Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
File: cOetBZggimr50VAKdA1zvPKPA4Q.mft (raw, json)
Hash identifier: +9LmBX73judCzBreHMYbGWUv51ktvp3D+IwrXLLqVD4=
Subject key identifier: A7:1E:DE:02:07:34:0A:C7:BC:57:72:BD:38:4D:03:B2:88:00:59:C4
Authority key identifier: 70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
Certificate issuer: /CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Certificate serial: 0194BD17F1FD812C9929452539A40FA7CC3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
Manifest number: 114E
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: HH4kNc1X7Vv3MoqhViTWK_E_VGI.roa (hash: O3Hf94Oha/v7Hh9wzuFaVr7kYXEFrWI2haBjKaDT/FA=)
2: QRWbN9gDLtiBKX0OHWitK4sar4Y.roa (hash: 9r207a3pRIUCl7V+9HyJcMsCjA45mcSFholzvZsRQ5g=)
3: cOetBZggimr50VAKdA1zvPKPA4Q.crl (hash: aHlMZPHW1MB2sFcQKahsVfMpzitjuHrbYgmFNyFCbB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f1:fd:81:2c:99:29:45:25:39:a4:0f:a7:cc:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e7ad0598208a6af9d1500a740d73bcf28f0384
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=a71ede0207340ac7bc5772bd384d03b2880059c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a9:d1:af:96:b6:3f:98:bb:98:ab:3d:44:1e:
a6:53:0a:bd:3e:de:91:6e:28:66:17:b1:d8:f0:44:
19:04:85:a0:e0:6f:2b:70:25:be:3f:16:42:c2:6a:
56:4f:e5:c8:fc:a8:4b:97:52:87:2c:9e:31:cc:85:
e1:2a:42:be:8a:a5:00:9c:0a:63:47:13:b0:a2:76:
f2:03:2c:c6:e1:d9:c6:1b:98:d0:28:31:08:d8:4e:
b7:b5:3d:6c:1d:4b:56:5b:66:fe:21:97:b2:45:b7:
88:fd:a0:f7:4c:93:6b:6a:0c:6c:bd:9d:d0:aa:62:
e4:53:37:6b:ef:6c:1d:97:32:80:87:7f:67:0c:ce:
14:98:28:00:ec:05:72:e0:98:91:b4:53:7a:b9:1f:
a5:19:af:32:9b:dd:4e:67:8a:aa:ba:ec:31:28:50:
77:78:f5:76:d1:76:ce:ec:3f:2f:e2:80:48:fa:a1:
34:b6:46:c3:89:eb:85:10:94:e7:e1:53:18:2b:2d:
cf:7e:d7:f2:57:f2:25:fd:fd:db:16:4e:a1:23:c1:
33:d1:b2:8e:e1:ac:af:ba:7b:5f:97:c5:ba:2f:a3:
64:6d:d8:23:3a:af:14:01:09:08:d2:a4:6f:23:13:
66:d1:4c:07:94:f7:30:83:a9:fe:2c:6f:92:f2:34:
69:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1E:DE:02:07:34:0A:C7:BC:57:72:BD:38:4D:03:B2:88:00:59:C4
X509v3 Authority Key Identifier:
keyid:70:E7:AD:05:98:20:8A:6A:F9:D1:50:0A:74:0D:73:BC:F2:8F:03:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOetBZggimr50VAKdA1zvPKPA4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/666404-c28f-4d29-96e4-607e17aec750/1/cOetBZggimr50VAKdA1zvPKPA4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1a:83:b3:7e:0e:7d:3b:a8:64:41:50:84:4b:82:1c:da:78:
e4:da:b0:e0:1c:cb:74:8d:e5:2b:fd:4e:15:d0:dc:c0:42:c7:
6f:4a:75:2e:c0:67:7a:ff:00:98:7a:e1:f6:0c:5c:2d:3a:15:
c4:46:ea:05:6c:ef:39:f8:f8:2d:8e:04:d0:9a:8b:62:4d:8b:
71:8f:16:95:86:50:de:00:c9:43:34:60:4b:ce:e4:21:b2:27:
88:93:45:db:17:4f:34:2c:56:af:01:9a:23:79:32:50:e1:67:
c7:e0:e3:6d:00:b4:9f:5d:9b:e6:de:47:71:4a:c2:b0:87:6d:
1a:bf:fc:e5:a0:f7:db:e4:19:ad:58:10:cf:7b:c6:01:d5:4c:
1b:0b:4b:0b:14:dd:64:65:98:e0:c2:4d:f1:db:f9:72:75:c0:
40:14:90:c7:08:08:28:0c:7a:33:9d:08:2b:9b:cc:4b:e1:a7:
46:03:37:4f:af:2f:aa:ca:0c:5a:9a:9d:4f:3d:d7:12:27:62:
5a:05:2d:30:ef:5e:dd:ad:08:b1:13:d6:a4:51:fb:5d:37:53:
fd:6f:4d:e0:25:05:1e:83:11:39:da:88:fd:1f:c8:3b:a1:6a:
a0:6f:0a:f6:a0:ce:f0:e7:bd:8c:03:ef:43:ad:4a:69:3d:eb:
fc:4e:01:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:42 2025 by rpki-client