Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
File: Ol086BmggVBQCo9KLfeetwFF0Vg.mft (raw, json)
Hash identifier: 2F+2fD4CER1Bt77WABBnbzOMZ6iLhmeXVBIQFjSlYnA=
Subject key identifier: AB:20:72:28:97:DB:3A:1A:98:77:85:C0:08:99:45:6E:0E:70:31:8A
Authority key identifier: 3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
Certificate issuer: /CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Certificate serial: 0194BCE09612A6C6B251499D021D00555FC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
Manifest number: C3
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: Ol086BmggVBQCo9KLfeetwFF0Vg.crl (hash: HsxQwyy4PdQ0rSzOoa8dL82xOEKXfGjpgapN3xHy038=)
2: P3-nPoLf6HLtGOJXHpnrHiB8Jz0.roa (hash: NsK0jdZLa6rjFdLKaavEViba3zz6REVt2o8Sgd0Ns2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:96:12:a6:c6:b2:51:49:9d:02:1d:00:55:5f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a5d3ce819a08150500a8f4a2df79eb70145d158
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=ab20722897db3a1a987785c00899456e0e70318a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:3b:6e:17:f7:76:c9:9e:29:35:c6:0b:80:
b0:a4:68:e4:c9:d8:de:30:29:e5:0d:21:3c:d3:a0:
a5:db:46:ca:f2:cc:1c:19:96:e4:fb:59:66:0e:e1:
9d:1d:2a:a2:60:2e:66:7f:7a:27:93:45:6d:25:ba:
e4:08:70:8f:e4:a4:9f:38:89:a5:90:ee:6c:8f:72:
45:44:63:65:61:2a:8b:84:87:1e:c4:f9:26:03:fd:
06:a8:15:d7:c2:fc:fb:ac:a3:15:fd:38:26:d1:1a:
18:7d:84:43:c4:e9:a0:ff:6e:43:89:61:91:55:88:
36:b0:0b:5c:0e:c9:ff:88:9d:5e:b4:b2:57:6c:2f:
28:71:7a:a5:75:59:65:04:32:7a:01:27:ee:9a:e5:
90:79:34:8b:05:c5:03:e7:74:b9:f5:c4:ec:d8:51:
b0:ae:f3:f4:5d:a5:0d:51:7d:58:e7:8c:c3:e5:3c:
f9:b7:3a:1c:10:ae:14:cf:f9:f8:2b:07:05:55:db:
fd:3e:57:3f:23:e1:33:ac:b1:21:82:f8:d8:94:b4:
87:59:a1:d8:4d:7e:b1:78:37:cc:77:e0:a2:a6:9e:
e6:cf:a3:6a:4e:7a:ff:32:21:1e:79:9c:9c:7a:9e:
d1:2d:dd:94:40:db:e6:ac:1a:2a:e9:11:06:39:62:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:20:72:28:97:DB:3A:1A:98:77:85:C0:08:99:45:6E:0E:70:31:8A
X509v3 Authority Key Identifier:
keyid:3A:5D:3C:E8:19:A0:81:50:50:0A:8F:4A:2D:F7:9E:B7:01:45:D1:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol086BmggVBQCo9KLfeetwFF0Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d8fdcf-954f-4e72-8e2c-abaec82bd8bb/1/Ol086BmggVBQCo9KLfeetwFF0Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:64:ca:83:b6:e4:ea:43:bf:74:d8:db:34:ab:d5:41:9a:0d:
37:e7:8f:12:2b:c7:d8:69:5b:8d:8e:34:d6:b6:6f:fb:3b:b6:
fb:cd:bc:8f:e8:7d:33:58:cb:5d:32:c9:32:27:08:5c:be:58:
bf:2c:c2:12:57:66:69:5f:f7:19:6f:87:db:eb:cb:b7:2c:ff:
d5:56:ed:d0:fa:4b:cd:06:68:50:73:a5:3a:e5:6e:8f:c0:74:
a3:79:82:9e:40:a2:ee:8a:26:df:b5:b2:0c:c2:3c:b4:5f:0a:
60:d3:6b:4b:eb:54:69:73:f9:79:b4:c8:91:bc:b8:ef:b9:50:
cf:33:61:6a:c0:e4:4a:19:20:19:8d:47:30:ed:90:6f:89:df:
df:6c:ec:13:5a:4c:1a:e6:b6:46:d8:81:db:dd:ce:a3:11:c4:
6e:bb:72:24:13:85:c1:df:ed:38:2a:a1:4a:85:40:a2:25:42:
2e:13:9a:a4:7e:1b:6f:ed:fc:4b:5b:c6:12:57:8c:7c:f8:bf:
e9:5c:5d:ee:50:8e:09:57:d2:ab:68:cf:43:f3:1f:57:10:56:
d2:ef:bd:75:a6:87:40:29:d5:db:2c:a0:89:f0:1c:f4:62:50:
5f:49:a2:8a:a0:0e:67:c0:c8:f8:d9:d1:7d:13:ee:c3:53:21:
d5:c4:0a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:53 2025 by rpki-client