Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
File: OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft (raw, json)
Hash identifier: 7niIhe22xtiBA91mmtTJgvv7S8+4Y0DqM/NGDsXrQm8=
Subject key identifier: 2D:F4:B7:4F:63:82:0D:1F:A5:BA:C7:06:16:5B:91:2C:E1:3C:3F:01
Authority key identifier: 38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
Certificate issuer: /CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Certificate serial: 0194BCE0A16BF2355116FFDB1BC5263D1A5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
Manifest number: 038F
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl (hash: C8dqos9ZnFnfwAhTrVwVACY44TtGSJ69BIjrWZsEoWo=)
2: TvJ9FFxxJgWb2YPWhxlxYkv76Os.roa (hash: rwvG+QNgKmW7F7MUDt67iKamV918LuVdz1uOfLvRAOI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a1:6b:f2:35:51:16:ff:db:1b:c5:26:3d:1a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38fee6c1f8cb22503925c1e9292bfd181ca95984
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=2df4b74f63820d1fa5bac706165b912ce13c3f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:b0:4d:dc:b5:6e:9a:39:f5:9a:db:4f:34:
1e:36:54:cd:4c:ff:3e:b4:32:bb:b5:61:db:f9:12:
5c:ef:6d:cc:b4:2e:57:5d:dc:e4:9d:99:e2:32:fc:
11:fb:60:be:85:7c:ff:ed:f8:30:19:c8:4a:d5:66:
08:74:68:78:04:f8:25:df:da:3e:a8:d2:96:33:da:
86:58:5b:51:d4:d3:36:1f:5b:c4:d1:ef:b0:78:3c:
c3:bf:65:b4:b2:d5:09:28:7d:21:1c:b9:75:d1:6c:
d7:05:d8:98:4f:54:86:81:76:0f:9b:a8:38:01:20:
72:f3:42:85:93:93:1a:7a:a7:f5:4b:70:97:4e:68:
92:96:54:1c:b6:5d:44:e3:fe:80:88:bf:df:ab:5e:
b7:94:a7:ac:23:40:dd:94:38:cb:24:45:49:27:52:
c4:0f:36:dc:f7:93:43:83:1a:93:93:3f:72:68:12:
68:0c:02:05:3d:d8:b3:90:51:d6:3f:7f:7a:8e:0c:
93:05:3f:62:a7:40:05:15:5f:cf:9e:fa:d7:94:7b:
1d:f3:3f:55:78:d2:e9:6f:28:e7:77:c1:cb:71:ee:
93:4b:6b:2a:b6:40:f1:8b:c0:d2:a9:45:fc:bc:d2:
9c:73:b5:81:b9:15:53:7a:d6:19:55:52:f7:ec:f7:
6c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F4:B7:4F:63:82:0D:1F:A5:BA:C7:06:16:5B:91:2C:E1:3C:3F:01
X509v3 Authority Key Identifier:
keyid:38:FE:E6:C1:F8:CB:22:50:39:25:C1:E9:29:2B:FD:18:1C:A9:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OP7mwfjLIlA5JcHpKSv9GBypWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e61985-b0b2-4e78-afbf-b5e4a6dce194/1/OP7mwfjLIlA5JcHpKSv9GBypWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d1:e3:5c:52:c8:8a:ed:f4:70:7a:85:3a:67:38:8f:48:85:
fb:db:6c:38:89:59:75:20:61:53:eb:b9:8f:b1:7a:6c:6b:d4:
52:6a:76:1a:8d:49:07:02:d5:98:76:ad:ce:a9:0e:63:31:83:
95:0b:09:30:e4:5d:fb:b8:9f:69:e1:75:ba:87:3d:5b:e9:c9:
ff:e7:a2:e7:29:eb:8c:59:17:b2:7e:b6:30:2f:ac:97:07:86:
9a:95:2b:de:5e:93:de:dd:52:90:8c:a9:28:0a:73:ab:14:ff:
b9:15:b4:20:43:da:26:73:f9:3a:ba:c5:d4:cc:47:33:5b:37:
d7:ed:6c:bb:7e:fd:20:fc:a3:ec:15:63:9d:00:50:95:58:29:
c7:1d:e0:e3:0f:b6:1b:8c:c8:36:75:77:55:15:43:f8:0f:f5:
fe:e2:20:b2:6d:65:5d:b4:8b:11:4e:e3:a5:ce:43:9c:fe:f8:
5e:0c:c9:81:83:83:ea:46:81:66:32:03:1e:47:85:a6:2b:62:
19:ff:b1:b1:2f:fb:cc:79:06:d2:33:4a:27:f6:db:82:f6:64:
5b:8e:7a:8c:e7:e8:cb:7f:52:0f:81:fb:aa:3c:22:32:d9:0c:
4e:fc:3d:3d:f4:b9:ed:eb:c0:53:e9:53:ac:db:5e:d0:e5:20:
f3:41:a6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:31:32 2025 by rpki-client