Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
File: OEgrEyC5gPRtbkBP59WL2xHVD9M.mft (raw, json)
Hash identifier: K0ayC/RcYHFbPpcg9/9uC79lATQU2ZcC/bjtaaOb5KU=
Subject key identifier: 35:55:07:A9:C9:FD:78:7B:78:DD:1D:69:D2:CA:9F:38:1F:3C:F6:8F
Authority key identifier: 38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
Certificate issuer: /CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Certificate serial: 0194BCA9E4EB30F8914EEA606F87DA5FCCFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: 5ePvcq9zuyiP8F0_1MZ5SKg1RU4.roa (hash: x2xCVfg3u5h3OuMzgVAwJ2hD3aJVygyj1psk9B6lRgM=)
2: OEgrEyC5gPRtbkBP59WL2xHVD9M.crl (hash: +e2zv1pEvq03E5V0ylZ7Jm0RyKFs7KOymZoZ7wl9sV8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e4:eb:30:f8:91:4e:ea:60:6f:87:da:5f:cc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38482b1320b980f46d6e404fe7d58bdb11d50fd3
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=355507a9c9fd787b78dd1d69d2ca9f381f3cf68f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:80:55:7e:bd:3e:3d:87:b4:fd:34:2f:93:b6:
5a:16:20:3b:0b:b1:33:60:fd:87:be:7d:96:41:57:
9c:b1:cc:36:2e:34:11:53:46:f9:f1:81:63:c9:8b:
d6:c7:4e:a4:5a:af:4d:ad:d2:29:7a:1f:d3:c6:f8:
df:b4:db:fa:1b:20:79:16:df:27:e5:b1:d6:30:73:
93:bb:13:1f:bb:d1:b2:c1:5f:57:d4:cc:35:20:46:
cd:05:fe:37:ee:58:e2:83:95:8e:fb:8f:2a:64:1b:
81:90:2c:a7:4c:88:26:35:3f:06:b9:29:5d:a5:09:
11:17:eb:29:a1:67:19:e1:6a:b7:c0:39:33:0a:c8:
1e:61:59:cd:f1:5a:5e:b1:81:8a:46:ac:60:2b:15:
16:eb:ca:e2:87:51:dc:f6:aa:6e:47:53:46:19:b2:
03:87:90:14:3f:86:b7:e9:44:d1:51:c3:8a:fe:c8:
7c:73:f5:83:54:c9:fc:1a:b1:d3:45:b8:60:10:55:
80:2e:ec:be:d5:a6:df:48:5a:bd:55:94:d2:ed:18:
b7:10:70:fa:40:62:49:d2:a9:b8:34:bb:bf:a6:5c:
2d:65:db:28:02:93:ed:46:e3:76:b0:61:75:dc:c4:
11:20:a1:02:e5:95:73:10:68:2c:d9:7f:91:ef:fd:
5d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:55:07:A9:C9:FD:78:7B:78:DD:1D:69:D2:CA:9F:38:1F:3C:F6:8F
X509v3 Authority Key Identifier:
keyid:38:48:2B:13:20:B9:80:F4:6D:6E:40:4F:E7:D5:8B:DB:11:D5:0F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEgrEyC5gPRtbkBP59WL2xHVD9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f32454-3ef9-4412-8570-5cf43d35908e/1/OEgrEyC5gPRtbkBP59WL2xHVD9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f5:0a:91:ac:58:43:17:da:33:c5:cf:b4:42:85:59:44:83:
a6:fc:be:95:32:d6:fc:4b:40:5b:f1:e1:db:36:a3:7c:33:50:
4b:df:5e:c8:8e:24:a1:15:73:0c:35:19:dd:e5:ee:4d:2c:09:
9f:06:c7:77:fe:95:61:55:1c:4e:bc:05:91:f0:43:07:c5:72:
c9:3e:33:48:ee:3c:61:df:8d:32:77:d2:f8:51:54:5d:ba:ed:
df:3c:a9:55:69:5a:68:3b:c1:37:0a:d7:10:c1:fb:12:4c:92:
f6:ad:94:8a:c6:b5:75:cb:43:58:e6:a2:b5:e3:8e:7f:23:d7:
d8:84:1c:f6:ce:f7:34:91:cc:f3:cd:4e:af:23:cc:ab:08:68:
de:78:2c:f0:b8:15:41:0e:df:0b:ee:50:a2:9e:e8:f0:80:51:
97:28:ed:32:64:38:20:f7:76:6d:30:91:fb:78:b0:95:14:92:
56:5e:50:e0:ac:ac:58:9c:42:b5:0a:2e:2e:ff:6c:de:de:68:
41:47:0d:9e:bb:9e:d2:87:5a:5b:86:04:73:30:c4:58:f2:f3:
e4:2b:6a:d9:de:df:96:57:9f:78:bd:bd:02:b8:8c:2b:a2:f3:
7b:02:5b:9d:36:97:83:9e:d8:e5:74:79:ce:ac:45:ec:ea:59:
3e:e9:f2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:13 2025 by rpki-client