Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
File: OcqgvSVNGof0uzDbO1E_25r2JfY.mft (raw, json)
Hash identifier: l467y4Rlp61lYGb48a5pmDBct1q9IFB12k5786Z33FY=
Subject key identifier: 39:EE:B1:41:49:2A:4F:7A:1F:F5:7D:1C:31:F6:98:2B:F0:6F:F9:9E
Authority key identifier: 39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6
Certificate issuer: /CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
Certificate serial: 0194BD17B9AC388EAFFE00BDF67263ADAB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
Manifest number: 063C
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: OcqgvSVNGof0uzDbO1E_25r2JfY.crl (hash: bv2ETqFLd4huDcA5pIztMGkcvKyI36AiUbQb5lZUj9E=)
2: _QTwS8nAMSFeKK0ZzzPsIxYgPqo.roa (hash: Q/O46iBV3y1aR3ABGTzdA2RTNwov3wLVP1w6lO4+h/M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b9:ac:38:8e:af:fe:00:bd:f6:72:63:ad:ab:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39caa0bd254d1a87f4bb30db3b513fdb9af625f6
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=39eeb141492a4f7a1ff57d1c31f6982bf06ff99e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7b:64:17:a0:53:96:40:d7:21:11:9f:a1:b2:
c1:06:66:ab:6d:eb:64:e0:de:86:e8:95:b5:43:e0:
02:9d:f9:5b:8d:74:b9:5d:03:fe:db:a0:9d:7c:9c:
d9:e0:45:ef:5b:dd:f7:70:1b:32:1b:8a:5c:c2:c2:
58:21:16:80:d1:cc:ff:9a:63:37:e1:9a:92:b1:09:
1e:91:be:53:a2:b9:6e:86:ad:e9:a7:90:78:0d:95:
66:5e:4f:28:ce:4d:db:d6:9a:9a:98:f5:43:be:49:
b6:40:6e:34:a5:b2:52:96:8a:0c:6b:2b:0d:c5:1b:
25:71:d7:c5:d3:83:6a:a4:c1:8b:76:53:02:10:4f:
97:f2:24:a0:bd:a6:d7:f6:9b:01:c2:21:f9:9b:7f:
00:61:95:a9:c9:1b:41:0f:99:cc:b1:e0:ad:31:c3:
85:e4:3c:27:bf:e8:96:23:33:68:44:c5:96:78:a4:
2c:46:55:ef:f4:90:e2:7c:8c:ee:d6:69:7f:cf:11:
36:a0:2d:92:3a:84:95:35:89:85:ed:11:59:69:60:
35:9b:0a:82:58:97:7c:f6:3f:28:dc:c2:f5:c4:fb:
d7:91:9d:8e:29:f9:1d:71:ef:62:3a:4e:0f:80:8e:
29:5f:c8:28:f7:72:b9:d8:09:1d:49:8c:f8:29:e1:
b7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EE:B1:41:49:2A:4F:7A:1F:F5:7D:1C:31:F6:98:2B:F0:6F:F9:9E
X509v3 Authority Key Identifier:
keyid:39:CA:A0:BD:25:4D:1A:87:F4:BB:30:DB:3B:51:3F:DB:9A:F6:25:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcqgvSVNGof0uzDbO1E_25r2JfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/1f0955-4d62-433b-b18c-7c37e639bf0f/1/OcqgvSVNGof0uzDbO1E_25r2JfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:74:4f:28:71:49:03:68:5b:1c:a8:90:da:ad:07:5e:74:ee:
91:3e:c1:f1:09:66:b6:e7:a9:be:3c:d2:9b:1d:7d:37:76:ee:
55:d5:e3:ae:39:c5:a7:0f:80:00:42:77:66:ba:c6:7e:7c:9e:
26:59:d7:e3:5a:4c:80:33:0f:3b:90:4f:af:c4:df:a5:3c:57:
3f:ca:0a:e1:17:e3:ac:f8:f3:2b:84:b9:5d:c9:a4:c6:d4:7e:
80:4b:62:aa:4a:70:ec:03:06:46:a9:4e:c9:8e:4c:f9:95:75:
fb:8f:5a:61:1f:b1:47:9b:17:c9:eb:64:4d:ed:43:a5:b0:50:
56:74:82:70:0e:c9:a9:9c:0b:3d:09:1d:3c:d5:03:db:9a:30:
2a:d9:67:90:8f:90:53:32:35:26:65:84:43:e0:84:6c:aa:70:
bb:9d:59:36:78:35:05:28:88:09:67:45:1c:a9:0f:b5:7b:7e:
5b:0d:2b:b1:ee:81:e2:ed:ef:42:d6:ad:de:32:c8:8c:40:2c:
4c:5e:8b:50:8c:bd:f8:63:76:25:4e:f6:07:92:c8:7d:0e:3b:
28:cc:ad:6c:dd:c7:25:f1:96:e7:69:b7:75:09:51:3c:1d:e4:
be:ec:d7:cf:65:09:0a:74:25:05:5d:ce:da:9d:63:09:e7:ca:
a0:c3:d7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:39:03 2025 by rpki-client