Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
File: _OTzlnKb9HjmNlSYIfb2lw2JP1I.mft (raw, json)
Hash identifier: n0QZMO7puuSDBiyNkt4u4TKY6dSZn3tkV1TRLxMhf8c=
Subject key identifier: 45:DC:BF:0D:AF:BE:FC:8F:B6:8C:D9:1D:BD:4C:EB:EC:3D:1A:5A:59
Authority key identifier: FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52
Certificate issuer: /CN=fce4f396729bf478e636549821f6f6970d893f52
Certificate serial: 0194BD4E8A17E6704095E13EE038EDF65DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: _OTzlnKb9HjmNlSYIfb2lw2JP1I.crl (hash: OcM16sFXvltEto2oMyH1RvkKCq4gR6H4K9oOPHixf2Q=)
2: adNqeNQUFWI4IAHxy1r153UdECA.roa (hash: xLvUeb8ak+yii4A1TZl7dHrog2mgx9j4/AxydjM8K8Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8a:17:e6:70:40:95:e1:3e:e0:38:ed:f6:5d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce4f396729bf478e636549821f6f6970d893f52
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=45dcbf0dafbefc8fb68cd91dbd4cebec3d1a5a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ca:d6:35:09:69:5f:b3:a4:f5:8c:70:bf:d8:
16:17:b9:d5:e5:5e:c5:88:c0:b9:b4:82:04:bb:d9:
08:f5:fd:94:27:cf:a0:87:68:e1:c4:fe:67:9a:77:
f0:28:4d:12:12:2d:87:85:d0:56:00:fa:77:19:90:
79:27:0a:18:87:b2:76:67:76:e3:3d:30:ab:08:ea:
de:47:d2:2a:ff:8b:85:cc:6d:ca:56:e6:a8:9c:e2:
bd:23:e8:17:8b:03:59:94:27:47:10:80:8e:ee:6a:
c5:78:ef:62:95:85:56:3d:5d:ae:6a:ff:4d:6c:ef:
b5:8d:45:ba:0b:09:27:56:39:d0:a1:18:9d:fc:38:
53:14:df:b6:0d:80:65:a3:3f:0c:8a:51:06:5c:e6:
66:07:ae:68:e5:20:a8:20:96:4f:a1:52:9f:4c:f5:
2e:4c:6b:c9:58:6f:8a:e9:9e:d3:5a:ff:e2:08:32:
fa:0a:71:f7:8e:47:26:b1:64:b0:a0:46:2c:24:ae:
5d:93:ba:f5:30:e0:b8:1a:f4:fb:e1:ca:bc:f8:e0:
5b:55:44:71:8a:8f:0d:98:f3:1e:71:c5:35:c8:ef:
3f:aa:d2:f7:ba:5f:e2:aa:17:6f:bd:1b:f3:4e:8f:
d8:b1:8d:5c:fc:11:bc:fa:f8:65:27:68:99:73:53:
c5:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DC:BF:0D:AF:BE:FC:8F:B6:8C:D9:1D:BD:4C:EB:EC:3D:1A:5A:59
X509v3 Authority Key Identifier:
keyid:FC:E4:F3:96:72:9B:F4:78:E6:36:54:98:21:F6:F6:97:0D:89:3F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OTzlnKb9HjmNlSYIfb2lw2JP1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/36275e-6759-4d52-b2d1-8c70de9e9b9d/1/_OTzlnKb9HjmNlSYIfb2lw2JP1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5f:2b:d3:5e:ae:5c:41:dd:c4:81:6b:de:bf:57:52:65:32:
1c:f6:50:21:d5:a1:c2:de:f3:dd:c6:dc:1a:6b:46:d7:58:32:
4a:2c:f4:74:2e:db:14:00:47:a9:92:a9:59:71:46:f1:56:0c:
0a:f6:dd:aa:46:bd:1d:11:08:cc:9e:f9:b6:71:e1:4f:32:6a:
bb:3b:29:71:38:25:11:92:e1:a8:bc:64:51:ec:82:fe:87:3e:
ef:49:fb:81:94:c7:6d:1e:53:3e:ad:a8:ae:f3:65:49:19:8f:
dc:30:12:aa:9a:13:a7:0c:f8:3c:cb:05:ef:24:3a:be:15:5d:
a1:b2:57:1f:87:2e:eb:31:b8:fd:a8:20:95:ac:36:7f:a5:0e:
75:f2:23:90:d8:f0:b6:d4:8d:96:a8:23:44:cd:9d:5c:f0:d0:
a3:a7:83:3f:1b:9d:71:f8:17:46:f0:be:15:40:6b:4b:6b:69:
e5:b3:19:00:38:e1:e8:c4:b1:5e:bd:04:26:95:2d:bd:7a:a1:
ba:ad:8c:cb:7d:c3:5c:fc:75:8f:65:b9:c4:3b:e7:1d:4f:6a:
c3:d1:a2:56:10:c0:34:22:96:68:37:d0:23:5e:3b:67:be:78:
58:99:36:d0:76:65:4f:89:22:cb:17:e0:20:8b:b3:20:88:30:
7c:a2:e2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:52:40 2025 by rpki-client