Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
File: OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft (raw, json)
Hash identifier: CfYvDWBxGQubXYqGodrht+v/ESkB+p7Y9bwhU0m8Css=
Subject key identifier: 30:8D:AA:17:AB:DF:2E:30:AD:D4:AD:9A:1D:FC:88:7F:4F:10:DC:EE
Authority key identifier: 38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
Certificate issuer: /CN=387b7561d98dacfab863058b3b9807ad823f186a
Certificate serial: 0194BBCE7F5B23552FD0D0247971AEAF575E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
Manifest number: 9E
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: FtOApP1JK-2eKX_hjEPgWrMZdBM.roa (hash: fFP7Ifph2yQGZ7ICJ/Ang9F4wXqAsOp+daYrJKGw4zs=)
2: OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl (hash: AfiggwfQfa4G0Wtmm6e8FgUeL12W6p2la/wkNwGyOIc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7f:5b:23:55:2f:d0:d0:24:79:71:ae:af:57:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387b7561d98dacfab863058b3b9807ad823f186a
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=308daa17abdf2e30add4ad9a1dfc887f4f10dcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:95:45:15:9d:d8:c3:54:a1:90:57:04:41:
b5:39:23:84:f3:66:cf:ac:2c:31:ae:79:41:02:bd:
1c:fa:17:9d:65:29:80:4f:7b:fa:87:0b:8a:77:bf:
4d:36:c0:ec:9f:1d:10:2a:ef:5e:29:07:83:f1:53:
ac:02:a4:2e:30:65:90:93:cd:32:c1:44:db:60:fc:
e9:85:19:af:e1:af:c2:ea:17:a3:38:ab:07:bb:c7:
b2:d2:97:78:f2:07:7a:76:f2:8e:30:7e:7a:61:77:
e5:0d:bf:a2:5f:4e:14:6f:55:26:9a:c1:60:c0:79:
0c:7f:37:da:bf:40:6d:51:c5:2a:27:fa:b3:ba:cc:
6a:02:02:83:ae:78:8e:bd:a2:a1:e2:62:17:8f:a9:
fc:41:c0:52:5f:5e:16:81:88:3e:4c:99:56:df:0e:
ea:da:7d:7c:e2:4b:2d:ea:0b:5e:83:83:60:db:bc:
09:f0:17:64:c3:03:a7:f5:df:6f:3b:5a:c7:c4:9f:
be:52:ef:05:a7:25:fb:e5:41:3f:b6:61:49:19:8c:
f7:fa:4c:d1:14:f9:5c:db:12:6e:56:76:f2:78:c3:
35:a2:0a:e3:89:24:f4:87:8d:cf:54:48:f2:b8:9f:
e3:ae:b4:74:5f:00:40:ff:97:8e:62:51:4e:64:9a:
a6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8D:AA:17:AB:DF:2E:30:AD:D4:AD:9A:1D:FC:88:7F:4F:10:DC:EE
X509v3 Authority Key Identifier:
keyid:38:7B:75:61:D9:8D:AC:FA:B8:63:05:8B:3B:98:07:AD:82:3F:18:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OHt1YdmNrPq4YwWLO5gHrYI_GGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a1464a-2411-4cc8-a101-0aecdc5175fa/1/OHt1YdmNrPq4YwWLO5gHrYI_GGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:38:63:e8:bc:7a:2d:14:e0:0e:e1:6a:57:91:2c:01:f7:e9:
8e:e6:29:2e:ec:a6:db:42:0b:78:58:2c:48:d9:97:cf:ae:23:
31:8e:0f:b8:cf:b7:0a:fc:de:d2:77:61:6c:b8:f7:73:37:76:
9d:af:48:3f:00:15:d0:c6:42:71:08:fd:7a:a4:f9:af:1e:93:
e5:34:df:f5:cd:c8:8f:91:08:23:1b:f2:7a:26:e9:e5:c1:51:
80:6a:b9:34:2c:f9:1a:9e:cb:ed:36:69:56:37:8f:f3:3d:30:
99:8e:fe:5b:06:7d:78:f9:93:59:cc:7c:47:f4:ce:93:1e:c4:
36:8b:21:e6:dd:10:62:c2:ba:31:93:48:f9:5f:5c:b6:0c:bb:
00:0a:83:94:e6:a1:3a:18:73:e8:9d:89:e4:f6:31:7c:95:98:
e7:18:99:a3:23:31:76:c4:7e:5e:3c:8d:3c:d0:a1:b6:17:14:
39:eb:4f:c4:c2:f9:df:da:14:23:f1:88:02:07:a4:dd:c4:74:
19:31:c5:7b:e7:d1:ff:a7:e5:80:5f:14:1d:91:62:6a:cf:08:
39:34:f4:51:a6:45:89:d1:5e:a5:95:4b:b4:8f:30:5f:bc:a6:
b2:d5:e7:ec:55:de:1c:74:cd:cc:7e:be:f6:ca:d4:92:50:69:
5a:fa:2a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:18 2025 by rpki-client