Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
File: OFBtgKtZLee-CjMbv0-gBo1BQIo.mft (raw, json)
Hash identifier: vk+leHh+bCxT9EJaxaayL71jJe26rAzln6dDQ3lxJcc=
Subject key identifier: 83:91:A4:C2:19:DD:31:4D:43:DA:75:2B:CB:4E:77:1E:0A:DD:C8:37
Authority key identifier: 38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
Certificate issuer: /CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Certificate serial: 0194BD858ED8C5F3ECE5726ABBEC9D42C740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
Manifest number: 131D
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: IxOqwAb5p9dGa_HRX24kdOjfFck.roa (hash: SR5p/m9D2w/+wuXEjhXAlH0RCe9LK6nM5QAphTSSeCE=)
2: OFBtgKtZLee-CjMbv0-gBo1BQIo.crl (hash: ThvNvCMU8LiCN1f4nOqmeOFCjIw95ZvmRr1+XmFsH4M=)
3: lcbcumnjUhj8qVWu70KRAV-gvv4.roa (hash: 5kl9Ymb+KwVBDEYPIXdG5FFWR3fPuqnIYjC6BmGcc0o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8e:d8:c5:f3:ec:e5:72:6a:bb:ec:9d:42:c7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38506d80ab592de7be0a331bbf4fa0068d41408a
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=8391a4c219dd314d43da752bcb4e771e0addc837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cd:95:d0:d5:55:75:04:4b:a1:90:d0:03:e6:
92:36:02:15:20:af:3f:77:0f:a1:d0:35:af:5c:7c:
70:fa:cd:e3:58:ea:1e:83:19:f7:3c:00:49:52:eb:
05:ab:7e:eb:0a:fa:24:6f:18:2f:5e:39:10:22:30:
c8:de:53:b7:20:ef:f0:14:b4:a0:91:9e:b5:4d:4e:
ca:3d:5f:a6:80:6a:e0:bf:2d:1a:7d:45:a0:88:ef:
78:64:91:17:b7:f2:04:f3:c6:98:2d:d9:d9:c9:f4:
51:c5:dd:0e:e4:8e:8b:b2:f7:f6:46:15:c8:4e:00:
e1:b2:93:73:2c:0b:78:b3:d2:57:2d:d9:9e:e4:72:
e8:67:98:db:1a:a1:14:51:0e:47:37:31:5b:9e:5a:
b4:9e:06:94:0c:01:7a:cd:3c:b3:e6:30:25:e5:53:
9f:93:32:69:36:f4:cb:45:d5:d7:41:c2:f3:1e:7c:
15:f4:48:37:a6:26:31:07:bd:e3:39:8f:ba:81:d2:
7c:d4:ae:11:60:29:55:3b:fb:f9:18:c6:46:d7:de:
60:03:01:39:ec:df:fb:4e:73:a9:47:25:22:51:b4:
af:8f:52:64:3a:cc:04:df:b1:50:8a:d7:90:4b:d8:
63:b2:80:bc:1c:83:cf:77:13:4b:76:c2:ff:67:40:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:91:A4:C2:19:DD:31:4D:43:DA:75:2B:CB:4E:77:1E:0A:DD:C8:37
X509v3 Authority Key Identifier:
keyid:38:50:6D:80:AB:59:2D:E7:BE:0A:33:1B:BF:4F:A0:06:8D:41:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFBtgKtZLee-CjMbv0-gBo1BQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f94f78-f262-4207-8f18-8df8af3001bc/1/OFBtgKtZLee-CjMbv0-gBo1BQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:bb:f6:1d:9d:b4:df:5b:93:d8:0e:c3:e4:e3:0a:0c:94:e7:
c8:2a:4c:cb:10:6a:1c:d4:91:f8:2d:1c:00:9f:75:50:42:37:
86:79:b6:9a:36:99:d2:f8:2a:5a:b6:d9:96:73:aa:3e:26:82:
40:48:9d:5d:46:d1:6d:67:0e:f6:d7:a1:7c:14:29:1b:a8:a3:
4f:d9:f5:f1:d4:e9:0d:e2:17:12:f2:a0:a3:c6:da:7d:90:8f:
4b:9e:f6:2d:81:05:29:f1:52:e6:3c:a9:4b:d0:0e:f9:05:67:
a1:8b:5a:39:be:23:eb:11:e4:ee:a7:cb:cf:aa:d8:6d:49:a7:
cb:f5:24:09:2d:32:99:c1:ec:20:7b:69:d8:7a:e4:30:f2:36:
c4:db:0d:8e:69:74:08:75:db:74:cc:5e:66:40:39:d1:b4:aa:
82:49:68:41:5d:19:23:a8:ed:de:64:13:0a:6e:fe:21:c7:98:
8c:da:3a:14:bb:28:c8:00:5d:2d:54:1e:91:e5:39:25:78:8e:
ba:eb:c0:72:0b:31:fb:11:ee:df:54:79:9f:ea:de:0f:4c:2a:
4f:59:ab:19:90:37:4d:65:ed:c4:e6:6b:fb:37:32:f0:d9:a2:
4d:13:54:fa:e4:ce:08:80:c9:ae:7b:fd:13:69:2c:ec:27:7d:
c3:2f:f0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:43 2025 by rpki-client