Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
File: opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft (raw, json)
Hash identifier: xr/elgc2SAN52Qk7TFbce6qNboVm32TKap0vMubBOWA=
Subject key identifier: 7B:BC:47:4D:89:49:B6:02:DA:7A:BA:A2:83:DC:2A:4A:27:31:27:41
Authority key identifier: A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
Certificate issuer: /CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Certificate serial: 0194BD4E637C35DA27A6514853C3F64ACE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: cmFf7QvULhq8J2_sBWj-Wxk8m-o.roa (hash: Q776SgfagJw9iDbsqcPtWbsqUozG92JlD6wff17ia8w=)
2: opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl (hash: FarcS9SvALJQM9RaKkMRwqWGDkJ5jkrAukEmuwWVJ+c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:63:7c:35:da:27:a6:51:48:53:c3:f6:4a:ce:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2916527fd91e9b3cf8e062bce06df5cbd4c4b1a
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=7bbc474d8949b602da7abaa283dc2a4a27312741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:47:61:6e:0d:32:53:f0:17:bb:92:29:e8:f3:
a0:62:1f:02:8b:09:8d:ce:94:52:9e:1f:24:20:7a:
18:69:f3:1c:29:a4:0b:78:79:28:63:7c:96:d2:11:
88:09:b5:46:ad:1b:64:4a:0e:9e:53:cc:a8:74:c7:
bc:91:40:fd:2a:ff:02:c5:19:8a:49:70:50:0c:fe:
6e:0b:d2:2f:3d:33:a1:28:52:1d:02:0f:bb:a9:d0:
e2:05:d5:65:21:cd:1e:33:2f:aa:78:f5:84:68:47:
8a:ff:de:33:e5:f4:f0:5d:af:1a:0d:90:48:ce:43:
cd:bc:ba:43:a2:a8:5f:5b:4b:1a:47:d3:28:19:20:
a0:55:5d:94:78:28:ac:7e:92:bc:b0:b8:75:8a:b5:
71:55:0a:b7:c1:ff:a9:f2:a5:3c:1b:97:51:14:10:
46:74:1c:af:83:04:18:62:4c:00:66:78:4f:4a:09:
90:48:b8:26:e9:6e:ca:61:2e:d9:41:b5:25:59:6d:
c6:c1:c6:77:3a:fd:70:15:1c:78:3e:b4:8c:cb:26:
6e:11:dc:50:fb:26:0d:43:65:75:58:09:2e:19:1a:
e2:86:ff:a4:8c:d5:83:cc:68:b8:8d:27:09:88:67:
f3:ae:47:59:97:ab:0e:0a:b3:64:6d:c7:b4:da:a4:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BC:47:4D:89:49:B6:02:DA:7A:BA:A2:83:DC:2A:4A:27:31:27:41
X509v3 Authority Key Identifier:
keyid:A2:91:65:27:FD:91:E9:B3:CF:8E:06:2B:CE:06:DF:5C:BD:4C:4B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opFlJ_2R6bPPjgYrzgbfXL1MSxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86c539-621e-4460-a067-e0dc18e88229/1/opFlJ_2R6bPPjgYrzgbfXL1MSxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:b3:77:f5:69:d1:3b:89:e8:23:40:29:18:e7:46:d3:6c:e5:
97:24:f4:48:11:61:42:8e:c8:cd:b0:27:f7:92:da:27:58:9f:
47:92:fa:1e:e6:35:99:2f:d3:a0:6c:4c:cd:71:ef:2b:90:89:
de:dd:3a:81:d4:c6:f0:a1:8e:9e:34:95:14:49:a5:10:30:c4:
88:1b:46:da:f7:85:cf:74:43:a3:75:2e:ba:d6:64:74:98:fe:
60:aa:9d:b6:53:18:1f:f3:b9:60:61:df:d5:ca:f2:db:06:f3:
9b:48:cf:c4:1d:71:f6:38:06:af:ce:29:91:8f:0d:2f:31:12:
93:45:fe:0e:f1:3e:ae:2b:95:d5:b6:02:67:84:12:45:ee:81:
34:d9:33:1c:d2:10:1c:05:6d:35:80:ec:c8:01:41:8a:86:d5:
35:ac:47:40:4e:ef:3b:b0:a7:50:43:0b:6d:8f:05:f2:8b:3b:
0c:f0:b7:ad:8a:56:27:c9:d1:40:2b:e4:e0:14:32:b9:94:72:
f3:ef:4b:21:d9:c6:ed:62:31:79:17:d3:fb:99:63:8a:f0:02:
79:fd:f5:a1:3d:52:46:b4:5a:d1:ab:f0:9c:fc:93:d1:02:6b:
db:75:bd:9a:07:7b:06:51:0d:03:b8:b9:46:aa:2e:e8:5a:0c:
73:bb:6a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:22:20 2025 by rpki-client