Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
File: O94s1SFek7-gym34ssH17SyUr3Q.mft (raw, json)
Hash identifier: SZ28R/gcBm3zvtQEdOPjLqeahNoQ0pRUQhqyGJhRjjY=
Subject key identifier: 1D:2C:07:41:12:4A:A0:96:F5:34:E1:09:A4:78:BC:2A:E6:9D:FB:89
Authority key identifier: 3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
Certificate issuer: /CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Certificate serial: 0194BC3BFBC03760778FEBD35A84827090E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: O94s1SFek7-gym34ssH17SyUr3Q.crl (hash: Cepl92+0kMI3Wx8l9xz9OVBWfJGUyJr1JF1SH0HL9YU=)
2: q9xJeN8PofnE74G9SyXfTH60ZME.roa (hash: yftwsdAWhtCdoWRv+jAeZvxiXWe//Rf4F2VF/Lbsjio=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fb:c0:37:60:77:8f:eb:d3:5a:84:82:70:90:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bde2cd5215e93bfa0ca6df8b2c1f5ed2c94af74
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=1d2c0741124aa096f534e109a478bc2ae69dfb89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:50:e0:17:4d:d2:3c:7a:02:90:d8:36:c3:
76:6f:be:80:e8:2c:56:6c:42:68:d9:51:81:80:57:
4b:fb:9b:50:f3:af:72:b4:0b:b5:1e:7a:3d:46:13:
0d:7e:53:a8:ae:a3:68:ad:66:a8:0c:7a:ce:5f:26:
ef:b7:34:e8:74:f1:23:af:c7:74:a1:c3:50:bf:8e:
c4:03:9e:d8:91:16:14:0f:48:ab:0f:9b:41:83:ac:
22:83:26:f1:3d:76:5b:d0:71:b2:81:5f:96:61:1d:
27:68:ad:b0:47:df:eb:b6:18:74:6b:f7:60:a6:0c:
78:5d:62:8c:e8:eb:78:fb:a3:75:5c:db:23:71:6c:
4e:64:58:2e:b3:81:53:0e:68:78:9a:37:6e:8d:14:
76:96:57:bb:c1:48:5e:9c:77:d8:5c:85:35:7c:dd:
31:d9:76:5a:34:0e:9e:2c:10:cd:90:62:c4:00:2f:
08:2b:a5:9c:f6:cd:04:5f:59:7b:66:9b:a9:04:52:
c5:ab:08:0f:7c:fd:86:89:f0:76:6e:d2:90:53:31:
40:ef:84:60:25:0a:21:1a:95:c7:de:03:c3:b2:d8:
c0:2d:27:57:8e:93:32:a6:85:ce:0e:c0:96:1e:3c:
d8:63:e7:af:2c:4d:6c:b1:cb:b0:db:d8:be:88:58:
bd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:2C:07:41:12:4A:A0:96:F5:34:E1:09:A4:78:BC:2A:E6:9D:FB:89
X509v3 Authority Key Identifier:
keyid:3B:DE:2C:D5:21:5E:93:BF:A0:CA:6D:F8:B2:C1:F5:ED:2C:94:AF:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O94s1SFek7-gym34ssH17SyUr3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c53a3e-f90d-4742-84fb-db319a31bdf7/1/O94s1SFek7-gym34ssH17SyUr3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:84:ad:df:8c:0d:dc:67:9b:e0:d0:4f:c9:52:87:02:77:07:
49:4d:17:16:78:7f:24:72:c9:55:37:fa:05:be:66:38:7e:20:
69:0a:86:32:58:c1:13:e9:cb:c6:73:df:bc:b9:51:02:87:9c:
6c:1b:df:7d:d4:eb:cf:77:64:c2:7a:a9:84:a2:8b:9d:bc:ef:
4e:a2:19:62:59:7e:ed:b4:16:af:9a:17:35:54:4b:be:09:20:
7e:bf:3d:48:1c:4b:55:0f:cd:7b:01:86:03:a8:e2:24:c5:c5:
72:06:77:bf:3c:68:5e:4f:88:64:ad:6c:3f:18:f9:a9:03:59:
75:89:1f:ed:6a:5a:e7:6e:7f:84:5f:e1:d0:e1:8c:77:0b:b2:
10:94:60:00:5f:d0:e6:49:4c:33:ed:60:55:63:da:bc:8c:64:
d7:7c:aa:f5:b6:34:68:8c:a7:92:ec:c5:fe:3c:25:86:e9:fe:
c0:3a:78:a7:65:97:61:a8:d8:4d:51:15:c1:ef:d4:21:c1:94:
c7:e5:f0:d5:ee:e7:be:25:0d:2f:96:de:20:ac:43:64:c7:49:
a5:41:92:f9:eb:f9:86:f6:b0:44:1a:66:f3:cd:83:6f:ce:0e:
25:73:bf:31:e4:ba:f8:8a:44:49:5a:c5:0e:e2:7b:55:3b:b6:
60:6d:44:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:45:58 2025 by rpki-client