Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
File: obOdgkR51Np7EvZcFeXEJyX1Jgs.mft (raw, json)
Hash identifier: 7VdteWsIzoVZX7M21JD/fQU1g6OdHs3qOVtuvKqO1qc=
Subject key identifier: 2D:B9:35:52:07:5C:15:1C:58:FB:3B:10:67:D0:17:85:82:8C:76:7C
Authority key identifier: A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
Certificate issuer: /CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Certificate serial: 0194BD4E98318D1D89E40884EEDE5F1E1310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
Manifest number: 0EC0
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: Ahr8cLoMjuhdLqjDmUtP7XZpYek.roa (hash: +5UAkntpANzuu6Eiv6TWU+2W0yxLaSEMeiDxRWb4xso=)
2: obOdgkR51Np7EvZcFeXEJyX1Jgs.crl (hash: Dk9lQ3aTwCtiwVfyPWv7cHJeVn9KSuEIlQz0wb3Y77g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:98:31:8d:1d:89:e4:08:84:ee:de:5f:1e:13:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b39d824479d4da7b12f65c15e5c42725f5260b
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=2db93552075c151c58fb3b1067d01785828c767c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:cb:fe:ac:35:43:4b:ee:4b:ff:97:69:41:ec:
04:1e:5b:94:81:a8:bc:27:cf:9b:73:a3:ce:c9:86:
d0:ac:fb:5c:05:eb:53:8b:fb:56:b1:64:ac:fc:ae:
83:1a:d2:89:26:d5:0e:0d:21:5b:2b:ee:85:27:f1:
fa:64:3f:9d:78:78:a9:f7:ca:c8:4a:07:87:25:34:
7d:08:ba:49:a4:04:30:24:ea:f9:fe:9b:97:82:be:
44:b4:b4:37:15:67:43:ee:7a:c4:20:a4:21:6a:91:
db:99:6c:c3:f3:1c:9a:b2:0e:25:34:79:6a:be:1f:
bd:d0:fa:63:14:41:a2:b0:90:89:69:bd:c9:f8:57:
3e:52:ed:bd:8e:ab:ec:07:c5:ef:e6:8d:15:39:35:
f3:54:eb:ab:65:15:75:79:06:17:78:c0:d1:8e:d3:
f7:0f:e9:92:b6:b3:0d:a7:41:9f:1c:ed:7c:00:2d:
9a:09:0a:20:15:a6:5b:07:7d:b4:d7:1e:6b:a5:75:
20:31:34:a2:f2:37:b1:47:54:ac:a3:09:25:d3:4c:
f6:f2:71:c3:64:5e:9f:77:8b:8e:8b:f2:b0:9d:d0:
d8:7e:6e:ba:f2:99:8a:37:7b:4a:93:eb:b9:5d:76:
ff:07:f1:3c:b0:01:6f:ea:12:02:d0:ff:58:5f:1d:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B9:35:52:07:5C:15:1C:58:FB:3B:10:67:D0:17:85:82:8C:76:7C
X509v3 Authority Key Identifier:
keyid:A1:B3:9D:82:44:79:D4:DA:7B:12:F6:5C:15:E5:C4:27:25:F5:26:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obOdgkR51Np7EvZcFeXEJyX1Jgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/179f80-8838-4d4c-b8d1-31a964f8a37f/1/obOdgkR51Np7EvZcFeXEJyX1Jgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fb:ae:0f:cf:0b:ad:16:50:5d:43:9f:7c:8a:6f:7a:f7:9d:
29:e6:50:68:40:5b:cc:e9:97:71:20:ff:2f:a1:0a:15:b5:29:
ac:d7:8d:56:c2:57:e7:b8:4f:9b:dd:be:e7:26:cd:63:ce:b1:
7c:91:b9:bb:c5:5b:70:83:8d:07:db:49:0a:7a:6e:2e:76:8c:
99:8c:51:a9:0b:4e:37:e0:ed:29:1f:78:88:06:e7:80:37:63:
04:e8:06:50:ba:c0:68:c2:35:2b:16:55:5c:d9:54:9e:50:f6:
19:3d:f7:4d:df:21:86:ff:e4:46:8c:36:58:ce:64:83:4f:a1:
89:15:0d:62:a5:06:6d:65:8e:ca:12:07:82:cf:3e:04:37:2e:
b7:e1:4c:d8:90:8a:18:37:09:65:d4:0f:20:ae:5e:7a:cd:83:
02:02:7d:72:05:55:e6:af:1a:98:b9:4c:88:8f:49:32:ab:9d:
b2:7d:1b:b9:4d:ea:a3:1b:a0:f9:8a:5a:68:a1:07:df:4d:61:
62:48:0b:f4:6e:e1:65:f1:53:b4:61:07:39:03:10:4c:a2:22:
fa:a9:f9:17:22:4f:72:0b:c1:d0:b5:41:97:16:53:de:73:07:
b9:2a:1d:10:54:ca:44:16:64:d8:d7:f4:1b:eb:d1:74:ad:74:
0b:47:b3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:52 2025 by rpki-client