Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
File: O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft (raw, json)
Hash identifier: rKD/guvDNMHSWIYg5fBCN6QlsXkyT8YAFD2h0pFjfls=
Subject key identifier: 9E:96:16:6C:46:58:BD:35:D7:BD:0C:D1:F5:79:A1:75:F3:D7:5B:96
Authority key identifier: 3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
Certificate issuer: /CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Certificate serial: 0194BBCE7A5B74B1172516AD51276D5D2CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
Manifest number: 0CAC
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: 1-ONPXz6oB55i6ncobLGXQOhvmv8.roa (hash: cOYI2BwvHabcueaOvA87E54YVb819uZpeKO+LVT2ihQ=)
2: O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl (hash: Yc8yB+6Z7Vr+tc/WmtFese5nBn7bjE98Tdh8TSjgA4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7a:5b:74:b1:17:25:16:ad:51:27:6d:5d:2c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be2ef09708a9459da5759f146f69a5d19ccfe75
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=9e96166c4658bd35d7bd0cd1f579a175f3d75b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:b5:8c:ce:cd:c2:a1:58:0e:9e:e7:50:ac:
2d:cc:67:9d:6e:e7:65:85:c3:9e:70:cd:d8:5f:0b:
c4:9a:df:a6:2f:4f:24:a2:b4:6d:d2:7f:c1:b2:aa:
75:b5:d2:24:e3:57:c4:80:6f:25:0e:0c:ca:c5:76:
8c:ba:e8:bc:06:75:14:1c:6b:d8:de:df:3f:f6:88:
66:c4:6b:74:2c:d7:6e:6a:ea:e9:5b:c5:55:4c:3d:
7a:4f:2c:83:37:55:8e:74:25:24:8b:8d:8f:b8:8b:
8f:a3:bb:77:e7:9d:8d:58:d4:13:c0:15:76:7a:1a:
7e:d1:b7:69:38:83:ee:c4:f6:e7:c6:a7:68:49:22:
f9:51:99:3c:5a:d7:20:f5:70:ab:d8:f2:2e:9c:cf:
4d:52:4f:59:ad:eb:d8:88:f0:c2:b4:fa:df:40:05:
53:2e:4d:e4:e9:46:99:f1:c1:35:c9:aa:ed:3b:ae:
db:66:11:8d:7d:57:30:c5:16:1d:61:86:6b:e0:9b:
83:42:27:66:5f:9c:d1:b8:4c:6d:ac:11:09:8a:92:
a1:18:37:c5:69:58:3b:76:41:2e:80:44:b3:b4:55:
3e:26:ed:bd:23:50:2c:80:10:35:26:82:4f:8e:a3:
1e:ba:10:26:e7:84:7d:77:8a:62:55:15:bc:e6:fa:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:96:16:6C:46:58:BD:35:D7:BD:0C:D1:F5:79:A1:75:F3:D7:5B:96
X509v3 Authority Key Identifier:
keyid:3B:E2:EF:09:70:8A:94:59:DA:57:59:F1:46:F6:9A:5D:19:CC:FE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-LvCXCKlFnaV1nxRvaaXRnM_nU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/5a9b45-48dd-4d8e-bad2-d41ff858618a/1/O-LvCXCKlFnaV1nxRvaaXRnM_nU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:99:17:c2:01:0e:9a:4e:04:d4:f0:b1:f4:f0:e0:07:b0:5b:
5e:a8:32:00:15:34:70:9b:5e:11:c3:d3:a9:90:cb:11:3b:a5:
da:f5:de:69:91:02:64:d0:a3:46:56:71:2d:11:65:b6:61:ff:
4a:7d:03:c3:d6:55:80:ae:18:e8:d2:6f:ed:9f:02:48:b2:f0:
4a:fd:07:2d:de:c6:06:81:a5:c4:21:ac:49:60:d1:90:ee:68:
88:9a:2e:c3:3c:89:4d:55:1e:1c:65:fd:85:8f:c6:4f:27:25:
28:ff:d9:3f:dc:bb:70:25:76:07:49:71:2c:ee:db:14:11:b5:
f7:90:b6:07:5e:f1:8d:a0:76:f3:00:37:92:5e:e7:e6:81:a8:
19:af:f9:e2:91:86:ba:58:e4:53:33:10:08:c9:da:cb:4a:41:
ad:6b:67:c7:ce:94:48:f5:37:25:85:bb:d1:92:7d:4c:0c:3c:
90:60:b8:3c:13:4d:79:4f:89:8f:fb:2f:12:30:b4:c5:7f:8b:
2c:52:0b:77:e0:26:06:ba:0b:a6:cf:83:8a:15:e6:0c:d4:65:
c1:27:e0:aa:26:a3:cb:23:6e:57:80:12:9b:4d:ee:d7:52:fd:
0a:9c:91:20:9f:ab:da:16:0a:a1:24:70:ca:2d:23:6d:11:e6:
dc:8a:a2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:38:46 2025 by rpki-client