Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
File: ow9vtvXIDKSmA4J8lrO99grVY6o.mft (raw, json)
Hash identifier: ntZUwAZwxGxQkUeJlMb5eb1VA03CjdwCtxVXWv92pPc=
Subject key identifier: F4:D9:E4:21:47:EE:C7:B7:29:C0:8C:7B:E5:EC:FF:67:71:A9:69:0D
Authority key identifier: A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
Certificate issuer: /CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Certificate serial: 0194BD179A9A6FB400A3903565F672E0E8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:28 +0000
Manifest this update: Fri 31 Jan 2025 16:00:28 +0000
Manifest next update: Sat 01 Feb 2025 16:00:28 +0000
Files and hashes: 1: heeGDLviBMl1vF5Zbjvq6fTed7g.roa (hash: cRDDBBpd8BeTbZa8h3z0CLG5of55GqXqgBbWU/LBe+M=)
2: ow9vtvXIDKSmA4J8lrO99grVY6o.crl (hash: kYq6Fb+NnjZVfwk+iKUxXxMZwNAM/9UojwQXQdxQ+l8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9a:9a:6f:b4:00:a3:90:35:65:f6:72:e0:e8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30f6fb6f5c80ca4a603827c96b3bdf60ad563aa
Validity
Not Before: Jan 31 16:00:28 2025 GMT
Not After : Feb 1 16:00:28 2025 GMT
Subject: CN=f4d9e42147eec7b729c08c7be5ecff6771a9690d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:f0:24:d5:a5:4e:df:fa:24:d6:fe:ec:34:
e2:48:a9:3b:9d:37:62:5e:e5:33:c5:24:b7:9b:64:
5b:73:e2:b7:c6:e1:e2:3c:60:6b:e8:fc:37:d7:6a:
58:46:86:e5:b2:38:39:f1:c5:16:3f:7e:35:30:ed:
35:e1:c6:20:d5:6f:25:dd:c7:6a:52:6b:55:23:64:
1f:7f:c7:d2:94:a8:96:3f:b0:80:23:4e:ab:a5:e3:
19:87:93:74:b4:2f:e0:b2:b0:8d:50:de:e4:2e:8e:
3d:ea:31:04:3e:06:9e:42:eb:fc:f7:71:52:3b:12:
7c:ad:85:5b:bd:e3:bd:a9:e6:2c:fd:1d:55:fa:a9:
a4:65:38:3f:29:5a:ac:b5:62:25:6b:a7:35:57:08:
61:9b:09:94:f9:fb:a0:b5:62:35:cc:bb:5b:fe:6c:
eb:9b:40:8a:5e:e9:ca:c8:7e:5f:ad:0f:ae:9a:b0:
bf:18:82:a9:59:44:9a:50:f4:46:74:2e:ce:da:f1:
7a:a4:58:70:5d:1c:a6:fd:70:68:9b:9d:5f:70:75:
2f:2f:fa:21:0b:46:10:74:2b:49:bd:e9:42:d7:95:
ec:ff:e2:bb:23:ce:dc:67:58:d1:a8:24:9c:aa:96:
ec:3b:2e:27:02:0c:10:e6:0b:2d:c3:4f:98:dd:59:
52:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D9:E4:21:47:EE:C7:B7:29:C0:8C:7B:E5:EC:FF:67:71:A9:69:0D
X509v3 Authority Key Identifier:
keyid:A3:0F:6F:B6:F5:C8:0C:A4:A6:03:82:7C:96:B3:BD:F6:0A:D5:63:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ow9vtvXIDKSmA4J8lrO99grVY6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d7e668-f07e-438b-9fa8-80ab779eed10/1/ow9vtvXIDKSmA4J8lrO99grVY6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:02:24:77:80:c4:d3:ac:3c:5e:47:54:cc:1d:59:d3:5e:cc:
9b:5f:f4:73:f0:98:e4:df:8e:97:ec:59:0b:12:3a:f5:de:71:
e6:c0:5d:69:18:5f:bf:fc:02:b5:f7:10:b0:d9:c7:97:89:ee:
86:66:e3:cf:a1:b1:aa:14:0c:7b:7d:16:03:f6:f6:3f:e3:e3:
f4:5e:06:cc:e4:28:44:92:08:e9:e5:60:e2:89:5a:64:bb:7e:
f4:3c:e3:bb:36:40:de:f6:f8:bf:29:d9:ab:89:d4:e3:16:b1:
50:43:04:99:c0:93:05:09:98:32:0f:f0:24:a1:6a:e1:49:44:
21:f3:8e:33:88:7b:e7:9a:60:6f:8d:24:17:71:e4:0f:c8:4f:
a6:e5:26:a5:ca:9a:2a:1d:ad:76:d8:3b:33:d8:f5:9b:b9:3f:
9e:dd:44:be:3f:e1:79:bc:81:82:f3:1a:52:68:2e:bb:87:67:
12:d7:d7:f8:fc:5e:d2:7c:e6:a5:0e:be:3a:57:df:b5:b2:ef:
3c:5f:d4:fa:61:0e:ea:b7:09:6e:b5:1d:09:bb:2c:4d:2e:62:
a0:6d:d3:59:7c:b6:81:c3:40:97:b9:7d:93:6a:06:1e:ab:60:
50:0c:71:f9:89:f7:a7:ed:79:fb:c3:76:df:09:2d:6b:6e:38:
31:0b:da:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:58 2025 by rpki-client