Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
File: roOCT9wp6-SsKGygGETfhtTXXsA.mft (raw, json)
Hash identifier: FJxkh+ggsEycJ0RUTqW8iGRYDc9uNjh0TzzMbLGrVLI=
Subject key identifier: FD:EA:AE:3A:4F:F1:6A:E3:08:4E:24:59:59:3B:75:7B:0D:93:E3:28
Authority key identifier: AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
Certificate issuer: /CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Certificate serial: 0194BC3C0C3B11E94997416001C817FA822C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
Manifest number: 4F
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: jHCjx-TBB5oXKBhOsM_EWQyL88A.roa (hash: rucNPqCxXwLKo5x3absYJUk2L/e2sCkpCPYtoCEmNPo=)
2: roOCT9wp6-SsKGygGETfhtTXXsA.crl (hash: jXvc2vQPpe8aoucZK+COdqn52sxJn6FyEi2WzKIyID0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0c:3b:11:e9:49:97:41:60:01:c8:17:fa:82:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae83824fdc29ebe4ac286ca01844df86d4d75ec0
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=fdeaae3a4ff16ae3084e2459593b757b0d93e328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:66:16:81:af:b3:cc:bc:5c:d1:5a:b8:8d:
55:c7:55:9d:03:63:4e:0b:cb:61:82:e6:66:cc:bd:
15:30:f9:30:08:fe:b1:05:64:7c:4a:18:85:ff:69:
d2:f3:89:f8:b3:d4:7d:ee:58:29:65:31:d8:53:69:
b1:40:78:1f:eb:67:1e:f8:0f:e7:e1:70:91:3e:cd:
52:60:b3:09:81:2b:d7:e0:3a:39:d5:43:90:0d:aa:
e4:fa:14:63:93:58:01:8a:ce:b4:cc:ce:3e:b3:5e:
44:66:b9:00:5e:f7:05:8f:b0:5c:dc:f5:dc:ff:68:
bd:a2:a3:3b:d3:28:7a:8a:87:9a:7a:2a:78:99:21:
2d:37:bd:43:cf:28:18:37:a7:d0:0c:48:a2:77:4a:
f4:52:53:ad:35:be:02:9e:e2:cd:6a:94:6b:34:01:
9a:35:42:a3:9f:94:2c:98:d8:50:2b:a9:b2:8e:12:
ba:29:5a:9c:47:3f:59:da:b2:ed:aa:c5:12:e7:24:
26:10:0e:db:aa:9f:a7:b8:4e:3c:47:0b:a0:24:57:
6c:9a:1a:05:be:36:71:91:34:1d:62:1c:d0:e8:4a:
8e:0b:5e:1f:fe:41:d5:dc:de:16:66:2b:6b:bd:8f:
9f:b7:23:d7:10:6a:00:3b:bc:eb:d3:45:f0:69:b1:
ca:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EA:AE:3A:4F:F1:6A:E3:08:4E:24:59:59:3B:75:7B:0D:93:E3:28
X509v3 Authority Key Identifier:
keyid:AE:83:82:4F:DC:29:EB:E4:AC:28:6C:A0:18:44:DF:86:D4:D7:5E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roOCT9wp6-SsKGygGETfhtTXXsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7174ee-3076-496c-b259-9700546b5711/1/roOCT9wp6-SsKGygGETfhtTXXsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:98:d0:8b:1a:fa:cc:18:54:1f:01:9a:92:33:3b:b0:4f:ee:
04:04:09:83:ca:a1:b1:44:22:d2:ed:79:ce:73:20:31:d0:81:
f8:ff:9f:20:73:83:00:6b:0e:5e:5d:9a:95:1d:33:93:a5:c5:
70:36:1e:00:e6:f4:d6:72:c4:86:37:62:c8:05:dc:17:b0:37:
07:8a:85:02:eb:3e:d8:30:ef:f0:06:3a:b3:4c:a0:95:c6:da:
18:3f:a0:7e:67:23:f9:1d:fa:c9:de:cc:59:57:e6:c7:ec:b7:
ce:87:74:9a:b9:bd:f5:16:30:9a:06:31:2b:a1:61:46:26:52:
b1:d2:04:7a:84:7d:14:c3:9f:76:de:5e:1d:d2:aa:0f:62:da:
c0:a6:42:bd:6b:d7:dd:a4:20:73:1d:7c:64:38:16:24:c0:ef:
0e:98:35:16:d5:19:ca:8a:67:9c:0f:b4:15:17:b5:92:e0:8f:
a4:1e:d0:50:5d:e4:fd:b0:4e:8e:55:1d:35:0a:e3:23:0b:a2:
e7:36:ec:63:dc:00:28:b7:b6:e7:b1:8f:8f:b8:14:0c:a4:05:
c9:da:d9:e6:de:7f:47:ca:ca:aa:62:18:59:03:33:7f:53:b7:
81:19:d6:b8:94:69:c2:a1:1a:c1:cd:ad:94:2e:7e:c1:a2:39:
07:bf:38:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:14:33 2025 by rpki-client