Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
File: 3OVHLr4StLVw-CcUOHkX7LTE3lM.mft (raw, json)
Hash identifier: Yc7RxmvbPEBF5awSW4lSn/y6osaf+xzjHJbZ52rh6iI=
Subject key identifier: B0:C6:3A:E6:9E:0B:EE:D8:B1:29:DF:8F:C8:C3:40:8A:80:1C:26:9A
Authority key identifier: DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
Certificate issuer: /CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Certificate serial: 0194BC3BFFA3C4CF527E5F5951E8E5609C21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
Manifest number: 0F5D
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: 3OVHLr4StLVw-CcUOHkX7LTE3lM.crl (hash: 19G581lD+PDCtho4pRfwvqzKljmjVWKXV2oiL51KsQs=)
2: p3WBjzteYXQZYIX5zj87ra338og.roa (hash: UdBIIG65TiaVNqypoeNqjZfjwvGuuMkdscTIPnMkAs8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ff:a3:c4:cf:52:7e:5f:59:51:e8:e5:60:9c:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce5472ebe12b4b570f82714387917ecb4c4de53
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=b0c63ae69e0beed8b129df8fc8c3408a801c269a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:ee:85:21:71:54:39:76:33:9d:de:f3:8d:
1c:70:4c:fb:80:ad:92:23:7e:8d:44:6a:b7:f8:fa:
b7:05:7e:37:27:08:bf:8d:76:c8:9f:a8:ef:4b:ac:
2b:a4:c6:12:78:20:c1:43:7b:00:0f:98:ff:d2:ed:
d9:37:4f:d3:7d:75:65:a3:69:71:23:6d:a9:43:64:
70:cc:5c:dd:70:18:33:84:81:67:cd:24:79:7d:f8:
df:4f:57:e6:cc:79:ea:2c:93:58:59:e8:4b:fa:03:
dd:94:9e:77:36:e6:e2:fb:23:e9:bf:ab:5c:d9:ba:
22:09:ee:4f:4a:ae:fd:d4:a7:31:b4:1d:88:67:dd:
01:f3:c3:c3:7a:95:cf:65:82:da:11:0a:8a:43:33:
31:ee:4c:4b:bf:0e:c5:d3:eb:26:d3:3d:46:56:94:
f5:40:24:fe:53:7b:eb:b9:19:4b:e0:5b:8f:80:c0:
a3:bd:2c:27:28:a2:3b:c4:42:bf:0c:03:4e:52:ac:
37:03:d2:5c:85:d4:ed:dd:b6:54:54:c8:e0:c7:bf:
5b:13:5e:24:7e:bb:cd:1a:e1:37:2d:29:2d:1f:04:
45:a0:24:f3:f2:27:08:b2:35:89:0e:6d:eb:39:49:
b5:19:93:9e:b6:70:45:31:5b:60:9f:4f:64:ad:9c:
c7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C6:3A:E6:9E:0B:EE:D8:B1:29:DF:8F:C8:C3:40:8A:80:1C:26:9A
X509v3 Authority Key Identifier:
keyid:DC:E5:47:2E:BE:12:B4:B5:70:F8:27:14:38:79:17:EC:B4:C4:DE:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVHLr4StLVw-CcUOHkX7LTE3lM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5af1d6-5597-4dcb-8c29-9f05f135dcf9/1/3OVHLr4StLVw-CcUOHkX7LTE3lM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4b:fd:63:cd:9d:eb:77:97:d0:24:71:1c:9f:94:44:9a:b7:
dd:86:9c:47:c1:3b:d4:64:be:90:4e:e5:c0:36:2a:9b:84:e2:
4d:3a:e2:d2:f2:8a:11:56:ec:57:c5:ca:63:17:f8:b0:94:e3:
dc:98:11:2d:69:91:02:da:fb:d3:5f:05:1e:c5:a1:b5:b2:ed:
9f:48:2a:42:14:b9:af:69:d1:32:e1:59:f6:92:14:7a:78:dc:
96:32:9c:18:ed:59:b0:fc:6e:6c:5b:d4:32:d1:8d:d8:b9:29:
45:a4:24:1c:33:77:0c:b6:27:8f:2c:d4:37:3a:db:d4:0c:a7:
95:a1:99:46:42:fc:5b:8e:9e:6d:32:07:69:c9:b7:12:10:f8:
05:2e:5f:8a:40:a7:c0:52:ea:8a:73:f0:dc:79:7b:3d:31:db:
13:21:c0:f3:30:d2:c9:a5:dd:ae:66:b2:05:d5:67:cc:79:00:
a2:4a:2f:96:5b:8f:ee:ca:31:0f:1c:de:bf:19:bb:62:ea:cc:
9d:80:c4:3b:19:c4:b8:e0:ec:cb:71:0f:ac:8a:7e:31:e5:04:
59:a0:1e:5a:78:dc:7d:63:43:19:06:65:c2:ad:df:c4:e9:c5:
86:ad:af:af:29:c1:ef:38:14:55:71:a0:c6:06:75:36:18:be:
88:c9:6d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:47 2025 by rpki-client