Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
File: oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft (raw, json)
Hash identifier: Se9qwgzm49XfFtfdZ7cDU3bQIHzrkBGmBM9ZAGYo2Ys=
Subject key identifier: 30:93:C1:2B:DE:4F:D9:9C:68:93:4C:61:E8:F5:3D:7C:47:CB:46:F1
Authority key identifier: A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
Certificate issuer: /CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Certificate serial: 0194BC3CBBF6E3260E64421A25149881BB33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
Manifest number: 03B6
Signing time: Fri 31 Jan 2025 12:01:24 +0000
Manifest this update: Fri 31 Jan 2025 12:01:24 +0000
Manifest next update: Sat 01 Feb 2025 12:01:24 +0000
Files and hashes: 1: 4Knn2Ld5egn1camg9bhppId4Qlo.roa (hash: A8w1HB94c5M9H4eQOiI6lWSCTjnLMlfowVXvZM3dO6s=)
2: 5bwrov9Q4TKzJTBo9upY3XK0THU.roa (hash: TYWC6rWZltrX891RQlcpPW39DIbNZYI93ECjvUJPd18=)
3: S_FCvdfbH_ZK63a0stUMhU8oaw8.roa (hash: eXZV7SJ3ck6L3XgOeiX3iX+u0/ekcILrG+TMmUo1bYY=)
4: UXFnULRGQ9zt1V-SkMYjnZH0aX8.roa (hash: hvtnqOC4PJ7xkfHCQl1PdGQcbPT0pkEqxG9iEFd/GZI=)
5: gOWYAyjzxIKRFcUZmXLFPZZQLAE.roa (hash: uorrOksjaGfolUbfcHF+KBKk6xKRTaR+l4ir2v0cUaI=)
6: g_ElxkrC5OfOyHZzsFQIM1AuuFQ.roa (hash: s9+zwcgiFmScc9IvVxtLII47fLB+BQdFtBCLqfaDxwU=)
7: oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl (hash: n3EqgAnvzUTuWLaVHt4LDoQAc4TpLSEx+OxzsjHxZ8A=)
8: zvXh2JmULYTuuJGfZa88vbAc7K8.roa (hash: XQvzCYYY2c/DWeWDz/HVl73sGmFpwXBX4BVFr0eF6dM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:bb:f6:e3:26:0e:64:42:1a:25:14:98:81:bb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a124ccdd70f3ec762cbd65e04dd6f76be236a8a7
Validity
Not Before: Jan 31 12:01:24 2025 GMT
Not After : Feb 1 12:01:24 2025 GMT
Subject: CN=3093c12bde4fd99c68934c61e8f53d7c47cb46f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:41:4f:62:0c:b8:9e:e6:3e:d7:00:d2:60:
85:43:aa:14:b8:b8:42:1b:7a:96:86:c8:57:90:65:
c4:5f:de:80:10:21:66:f1:3d:a9:9e:42:7a:21:94:
e2:b4:cd:c8:78:d5:1d:7f:17:e1:68:dd:a0:22:88:
39:17:7f:70:a7:e6:0c:9e:ce:f6:e1:67:62:af:95:
b4:00:31:93:57:04:f9:90:70:98:70:65:49:c1:b7:
d3:e5:84:76:cf:02:a6:c3:30:94:0f:2e:af:31:da:
5a:76:72:8e:87:09:4b:0e:43:f3:ba:69:b6:be:e7:
46:e6:63:e3:6e:f1:bf:74:aa:c1:41:b2:b7:33:6b:
45:a8:13:c8:fc:69:55:8f:32:8e:06:d5:8c:44:79:
a4:96:1f:fd:cb:d7:6d:68:34:ee:c0:62:27:e6:7c:
df:10:fa:ad:1d:d9:b2:27:b6:bd:25:50:3a:8d:54:
fd:cc:7c:42:76:d5:45:dc:12:50:f7:ae:3d:16:e4:
08:d1:9c:b8:3a:5b:2d:70:26:59:8a:fb:2c:a2:af:
d6:5a:74:2b:81:24:a6:c2:85:17:f8:77:9a:9e:fd:
96:4b:62:6f:2e:47:35:c0:71:04:43:9c:ab:d7:ec:
e8:10:f5:70:12:f1:02:ac:21:b9:c8:c1:01:c7:0b:
f0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:C1:2B:DE:4F:D9:9C:68:93:4C:61:E8:F5:3D:7C:47:CB:46:F1
X509v3 Authority Key Identifier:
keyid:A1:24:CC:DD:70:F3:EC:76:2C:BD:65:E0:4D:D6:F7:6B:E2:36:A8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTM3XDz7HYsvWXgTdb3a-I2qKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b694b8-8211-4c06-9c81-7b35397af2f7/1/oSTM3XDz7HYsvWXgTdb3a-I2qKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ab:ee:1e:f1:c7:73:03:0d:12:40:c4:1f:c6:b7:c3:23:31:
aa:c7:34:4a:db:14:23:19:81:ec:ae:3a:0a:62:12:97:ca:e2:
03:4c:81:73:6b:76:ed:66:9e:36:d2:af:eb:65:16:61:f4:df:
d9:a1:11:1b:5f:30:23:f7:c5:b0:fb:af:e7:06:d7:61:25:58:
1c:6a:9f:7b:5d:6d:62:48:55:9f:a7:dd:6f:55:5c:83:08:da:
82:bc:75:8c:fb:eb:fb:f2:b5:f1:27:16:a4:44:75:79:a8:8c:
43:13:d2:a7:35:e6:34:9f:a3:9d:66:7d:b6:b1:fe:78:41:be:
4b:05:5b:28:52:25:5f:c0:60:6c:65:46:22:1a:ec:34:f6:cf:
86:a9:b6:ff:b1:4f:00:6f:1c:b7:25:76:33:7a:02:08:02:c6:
07:cf:f2:0b:a5:0e:a8:ca:d1:7d:c6:0e:74:23:86:29:6d:e9:
e8:d3:be:64:aa:ff:c1:45:5d:f9:ca:c1:2e:08:dc:0a:97:b7:
47:24:f1:01:13:9c:1c:17:86:f3:4c:d8:bc:6e:99:7c:b2:82:
30:20:c8:5e:5a:85:57:d6:01:b1:26:85:9c:51:bb:08:1c:c2:
b2:f2:6a:59:8f:d9:3c:1b:43:df:8d:69:83:bb:9c:03:2b:d8:
34:f4:42:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:46 2025 by rpki-client