:af:bb:14:06:
ad:e3:1c:60:3d:2e:67:27:ed:03:dd:c3:d9:75:5f:bc:d6:d6:
5a:ec:fc:6e:65:ed:6d:95:33:49:e2:85:16:66:cc:a8:ff:6b:
ed:f4:bb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:18 2025 by rpki-client