Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
File: O5olHl0dO6vkxXnJHrPgrDf3vyo.mft (raw, json)
Hash identifier: 1GvkpHgfk20ROslGhCce6rXZGei44nOG2Fqv81WzGsw=
Subject key identifier: 75:AB:CA:38:0B:1D:30:53:59:98:C8:4B:35:98:C8:2F:7A:3E:64:4C
Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Certificate serial: 0194BD856A390F0921D21A91181B13303298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
Manifest number: 09B7
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: AwwB5IzEiG1Llx5yPnasYM8MO2Y.roa (hash: 7G8UolHLHJ6PE/s9cw2uAH1EfqGha5+Hkph4tWqL8U4=)
2: C1az3rJwjcR-YTlJxXpC5icVqE4.roa (hash: PI5Gh4dLNT0MSthDWw2SO00ZqeW1Mb5HaAinAwH/Ka4=)
3: O5olHl0dO6vkxXnJHrPgrDf3vyo.crl (hash: GH+VIXzqMzMpU7U0exdzmVaKtMYKplrH6GKrC319/nc=)
4: uSGhwqa1EaWC0O0u-4TI5idqWHY.roa (hash: T46XwP8D/bRE5BaimIUEAgaKKz/Apcp0pmUzAH68V3Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6a:39:0f:09:21:d2:1a:91:18:1b:13:30:32:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=75abca380b1d30535998c84b3598c82f7a3e644c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a9:fa:cf:f2:6d:87:62:cc:d9:ef:28:e2:93:
21:93:53:f5:9e:81:97:2c:0c:a0:02:9c:1f:20:fc:
3e:76:be:32:15:2d:d1:f3:37:b3:e9:d8:95:5d:b6:
30:66:73:9a:00:bf:60:da:4d:c3:af:c2:ad:82:f5:
58:2f:ff:4b:02:df:95:76:02:54:e1:13:78:1a:41:
31:f8:69:aa:f0:88:3b:8e:4b:24:7c:9c:87:de:cd:
78:c6:e7:78:e2:4d:05:66:4e:27:39:e0:b4:92:da:
91:2f:74:26:3c:54:fb:24:38:b4:e9:db:21:96:c6:
6a:3f:ba:c2:88:01:35:73:d9:4a:46:29:22:12:05:
9a:fd:be:4e:29:f4:74:91:b1:c2:f3:f7:27:1e:32:
37:76:11:f6:05:f7:87:13:c6:e8:fb:c4:94:b9:23:
53:1b:30:92:10:4c:0e:61:46:00:02:43:ef:14:34:
02:fa:37:62:1f:8e:d0:af:19:98:c9:e4:d4:42:ef:
f5:fd:88:a5:54:82:ac:1c:fc:4b:13:e6:77:f9:f5:
c6:1e:25:94:96:a0:42:cf:aa:e6:42:e9:7e:37:f9:
bd:93:2d:af:9c:97:8d:27:2e:0f:cd:dd:45:e7:ff:
fe:01:7c:15:c0:3c:19:4a:4c:51:cd:95:6b:1f:25:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:AB:CA:38:0B:1D:30:53:59:98:C8:4B:35:98:C8:2F:7A:3E:64:4C
X509v3 Authority Key Identifier:
keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a7:32:f3:2e:c9:42:c9:4f:24:42:82:a2:30:65:6e:af:b2:
6b:04:30:3e:bf:28:d2:6c:db:07:d8:e7:da:33:1e:84:1f:a0:
25:04:c0:1c:04:a4:b7:ee:46:ee:88:a0:bf:1d:c2:f5:af:b7:
bd:bb:47:de:86:f5:09:3c:2b:2e:14:a3:77:0b:fa:e3:50:e1:
ca:42:4f:21:1b:d7:34:45:6e:57:f7:e4:e2:11:b1:4b:16:e8:
f0:ba:a5:37:0c:59:d7:10:20:39:2e:72:7f:ec:6e:1f:42:bd:
f2:f3:61:ef:a6:c4:6d:a2:cb:e5:92:ef:ae:79:ca:1f:72:03:
c7:78:5b:06:57:5d:68:4e:ec:5a:11:7e:f1:6c:e8:69:c3:d0:
fc:d5:2f:ca:4a:84:4a:f8:37:c5:00:43:f8:c8:ab:f7:61:a5:
b3:02:e4:13:09:9b:bd:04:28:56:26:34:19:27:9e:6e:cc:bd:
ec:e4:ac:28:cd:c2:92:0a:42:2d:91:7d:8b:07:b6:c7:43:de:
a9:bc:71:0d:06:87:aa:a0:e7:c8:66:83:f5:43:c8:ee:1e:77:
5e:db:cb:b0:7d:a6:b0:08:96:7c:fd:be:61:55:e4:11:9c:a3:
33:69:87:5e:bd:30:ed:f8:27:62:70:10:12:dd:45:7f:4c:6c:
b9:b2:74:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:36 2025 by rpki-client