Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
File: Ou655pK6npPYuVpkiNXIdWCdSuw.mft (raw, json)
Hash identifier: AO8aEaLW2wm7KjGr5sKQ5CvnqkwdCc/ivbfPUnIj4ag=
Subject key identifier: 0A:6A:25:F2:EF:58:F5:80:12:8E:C1:FD:6F:20:F0:C7:1B:B6:D2:6B
Authority key identifier: 3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
Certificate issuer: /CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Certificate serial: 0194BCA9811BEE5289FDD7BC58DC9AB64CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
Manifest number: 11E9
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: DczTrrLnDVPPLA9bSnvmxSynfMo.roa (hash: MShemdRXWsyNt1uZQs1+kFCI4xFOutzLz93AyRjtuLo=)
2: Ou655pK6npPYuVpkiNXIdWCdSuw.crl (hash: mCNC1A5IzoQPqFocCBAamswzlJwniuVBoz0upI7L81w=)
3: c4gvx7z4uTdlMuQhlvQQIKAtTuA.roa (hash: /qFGvLOPcacTCYTbqRVu0f4DWWxHlkhfiQJHtYVDsoY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:81:1b:ee:52:89:fd:d7:bc:58:dc:9a:b6:4c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aeeb9e692ba9e93d8b95a6488d5c875609d4aec
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=0a6a25f2ef58f580128ec1fd6f20f0c71bb6d26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:27:ad:ad:d2:b3:bf:3c:56:53:09:92:59:dd:
d7:cc:0f:1a:18:fc:2c:0e:c8:d1:9c:70:6b:17:1d:
6e:84:58:b9:cf:26:81:ba:85:c2:fa:3d:6a:6f:64:
80:1f:28:31:82:9d:5e:11:a1:3d:0f:00:e6:f0:2e:
06:d7:2b:5e:c7:f0:1b:3a:75:69:44:91:56:f1:24:
ae:dd:15:ee:f7:ab:ba:41:14:1b:ed:11:cf:a6:97:
2d:55:28:d3:d6:a7:d4:02:aa:e1:49:6a:95:0a:30:
5c:28:ff:fa:fd:3f:5c:d2:2b:8f:63:64:42:f4:d0:
4c:e1:b3:1f:c5:5f:ef:4b:97:51:d1:65:0f:ec:5c:
6c:64:d8:e0:01:2d:e9:41:df:53:6c:2e:d1:24:d3:
d9:cf:ae:ad:70:c8:33:03:3a:88:a7:73:12:2f:a4:
56:6c:c5:94:4c:34:0d:e8:3f:2c:a9:31:58:b0:b4:
b6:0d:c2:50:66:85:c2:1a:f6:8a:c2:4c:4f:a7:1d:
a9:81:c6:fc:b7:9a:ad:9f:d2:af:b5:7a:47:b1:13:
a2:6d:07:8b:df:e5:c7:9d:ae:b4:4c:99:84:31:9c:
d6:ea:6a:e2:ec:19:40:fb:1c:25:75:64:3a:f8:53:
d6:18:13:0f:e4:90:16:5d:4f:be:4b:f9:db:00:da:
27:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6A:25:F2:EF:58:F5:80:12:8E:C1:FD:6F:20:F0:C7:1B:B6:D2:6B
X509v3 Authority Key Identifier:
keyid:3A:EE:B9:E6:92:BA:9E:93:D8:B9:5A:64:88:D5:C8:75:60:9D:4A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou655pK6npPYuVpkiNXIdWCdSuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3e259b-b6dc-4cf4-ac19-5033f8d79be7/1/Ou655pK6npPYuVpkiNXIdWCdSuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c0:36:cd:8c:34:ef:db:06:bb:e1:5b:f0:f7:8f:d2:3e:d9:
21:53:6d:50:29:c5:06:6b:28:1b:aa:c9:49:bf:2f:8a:f1:82:
8e:df:62:ed:65:ff:2d:0d:0d:96:9d:2f:42:fc:57:8f:59:14:
67:47:55:9a:25:b1:20:ad:98:d0:57:a7:34:f6:b0:9d:08:66:
b2:05:b0:54:12:fa:5e:86:17:4c:81:c4:ad:3e:a7:49:99:2d:
60:5f:5c:05:23:b3:6d:fc:01:ed:9d:a7:15:e7:a6:04:9c:1f:
ce:7f:c8:8e:b8:e5:df:2c:0b:60:c1:84:50:18:bf:3c:f5:cf:
14:6d:de:6e:55:9b:2a:4b:b6:8f:b2:f9:e4:91:ff:ca:27:4d:
86:7a:05:6b:93:bd:1f:d8:1d:50:1a:89:27:9d:6c:7a:e4:2b:
76:ed:99:94:15:2a:26:38:02:78:ef:db:d9:4c:33:c1:bf:70:
a4:e9:5b:19:35:8d:d1:bc:42:ee:99:dc:4d:b7:b2:f7:53:ef:
e9:3b:c1:28:7a:b5:9e:8d:e2:94:d5:66:08:33:5a:44:b6:c0:
de:6f:b2:21:73:4f:b9:92:39:64:cd:cb:45:c7:e0:f1:88:d0:
dd:07:57:13:2c:a0:df:24:62:6a:eb:0b:38:11:27:e4:9e:ae:
ed:71:c4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:47 2025 by rpki-client