Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
File: OUiGnOVLnTsvPjmu4snI6xnLWw8.mft (raw, json)
Hash identifier: oJtvebvmAkGyhZLzmuZmAZOA/C56MZHv7MDmXb1yeks=
Subject key identifier: 75:E2:76:3D:39:50:8C:88:5B:A2:5C:88:32:98:23:E8:B3:FA:DE:CB
Authority key identifier: 39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
Certificate issuer: /CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Certificate serial: 0194BC3BF33F7E2DD89BFED2C29409CD501C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: Jxs0meMKDCLBz_dVByd3J3wLTdc.roa (hash: ZCvr3TtSBPIKAQupwsVmwJ8f7SSejV5g4WH6kmkpM1s=)
2: OUiGnOVLnTsvPjmu4snI6xnLWw8.crl (hash: meQP2QkgL3LdLcM3eXFX0pGEDvOdbSd/I6CMJQWgRoI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f3:3f:7e:2d:d8:9b:fe:d2:c2:94:09:cd:50:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3948869ce54b9d3b2f3e39aee2c9c8eb19cb5b0f
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=75e2763d39508c885ba25c88329823e8b3fadecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:18:e1:07:aa:b8:13:28:68:cc:c2:b5:c5:96:
37:31:02:2f:19:91:f6:93:7c:c9:56:af:4f:9a:a1:
e7:f8:54:f5:a1:d3:43:6e:14:87:98:86:5d:90:2b:
0b:69:15:c2:56:9d:f7:99:fd:57:c8:f3:01:98:93:
20:a5:84:7d:c0:fb:de:5a:3f:4a:4f:9a:08:9c:77:
a2:ec:e3:d4:5b:61:6f:b1:af:42:3b:4d:bf:e0:0a:
1c:14:7b:c4:64:bd:94:61:2a:cd:f8:2d:bf:7d:f4:
c4:4a:7c:8c:be:fa:4d:ff:5d:67:8a:99:1a:9a:71:
aa:a7:23:b9:8f:3b:be:ce:a7:97:8e:bf:ba:17:8e:
8f:ec:41:1e:b0:8a:80:70:be:4a:5d:06:5f:b9:e8:
e9:6d:e2:67:6c:8e:5a:9d:4c:9b:1a:ad:83:ce:3c:
5c:02:f6:7d:e1:d2:12:af:ee:75:b1:10:f4:10:bb:
e9:db:e1:8d:42:55:0d:13:eb:73:bf:52:2a:e4:92:
8a:89:f0:ed:3c:dc:74:9e:62:0d:94:12:e2:47:ab:
ff:d5:3e:93:f8:5c:62:5b:2f:b1:2b:1d:d8:7c:41:
53:bb:df:e7:23:a8:bd:c2:5c:e2:62:f8:de:62:d8:
f9:90:13:3a:fd:ac:cd:aa:5d:87:44:be:22:48:91:
38:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E2:76:3D:39:50:8C:88:5B:A2:5C:88:32:98:23:E8:B3:FA:DE:CB
X509v3 Authority Key Identifier:
keyid:39:48:86:9C:E5:4B:9D:3B:2F:3E:39:AE:E2:C9:C8:EB:19:CB:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUiGnOVLnTsvPjmu4snI6xnLWw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dd0189-7969-4fd5-9747-28bdabca70cb/1/OUiGnOVLnTsvPjmu4snI6xnLWw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f9:85:55:7d:73:e0:71:8c:92:16:2e:95:47:49:5c:1b:81:
e2:06:02:45:7f:10:fe:2b:36:64:42:33:b4:a1:c8:e5:03:a8:
3c:aa:40:76:a4:54:0a:b5:89:36:67:0d:37:59:b5:e4:fb:70:
7c:66:32:67:11:fc:99:cd:af:dc:f1:3e:04:99:7a:a9:7e:a2:
e0:ec:8f:ca:b7:d0:ee:5c:9f:e0:26:3d:77:dd:74:de:3e:65:
ff:fc:89:4a:4e:3e:dd:be:67:bb:c3:ae:f0:bd:14:98:6c:e0:
dd:c5:26:db:57:c0:41:29:96:6d:82:91:ba:ca:77:80:2b:8c:
90:12:b8:05:ed:6a:f1:a1:2c:eb:ff:c5:d9:f6:f3:1c:28:8b:
3f:a2:57:12:f2:89:5e:4f:e5:04:08:a7:b7:64:09:81:b0:63:
71:88:a1:3d:b1:66:7e:e3:75:cb:5b:59:fe:13:df:e9:96:b6:
de:e3:1d:50:d5:44:5d:02:55:2f:8f:47:b1:48:f7:ab:cf:e5:
5e:9c:42:40:5e:26:a4:dc:22:3e:7f:a8:53:9a:51:7f:dd:5b:
5d:b9:e6:e5:6f:59:cd:4b:02:78:03:65:34:06:3d:8f:43:73:
99:e8:b1:5e:43:3b:76:22:5e:00:a8:8e:a8:dd:34:a6:be:ad:
77:e7:c0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:29 2025 by rpki-client