Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
File: dOEz6h5A_BPgdOMncQpTRKlgtcA.mft (raw, json)
Hash identifier: k9/IkrNukkg98T/62TsWZ1iKyAGOhxMHHBstzQhi7hQ=
Subject key identifier: 0D:EE:9C:3B:46:21:A6:6A:45:1E:6B:1D:6C:31:BA:EE:EE:23:79:7B
Authority key identifier: 74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
Certificate issuer: /CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Certificate serial: 0194BC72FC08A04394FB26C83C313C3A42B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
Manifest number: 0AD9
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: XXhZSJTw-3dSmsRY9bvXQqHBaIs.roa (hash: mmW0AxSNYmhmTbAA4XApc0Tjpzzlw3yy/NM/Jy4hxuI=)
2: dOEz6h5A_BPgdOMncQpTRKlgtcA.crl (hash: GNW41hXJe7rHmDeWwth3W7SRZLradGny2CASWalRXQc=)
3: lQpPjj9gpOYnRRV52S0ec3Spick.roa (hash: 2/R15nQqw+pyTSeVtt80lTdeScEa1kOW3xe+Ueb0Hdo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fc:08:a0:43:94:fb:26:c8:3c:31:3c:3a:42:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74e133ea1e40fc13e074e327710a5344a960b5c0
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=0dee9c3b4621a66a451e6b1d6c31baeeee23797b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:12:c9:df:59:5b:6d:6c:ca:14:26:8e:c7:21:
f5:7b:a0:75:86:1b:5d:4b:57:29:40:ee:00:51:73:
8c:13:56:21:58:76:af:6c:3b:eb:cc:53:1e:8d:dd:
7a:f1:e4:2a:45:35:08:f9:67:33:02:4e:3f:77:e5:
40:9d:22:4a:13:87:a2:d6:88:54:c8:8a:74:33:ef:
87:a1:8b:57:b7:0f:74:58:07:87:24:03:ec:5e:45:
36:99:2d:31:48:6a:d1:d5:c9:56:a3:ee:dd:f0:41:
1d:e7:12:a9:52:b6:88:8d:ad:b8:0c:67:ef:da:75:
0c:3e:bc:32:a8:1a:00:be:80:78:28:d9:63:85:78:
09:50:8d:8d:ae:ba:b3:f8:c5:83:34:26:7e:b2:70:
9c:4f:60:99:8f:ec:b5:4b:28:32:d2:15:dd:89:3e:
bb:21:5e:f7:5f:f8:5f:4f:59:c0:d9:7d:23:2a:f8:
49:37:97:de:8c:63:77:98:60:37:af:95:32:44:93:
8e:9f:c0:8e:b1:28:c0:25:ee:9f:61:4e:62:3e:e8:
df:8c:99:c1:ce:5f:8b:5e:33:f2:7e:11:dc:9a:06:
6f:94:6e:80:f1:e9:61:5f:ce:2c:82:c5:f0:8e:47:
8d:5f:6b:a7:75:7c:32:6b:55:c3:1a:35:33:37:3c:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EE:9C:3B:46:21:A6:6A:45:1E:6B:1D:6C:31:BA:EE:EE:23:79:7B
X509v3 Authority Key Identifier:
keyid:74:E1:33:EA:1E:40:FC:13:E0:74:E3:27:71:0A:53:44:A9:60:B5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOEz6h5A_BPgdOMncQpTRKlgtcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1f5587-cb92-4917-8cf3-2cb9e2172f97/1/dOEz6h5A_BPgdOMncQpTRKlgtcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:91:15:8a:b9:80:1a:6b:e4:eb:94:20:da:a1:bd:7e:48:56:
dd:af:ce:e5:28:86:f0:27:9c:83:52:40:63:a4:59:77:74:bc:
85:94:e4:e8:a3:8d:a6:8e:f2:4c:56:7e:e4:e5:11:09:ed:0f:
96:2d:ef:b1:bd:bf:73:5a:c4:29:ac:8b:68:90:a5:ed:24:f5:
4f:8c:f7:ad:52:7f:92:5f:12:3c:6d:bc:08:99:eb:a5:9c:d6:
c1:2a:dd:62:cb:a1:40:0a:89:04:91:bf:eb:6f:6f:49:d5:86:
c8:75:f9:e1:4f:04:7a:b4:51:8d:12:e3:29:fd:c1:28:36:07:
15:fd:3a:eb:0a:a7:f4:98:d5:c5:4c:de:ec:2d:c0:f2:47:41:
77:a5:f9:26:b8:ba:f0:d3:cf:14:09:51:78:41:09:f2:94:8b:
2b:59:86:01:09:50:69:13:3e:34:07:a7:e5:f8:01:0f:5f:b8:
00:3e:75:fa:ff:f3:52:26:7e:10:30:3e:b3:a7:2b:1b:fd:7a:
12:f0:9a:6f:fd:66:bc:f7:0a:73:06:ab:84:1d:08:5f:5b:15:
03:4f:02:e4:39:e5:0a:df:ea:97:e8:57:78:15:61:ff:52:da:
79:db:b1:89:3c:57:ed:37:c1:99:52:d2:8b:d7:7e:97:20:58:
2f:c2:45:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:41 2025 by rpki-client