Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
File: of0WwkfPRm7tMaMEu48X-jIVqqo.mft (raw, json)
Hash identifier: /3MVjoe1wnfbY6/avj7rmSzprFd9EZpDwY4eAmX1u0o=
Subject key identifier: 35:B6:2F:3B:36:01:48:6B:CE:2D:EE:17:9D:E4:1A:D9:D2:CF:77:39
Authority key identifier: A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
Certificate issuer: /CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Certificate serial: 0194BBCE549EAA73B1AF485FAF5C3991DE01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: PIjwt9cncSl25mT3dJ9vyyH9P2g.roa (hash: AHd8tSkEey/Gb5PQrQUs/SSKNf7k6H4ql5Wspc/zuFo=)
2: of0WwkfPRm7tMaMEu48X-jIVqqo.crl (hash: GAeV11DDk+AncsiTsB5akszazoqXaVOkb1NnLzKDUYQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:54:9e:aa:73:b1:af:48:5f:af:5c:39:91:de:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1fd16c247cf466eed31a304bb8f17fa3215aaaa
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=35b62f3b3601486bce2dee179de41ad9d2cf7739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:79:04:2b:52:66:f5:de:27:0d:7b:6e:71:
24:df:58:a7:a2:96:31:ba:0b:04:ba:f3:a2:d0:8e:
07:32:9c:7d:00:9f:be:71:fa:47:70:07:90:c9:24:
08:a1:03:f1:06:24:14:32:33:92:2e:cf:7f:b0:e2:
1c:af:ed:91:50:10:14:e9:5b:69:1f:eb:a1:fc:c1:
c7:2b:4e:7d:b7:4e:17:b5:1e:9a:87:8a:ca:8e:ee:
d6:1f:68:09:3a:84:af:e0:8b:a8:75:f7:40:64:6c:
7f:de:6e:3a:72:92:b0:4b:81:a3:85:e6:f2:a5:36:
4a:2f:dd:07:93:b6:70:6b:4d:d4:d3:89:10:2a:cb:
44:75:f9:ab:5b:8c:62:9a:48:ba:1d:68:17:0a:0c:
aa:ad:ff:9c:d7:31:61:61:f9:a5:e5:cd:02:0f:41:
fc:af:3b:8d:67:44:6e:21:30:f0:14:00:22:f6:15:
7f:a4:2a:ee:eb:10:02:c1:ae:e0:c1:04:b7:47:85:
bb:1c:e1:41:ef:db:f0:63:0b:d0:6c:02:32:b6:b5:
b8:37:23:50:8b:de:6b:eb:6a:89:d4:af:42:e9:dc:
8d:8f:fa:78:4a:63:a6:e5:4d:a6:2d:08:33:9d:6e:
43:29:d1:44:f6:9c:d2:5f:c4:01:01:da:f0:8b:6c:
6e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B6:2F:3B:36:01:48:6B:CE:2D:EE:17:9D:E4:1A:D9:D2:CF:77:39
X509v3 Authority Key Identifier:
keyid:A1:FD:16:C2:47:CF:46:6E:ED:31:A3:04:BB:8F:17:FA:32:15:AA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/of0WwkfPRm7tMaMEu48X-jIVqqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e3037f-338b-46f2-8f97-6cef1abab3fc/1/of0WwkfPRm7tMaMEu48X-jIVqqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:9c:8a:60:3f:5e:ba:13:28:22:3e:5a:5f:98:f2:f6:ff:d4:
1d:85:f3:93:77:a3:cf:fa:cb:cc:3b:ca:16:e4:88:6f:31:df:
3f:48:89:82:b8:e7:db:38:7f:03:5a:d5:f0:b7:2b:85:54:ad:
67:61:84:fa:f3:48:5c:89:56:a4:6d:0f:72:c6:70:a8:27:b6:
4d:58:37:e3:28:41:53:60:1f:26:1c:0b:d3:3b:63:fa:93:2e:
36:49:50:f1:1d:b3:91:1b:fa:a6:c3:1f:37:0b:38:5c:5b:b5:
bc:e3:14:31:6a:54:69:9b:9e:fe:cc:f4:02:a9:c1:8d:46:75:
41:b9:07:f7:94:2b:e6:cf:8b:7b:ab:ad:6f:e1:5d:29:bd:b3:
a1:cb:f8:d3:67:4d:f1:d2:55:18:5c:a1:0b:2f:21:eb:fc:c7:
88:d7:da:d2:84:b6:de:3e:f5:42:05:bb:32:fa:99:31:4a:8d:
1b:bf:e1:2c:bb:8a:64:c4:d7:a1:cc:05:e4:28:6e:1e:14:bc:
08:90:aa:37:a3:08:90:cc:1c:c5:34:72:7a:15:f2:de:0b:65:
79:de:81:9a:9c:77:f2:bd:51:5e:bd:57:46:2b:47:3c:57:7c:
f4:30:66:ea:c0:82:14:06:30:d7:ea:fd:92:78:f7:77:aa:a6:
a3:5e:68:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:56 2025 by rpki-client