Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
File: ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft (raw, json)
Hash identifier: ydsXE9rhzSJojW+Pwsb0YrgemOXCoUslhMfsuxus2Y8=
Subject key identifier: 4C:73:3E:18:49:FD:57:7D:6E:C1:F1:19:99:B7:1D:7E:4D:15:97:D7
Authority key identifier: A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C
Certificate issuer: /CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
Certificate serial: 0194BCA9F1B7145169A659DD115E247681F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: ghlEwsQZQs2UcsGEnGv2GYmqozE.roa (hash: IupvEzCg2+AgoEqXLEZo9g4xmShB4z81Opbof+wzS0A=)
2: mEEdwwEWwRFuOQjXEE0GqAJtD6g.roa (hash: 9OEXXQKo0v2yF8ajNKcSoh8Qu8qa2iGEylM4hM3dSfo=)
3: ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl (hash: 8U5EzLyb40Up8GgrAA33RiRO3ZYt0ilsw0yx8KtwYGo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f1:b7:14:51:69:a6:59:dd:11:5e:24:76:81:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23b71bfd751c0cf3f7143786fda4432e7ccec2c
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=4c733e1849fd577d6ec1f11999b71d7e4d1597d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c2:e7:47:09:9b:1b:37:e5:72:a8:e6:0a:a9:
84:90:fc:f4:7a:4f:c7:77:ce:2b:44:85:4b:f8:74:
bd:7e:41:7d:12:93:af:ba:e6:eb:99:54:b1:3d:ba:
66:74:d7:27:9a:c1:d9:c3:9c:f8:a5:58:f7:aa:e4:
e8:74:ac:59:87:70:10:e4:55:45:4c:94:68:67:0d:
0e:82:94:e4:60:bc:d3:14:07:1f:38:03:0a:30:3b:
fb:c7:d4:33:6e:e4:45:e0:49:98:3a:e3:8b:e7:fd:
d9:a0:82:fe:29:40:b8:f3:e4:75:ad:b4:bf:96:c0:
79:7d:ba:4c:26:f5:67:07:71:d2:20:a2:42:a4:57:
bc:ef:5c:57:9f:0c:f9:a2:cf:d4:51:dd:9a:81:d1:
98:6f:e3:5c:6d:1d:b9:b3:9a:f5:db:37:38:08:79:
3b:08:d6:f8:d9:65:b2:67:f3:41:d8:25:5b:d8:c7:
80:03:c8:bf:23:29:16:47:6e:6e:ce:3e:10:33:50:
fe:68:d2:a1:d5:a6:23:58:bd:9d:08:e5:1d:21:e5:
4c:71:9c:4e:a1:c9:56:f6:65:8e:a7:f8:13:97:4c:
08:5d:9c:4e:b5:70:60:82:79:40:71:f6:5e:34:29:
72:83:9e:02:45:6f:97:71:89:a1:91:64:3b:00:a4:
72:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:73:3E:18:49:FD:57:7D:6E:C1:F1:19:99:B7:1D:7E:4D:15:97:D7
X509v3 Authority Key Identifier:
keyid:A2:3B:71:BF:D7:51:C0:CF:3F:71:43:78:6F:DA:44:32:E7:CC:EC:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojtxv9dRwM8_cUN4b9pEMufM7Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/816b8a-eccc-4789-a1f3-3570d9bf5679/1/ojtxv9dRwM8_cUN4b9pEMufM7Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:63:ad:15:68:ae:02:6a:30:73:e9:30:36:fd:9c:34:5f:a8:
3d:dc:b8:b7:35:a5:8f:e7:64:67:4f:2f:5b:a9:7c:ce:22:f8:
82:ca:60:ca:6b:7e:68:89:89:8a:1d:a8:46:f5:cb:b7:a6:a0:
84:94:55:be:c0:4d:74:b8:5e:dc:db:e0:dd:57:c9:30:a9:1d:
5f:2f:95:bd:06:e4:7b:10:77:93:4d:cb:68:69:c0:06:a2:98:
08:c9:5f:dd:5d:3f:4f:c5:6d:08:58:f4:65:3a:e8:8c:db:5d:
58:0a:24:fc:46:b7:37:a2:ce:80:65:32:6f:92:09:50:f7:1b:
74:bb:80:45:18:f4:8b:30:17:39:9e:a9:b3:00:d5:8b:e0:93:
fe:9e:6b:0e:6c:f3:cd:9d:ae:bf:cc:00:39:56:99:9e:2a:77:
b8:e0:02:83:6e:d8:b7:f2:1a:e3:4d:f4:6c:7c:6c:ac:14:37:
a9:e6:aa:20:69:01:0e:6b:b5:41:81:9c:7c:e5:21:82:d2:6b:
33:15:cf:f3:d3:8b:84:3d:41:ce:9b:40:04:24:27:26:79:06:
bc:71:6e:94:dc:dd:d0:09:0a:bd:0b:53:8e:9e:65:b5:c0:25:
5d:78:ed:f7:bb:e5:73:0e:63:a8:bc:78:bb:44:31:8c:e9:6c:
d3:0e:6b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:19 2025 by rpki-client