Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
File: _otJRFUnf_UwAlzvLVHffquORRA.mft (raw, json)
Hash identifier: MyS1eaLGXeU4+qmbSVQcAgRfCDDiherWX+6Xrt0+5Nc=
Subject key identifier: 68:01:FF:AF:B5:3D:20:9B:B0:AB:86:14:6E:2D:1F:BA:F5:8D:CA:AB
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Certificate issuer: /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial: 0194BC051D34D9FF57F42BD2B3744DC19F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
Manifest number: 0811
Signing time: Fri 31 Jan 2025 11:00:39 +0000
Manifest this update: Fri 31 Jan 2025 11:00:39 +0000
Manifest next update: Sat 01 Feb 2025 11:00:39 +0000
Files and hashes: 1: Oc5Exwy6ZGrRe3cJEpFcoAoZ8LY.roa (hash: GCIh2gF/E3yjQMebTbwaKQU3aGp4E0TQ+qUjMjQObt4=)
2: _otJRFUnf_UwAlzvLVHffquORRA.crl (hash: J1pbtdv4SN055dsjKx5+dTDN5TcY19MYSykeyszRi+o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1d:34:d9:ff:57:f4:2b:d2:b3:74:4d:c1:9f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
Validity
Not Before: Jan 31 11:00:39 2025 GMT
Not After : Feb 1 11:00:39 2025 GMT
Subject: CN=6801ffafb53d209bb0ab86146e2d1fbaf58dcaab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:76:cd:fd:e4:41:b9:fb:6f:50:21:a5:f9:ef:
60:97:d7:be:61:fe:cf:2c:30:19:b0:95:19:d0:1b:
a9:89:6d:3e:1a:5e:82:78:46:09:66:19:47:61:ba:
11:66:b1:e4:be:8e:6e:0c:07:97:b2:23:9d:0d:16:
f6:e9:c4:e6:c1:d1:f2:a1:45:de:5a:86:00:8b:85:
e3:e8:65:7d:80:aa:ad:8e:a4:65:0f:15:f5:82:40:
28:b0:6d:86:40:e4:33:42:8b:c7:79:15:52:95:af:
fa:dd:ad:f2:b8:96:61:0a:e7:bd:df:fc:aa:90:8d:
eb:05:c6:f4:c4:7c:57:75:e0:29:28:21:1c:cb:f4:
8a:72:dc:5c:45:da:23:87:aa:b9:eb:42:4a:db:38:
0d:b6:82:32:ef:89:61:a4:3c:89:2c:64:b1:4b:5a:
8a:17:56:4d:66:59:c4:1f:20:2d:47:5f:39:84:25:
29:1d:a9:f9:a5:32:27:30:34:9d:1c:8d:e7:30:89:
76:f4:d2:fb:6f:c3:4b:e1:c4:58:ea:7a:4d:ad:27:
03:7c:99:80:b9:c8:bd:dd:ce:2f:92:bc:63:ad:af:
0a:f1:b4:d3:3a:8d:9d:68:d9:f7:de:8e:74:d0:50:
ea:d1:2a:7f:1d:43:ee:53:f3:b3:d1:64:40:18:a2:
22:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:01:FF:AF:B5:3D:20:9B:B0:AB:86:14:6E:2D:1F:BA:F5:8D:CA:AB
X509v3 Authority Key Identifier:
keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b0:06:c2:b9:95:4f:f5:e1:a3:4b:57:13:63:b2:d0:b8:ac:
93:20:00:26:83:34:9d:89:ce:e5:1e:c5:6d:2e:3b:e6:66:fe:
32:7f:17:c2:c0:e4:3f:37:72:9c:7f:ef:01:31:98:1a:62:28:
7a:ea:6f:89:00:2c:d6:f8:61:1c:9e:8e:c4:f3:03:85:f0:36:
1b:1e:21:0f:bb:78:4c:8a:f7:c0:c1:1d:48:25:4c:2f:e1:04:
bd:fc:cd:e5:ca:bc:f4:1d:c3:74:f7:53:a6:86:dc:50:84:29:
a8:3f:0f:3e:3d:af:69:98:29:5a:09:22:36:86:70:b5:1f:c7:
b0:75:1a:55:37:89:5b:3f:0d:58:50:0a:36:59:a3:d3:b2:60:
b7:ba:4b:90:ef:6f:af:f0:02:fd:ec:13:0f:e5:bd:24:66:19:
7b:11:45:a3:8a:ae:a0:ac:3b:be:0c:58:52:64:91:64:c7:9b:
d0:e0:f9:c9:83:4e:2f:fe:a3:90:ac:3f:41:22:cd:0a:e0:65:
cb:e5:7f:38:b3:49:0b:82:74:bf:5a:02:e6:d1:5f:0a:f3:cd:
d2:90:d5:c1:98:cf:47:bc:d6:25:ca:1c:8c:b0:8b:af:cd:2b:
5e:61:ca:24:40:78:a8:a4:4d:e5:8b:e2:6f:8c:ac:66:61:da:
20:60:88:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:18 2025 by rpki-client