Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
File: OTdAGaVNS94j8NooolIVDVy0c60.mft (raw, json)
Hash identifier: otUMLdOSLm/crS6eFnE8QCiVNMcEeOFismK/DJ2ysKE=
Subject key identifier: D0:FF:4C:BB:46:34:F5:EC:13:7A:67:9E:77:C8:31:97:48:35:64:BE
Authority key identifier: 39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
Certificate issuer: /CN=39374019a54d4bde23f0da28a252150d5cb473ad
Certificate serial: 0194BCE0EA08D35B760AAF3F54337DEFCFFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
Manifest number: 0CCF
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: OTdAGaVNS94j8NooolIVDVy0c60.crl (hash: R6zU05J3FtzK5rwuQbR65SplEW5yYo6SWw7CmPO8gWI=)
2: ma10kWI1PiUmBnjZZdsu20JVWcE.roa (hash: jNRh+1s+kkx04U4sH3v3rSIpTBgL5T0X08vSRFsU6Qk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ea:08:d3:5b:76:0a:af:3f:54:33:7d:ef:cf:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39374019a54d4bde23f0da28a252150d5cb473ad
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=d0ff4cbb4634f5ec137a679e77c83197483564be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:38:8d:8b:3e:67:bf:78:a7:7c:22:6b:95:
53:23:90:fb:c5:6c:7e:cc:13:36:74:39:47:0f:ce:
05:1d:3c:26:38:09:d6:6e:a2:74:9d:c1:73:d6:e4:
63:96:31:90:e2:3d:53:21:04:c1:9b:f9:b0:35:41:
04:95:54:28:cb:a7:e8:93:e7:39:5a:8b:a9:77:58:
fc:4b:95:b2:22:55:6a:02:bd:b7:c3:23:af:14:9b:
1d:94:67:49:64:28:ec:c3:55:10:3c:86:54:78:92:
53:72:b9:28:d2:1f:ca:bd:2a:a1:01:2e:31:55:d8:
ab:db:08:ab:5b:ef:4d:df:e3:79:91:2c:2e:eb:0a:
24:b4:65:a4:79:e9:7b:76:a7:89:2d:f7:93:f0:e4:
f1:56:bd:f6:5e:26:a5:ed:e6:39:96:c6:5a:3c:83:
39:17:2f:88:76:19:34:ef:da:73:e4:a0:b8:d2:71:
3f:50:eb:47:ef:c2:01:ee:28:2e:4f:b8:bf:7c:04:
2e:3d:87:99:b7:17:df:58:2f:d5:ab:fd:ac:0d:21:
18:68:cb:df:f8:c6:81:19:26:4c:b4:23:63:90:5e:
36:fb:0f:7e:32:7b:20:5a:f3:8f:f4:06:7b:4a:de:
da:73:f2:d7:d3:ed:d2:3d:94:2f:80:1f:45:5b:17:
80:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FF:4C:BB:46:34:F5:EC:13:7A:67:9E:77:C8:31:97:48:35:64:BE
X509v3 Authority Key Identifier:
keyid:39:37:40:19:A5:4D:4B:DE:23:F0:DA:28:A2:52:15:0D:5C:B4:73:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTdAGaVNS94j8NooolIVDVy0c60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/505755-c4ab-4905-8b48-bbd1ad53da43/1/OTdAGaVNS94j8NooolIVDVy0c60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:cc:cf:59:e0:d7:54:53:32:4f:e1:35:dc:87:60:9c:88:a6:
ea:95:aa:4c:c3:08:11:38:60:8f:f4:4e:4f:f4:52:ef:2a:e3:
d9:0d:65:1b:9f:18:ec:15:92:67:8d:62:2e:48:f5:26:aa:32:
9a:af:78:54:a7:1b:27:67:3a:7c:ac:89:0c:ce:da:0e:cb:94:
0d:5d:c7:83:05:bd:c8:50:07:6b:57:12:13:78:2c:05:52:f3:
a9:19:9f:19:bf:ee:b2:dd:d7:22:40:14:fb:41:dc:51:e0:52:
c8:ca:e3:30:1c:bc:99:4c:ae:23:55:16:4a:e2:1e:01:7f:75:
d8:45:6e:78:bd:0b:cc:e8:2c:50:c1:fb:8c:2e:be:16:71:5d:
de:a2:30:a2:dc:3b:b5:c8:eb:a8:ce:e2:87:f6:8d:78:95:f6:
fb:30:a6:75:f3:88:bc:a2:2d:87:e6:94:88:c9:e0:20:a1:32:
ad:25:4a:5e:68:3d:e5:a5:c7:70:d7:4b:21:00:79:88:ac:0a:
00:75:9a:4f:ad:49:78:68:9d:11:39:fd:73:76:59:5c:ad:d5:
57:31:52:ad:c2:4b:ab:3c:cd:a5:fd:38:17:71:30:a1:0e:f0:
b0:36:7d:bf:7b:c5:9e:9e:51:d5:b1:55:60:af:a7:18:3a:d8:
bf:45:94:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:24:53 2025 by rpki-client