Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
File: O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft (raw, json)
Hash identifier: AkdCXXl0zSRZJkjt8YqdzkAbZz20wto9E/2JTivmQHo=
Subject key identifier: 9D:3C:15:FF:D0:8D:AF:1E:C4:7D:53:D3:9C:9E:5E:A9:15:B2:FC:F0
Authority key identifier: 3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
Certificate issuer: /CN=3b80edd425050865eafba8089db9da3f3519b334
Certificate serial: 0194BD4E539E9507464026F49EC0304E199D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
Manifest number: 08BA
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl (hash: MiqA5DEBElKuqUHFVx8t5QlqO8lt0etWA6mgJqABpLk=)
2: iKF-Q9PfXOLXW4CJahZRW_VogkE.roa (hash: +qqtPKI3qMehNAw49JzdFyEOoExudNvSKeInlgLAy1I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:53:9e:95:07:46:40:26:f4:9e:c0:30:4e:19:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b80edd425050865eafba8089db9da3f3519b334
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=9d3c15ffd08daf1ec47d53d39c9e5ea915b2fcf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f0:8c:70:30:4b:c7:2f:bb:d5:67:87:1c:98:
cd:81:bf:6b:01:9c:bd:7a:e0:a0:99:84:54:81:e4:
78:3d:3d:81:10:99:1b:9f:59:f5:3b:f7:d7:05:7e:
e6:99:ed:48:67:39:e1:60:ee:c9:dd:ee:2a:c6:eb:
b3:c0:9f:6c:b6:1a:c6:96:16:91:cf:9f:76:73:ec:
dd:3b:0f:16:c6:f6:ed:39:be:c5:b8:3c:8f:ad:b3:
4c:11:7c:9f:2e:20:e0:74:2f:6b:71:23:9e:92:0e:
42:8c:da:de:dd:da:3c:4c:d6:f3:c6:cf:8d:1e:9d:
e3:01:c7:08:3f:51:bc:b7:f5:ce:74:60:70:e3:8a:
83:46:ce:70:0e:65:cf:b6:c4:95:02:e7:5b:12:78:
62:74:f5:c1:ec:96:98:14:f7:e4:77:84:0b:ab:77:
01:54:37:f0:3b:b1:0f:e8:63:f6:1a:71:7c:92:b6:
98:8d:35:e0:21:5d:14:2b:e8:e6:ec:f6:7f:14:10:
d4:59:50:4e:83:78:62:a0:30:d1:d5:3c:de:15:0c:
59:ee:62:3a:c3:21:1c:b0:bd:fa:2c:e4:fd:53:c4:
ef:96:94:a3:4a:08:6c:7a:ec:ed:9d:42:e9:6e:3f:
3d:55:46:8d:1f:ca:ff:fd:64:e9:b1:84:38:5b:58:
92:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:3C:15:FF:D0:8D:AF:1E:C4:7D:53:D3:9C:9E:5E:A9:15:B2:FC:F0
X509v3 Authority Key Identifier:
keyid:3B:80:ED:D4:25:05:08:65:EA:FB:A8:08:9D:B9:DA:3F:35:19:B3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4Dt1CUFCGXq-6gInbnaPzUZszQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7f13a9-7289-4e1e-bb43-c7161dc5c087/1/O4Dt1CUFCGXq-6gInbnaPzUZszQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bd:83:80:3f:c9:5e:87:6d:4b:bd:7f:f7:12:de:3d:ce:59:
54:80:b6:85:fb:a6:12:cc:2f:88:1d:d0:21:1b:7c:89:43:f4:
c2:37:2f:ff:2a:3c:d2:61:41:6a:6c:65:2e:62:e3:ba:e0:1c:
00:6e:09:ff:36:40:dd:3f:21:0f:29:9e:14:6c:c7:a6:8c:12:
75:57:5e:54:ef:d2:fb:5e:11:a3:35:0f:b2:db:7c:ed:19:7a:
7f:1e:74:7a:9e:91:ac:a8:b6:63:80:04:bd:67:7f:54:7f:c7:
4b:43:6e:57:0a:b0:50:8b:6f:ed:3b:ed:eb:5a:6a:ad:18:f6:
98:11:a3:83:79:f6:d6:c4:ed:77:66:a6:0c:74:76:de:83:10:
c7:1f:01:d1:6e:ae:0b:b4:80:c4:70:e6:2c:02:cb:c2:ca:bf:
02:ee:ff:01:47:02:1b:4e:97:6c:02:d5:dd:2c:a4:4d:30:a1:
db:f2:a0:0b:de:23:d0:f9:0d:bc:c7:06:83:8f:c8:7f:06:9f:
05:8f:4b:22:b4:89:d7:14:36:56:71:9e:0f:33:5c:cf:fc:db:
da:36:05:a7:92:25:54:93:91:1e:81:d4:82:b4:51:b3:59:ce:
ba:f6:19:18:ac:2f:36:a7:ff:38:b7:b8:10:07:15:f4:eb:2c:
34:51:d2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:26 2025 by rpki-client