Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
File: oV32zYKdlfY9kx1dz5HMi6UPkLA.mft (raw, json)
Hash identifier: yQhWWqQjTM2TFYZ7x/JSSqAsyu4q5z/Zz+41jgaEd14=
Subject key identifier: 89:36:E1:A9:0F:59:33:17:DE:9F:22:BD:1C:FF:3A:C5:D5:A6:94:41
Authority key identifier: A1:5D:F6:CD:82:9D:95:F6:3D:93:1D:5D:CF:91:CC:8B:A5:0F:90:B0
Certificate issuer: /CN=a15df6cd829d95f63d931d5dcf91cc8ba50f90b0
Certificate serial: 0194BCE0C2777F1C9F0B4A4BE51F8139BDFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
Manifest number: 1153
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: VuAYChzgVwA9U2Q6Uxu9DF2BLPk.roa (hash: 2ErjMaikK9MO12otuKOE97QoF/tRVc9Xenat/2fnwAc=)
2: eCInIDJljc296hyYtD5W8TkDML4.roa (hash: 748KveIKW32FuAoa2IrqedX1Io3eRBGbUpfsqc8GK+g=)
3: oV32zYKdlfY9kx1dz5HMi6UPkLA.crl (hash: Ot9O9uIVUYqXl4r7QrCP/YoJl49fiP1nEuYWmfH8T28=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c2:77:7f:1c:9f:0b:4a:4b:e5:1f:81:39:bd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a15df6cd829d95f63d931d5dcf91cc8ba50f90b0
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=8936e1a90f593317de9f22bd1cff3ac5d5a69441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:48:e7:9a:ba:89:f0:11:51:29:80:a3:81:
3e:85:16:c8:0e:d6:54:e1:a0:a0:7f:41:61:9c:5c:
56:6f:ad:50:2c:58:2a:64:3d:9b:f3:68:6d:f1:74:
6b:44:11:88:cd:28:45:f2:91:b1:4b:87:ac:01:5b:
4e:1e:a4:63:6f:66:f1:bd:d5:5c:f8:61:ef:b8:4c:
15:0a:e7:e2:b8:0e:34:44:23:ce:7a:c0:76:e2:19:
69:9d:02:dc:2f:87:92:e7:de:ef:35:23:1c:69:e2:
c9:92:df:74:a2:46:16:f7:85:46:2e:06:e1:90:08:
5a:a3:d3:f6:ab:23:23:50:25:8e:c1:88:1b:bf:b0:
2b:b5:21:ff:8a:a0:ed:45:5a:61:d0:28:da:a2:40:
00:c3:94:ae:81:8a:f1:78:a2:4e:e3:3d:48:35:5b:
24:48:c4:93:16:6b:91:60:fb:b2:b8:84:2b:dc:59:
ee:de:e1:24:f9:2a:e8:b2:44:96:b1:45:f1:45:8c:
3d:ab:79:91:54:55:0b:09:f2:e0:d6:84:1b:43:6c:
c2:62:52:02:22:27:ef:a4:90:d8:f8:14:b8:78:da:
d4:c4:ea:20:44:96:3f:0d:3f:08:05:ca:24:a8:12:
27:91:88:02:02:37:93:4b:4a:56:56:3c:ce:6d:56:
6d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:36:E1:A9:0F:59:33:17:DE:9F:22:BD:1C:FF:3A:C5:D5:A6:94:41
X509v3 Authority Key Identifier:
keyid:A1:5D:F6:CD:82:9D:95:F6:3D:93:1D:5D:CF:91:CC:8B:A5:0F:90:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV32zYKdlfY9kx1dz5HMi6UPkLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/068c4a-76c0-4fbe-a9ee-0df73c2f6a9f/1/oV32zYKdlfY9kx1dz5HMi6UPkLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:81:c0:86:ae:d7:80:4c:16:cc:02:95:77:82:a7:03:fc:b1:
c7:ba:e6:10:63:7f:b5:63:fd:b4:69:07:03:4c:f7:79:c2:6d:
5d:2d:eb:4e:a2:aa:f8:52:71:2f:f4:1c:0b:1a:87:39:d4:28:
bf:03:09:c4:83:92:c7:73:6e:6e:9e:b9:57:b6:0b:a0:79:c7:
7d:45:8d:80:51:65:86:36:9a:81:b6:f3:a2:b0:a5:95:df:b3:
ca:42:ec:dc:48:c1:c7:28:c1:ad:f7:0d:bb:dc:3f:ae:43:37:
d2:8b:e6:73:0a:32:a9:4b:22:30:59:86:9d:59:fd:0b:c0:28:
f5:50:96:58:ec:1e:80:04:f3:07:70:f6:65:5e:3f:4a:18:8f:
37:af:79:49:c5:45:9e:30:b4:ca:04:19:b9:17:4f:24:f2:10:
f6:cd:a9:b1:10:8b:d7:4c:40:4a:13:ea:27:ce:5d:fa:0a:b7:
92:32:3b:2c:94:17:8e:17:48:f7:d8:a4:94:48:cd:a0:bb:e9:
ab:76:61:72:d2:19:c9:ba:32:38:1f:bd:aa:83:bd:a4:b6:ec:
1f:33:53:db:ff:e8:be:87:36:4b:ca:79:ab:e6:25:6d:81:c7:
f3:ec:f5:06:83:59:3e:9a:68:99:f8:4a:6c:09:b5:5a:82:53:
c2:be:89:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:49 2025 by rpki-client