Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
File: oJzYxxpuMygsBF2PiMOzeKz0G9k.mft (raw, json)
Hash identifier: CH6v1rjF4tElXENWIK9inEc++BcRVtpAkUUH+QsMXGA=
Subject key identifier: 3C:54:A3:CB:E6:F8:C2:B1:18:85:B1:22:A8:7A:64:9B:4D:22:CD:AB
Authority key identifier: A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
Certificate issuer: /CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Certificate serial: 0194BCA981A27BF16BD6D0324B510F93E0DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
Manifest number: 0E67
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: f_EX85HOBo1BFyi_DG9f2TZgZig.roa (hash: Ycw6wvF37nfpDEZFEWmzlexfu1BXO2hqjgXi2/ZENsQ=)
2: oJzYxxpuMygsBF2PiMOzeKz0G9k.crl (hash: Oy7Id35sTY9Xuw9RW/+EPf88mI0M51c9tvplmsLlzcI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:81:a2:7b:f1:6b:d6:d0:32:4b:51:0f:93:e0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09cd8c71a6e33282c045d8f88c3b378acf41bd9
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=3c54a3cbe6f8c2b11885b122a87a649b4d22cdab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b1:ff:86:1e:37:bf:61:0e:7a:5d:c5:3f:2b:
cf:e4:9f:96:d1:28:44:8d:54:3a:7e:e9:38:33:ea:
a1:71:01:c4:49:ea:51:95:cf:cc:1b:56:f9:7d:c7:
c7:2f:5d:f2:15:aa:5f:81:ef:f3:27:73:bd:b8:01:
6b:12:e8:56:fa:6f:99:9c:ff:c1:34:a1:98:51:93:
48:25:4b:77:7c:a2:49:47:cd:9d:8f:85:5d:c0:0c:
31:de:b8:24:b1:96:60:ea:7c:38:ac:2a:ea:82:78:
1c:ae:1b:b1:60:32:bb:08:1b:29:92:11:7f:91:7c:
b0:0a:d3:d7:f5:e1:27:27:d2:42:ae:7c:cc:89:6f:
5a:1d:34:13:49:b2:89:8d:27:82:e0:e1:c7:0a:9b:
03:b6:45:02:ef:58:17:fc:7e:9e:b9:2e:44:d2:09:
41:2a:23:19:cb:ca:4e:87:29:e7:f9:59:6b:e7:36:
ff:b8:26:e4:e1:a6:36:f0:48:19:76:ca:a8:00:52:
9d:13:0e:86:d7:44:a4:a9:11:94:57:c4:3e:cf:ed:
96:2a:ed:25:55:2f:db:f5:7b:8a:3f:cc:28:37:b8:
3b:89:76:b2:a6:4a:5d:d6:2a:ba:47:6d:bb:b7:ca:
1f:4d:ef:a0:5c:6e:79:1a:a1:80:24:03:57:b4:8e:
16:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:54:A3:CB:E6:F8:C2:B1:18:85:B1:22:A8:7A:64:9B:4D:22:CD:AB
X509v3 Authority Key Identifier:
keyid:A0:9C:D8:C7:1A:6E:33:28:2C:04:5D:8F:88:C3:B3:78:AC:F4:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJzYxxpuMygsBF2PiMOzeKz0G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0d6375-4765-4e0e-9363-6e8e07d66c9b/1/oJzYxxpuMygsBF2PiMOzeKz0G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:76:9c:35:a6:f4:21:54:4c:af:b1:d1:4e:43:4a:d4:5a:9a:
b9:2b:0a:bc:29:b9:f0:75:c9:b2:96:90:9e:8f:2d:fd:51:f8:
5e:ec:85:53:6f:ba:b0:b0:46:54:1b:8e:c9:14:24:a7:71:76:
ac:3c:e4:a9:6a:5f:1e:c7:cd:7a:5e:69:be:23:57:fb:a3:ec:
96:a9:30:b0:63:36:cb:65:b6:c5:74:7d:09:da:ef:3a:68:30:
b9:64:c9:02:b7:27:62:84:e2:0d:2b:a8:ba:6a:fd:52:1c:a6:
bd:c5:d7:ca:a3:b5:d4:b1:2f:b5:41:b4:c3:da:a7:de:f9:2d:
47:29:96:e5:f5:04:ee:63:3a:70:51:66:4a:52:ee:f6:63:e1:
85:f7:a3:80:76:01:00:22:8b:a2:55:65:e2:79:16:b9:2c:20:
54:3f:b2:a9:1c:71:1a:89:0b:27:92:26:69:ad:09:c2:91:09:
a1:57:e9:03:f4:d5:9e:c6:60:e5:3a:3a:ed:ac:e1:7f:72:ea:
b1:9d:90:17:db:f7:33:71:ab:90:3d:37:5c:77:d0:66:06:4b:
9b:57:cd:49:93:b4:20:f1:5b:c4:44:08:5a:ad:e5:36:90:fd:
f3:1f:45:b6:b4:1f:a3:fd:90:bc:70:b3:09:41:65:69:8c:76:
c4:6c:66:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:49 2025 by rpki-client