Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
File: 1kOuwi-BnPAfLGNjA12X-ODjgjM.mft (raw, json)
Hash identifier: 6EbI7eB+DsmkY8w1oHsEK+7zljJ4Qw1rmMucW/mb4Bw=
Subject key identifier: 3E:BA:03:32:8A:89:FC:87:5C:0F:62:76:D1:74:80:A2:B6:CF:DE:B6
Authority key identifier: D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
Certificate issuer: /CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Certificate serial: 0194BC72D5A0177F787CF3B5A6064575B7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:29 +0000
Manifest this update: Fri 31 Jan 2025 13:00:29 +0000
Manifest next update: Sat 01 Feb 2025 13:00:29 +0000
Files and hashes: 1: 1kOuwi-BnPAfLGNjA12X-ODjgjM.crl (hash: UvcsYrlEnQh6DQpST8fzyYIpm0/GXUa3LFB+9wLtq1o=)
2: iq3ssvUo5bXZcIWEHzsdc8Eqg0c.roa (hash: Ra9VLNdMH1vgwJCIHGEFTa1hXj9TZ6bEeh1Cxv0m8Xs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d5:a0:17:7f:78:7c:f3:b5:a6:06:45:75:b7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d643aec22f819cf01f2c6363035d97f8e0e38233
Validity
Not Before: Jan 31 13:00:29 2025 GMT
Not After : Feb 1 13:00:29 2025 GMT
Subject: CN=3eba03328a89fc875c0f6276d17480a2b6cfdeb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d8:f7:79:60:2d:94:81:66:26:59:7e:02:5a:
f4:11:bd:c4:14:ea:2b:1a:ec:12:88:12:3b:c8:f5:
89:1f:db:be:ee:8a:a6:5b:4f:c1:d5:4d:b2:4a:1c:
72:dc:4c:c2:dd:b2:75:ec:5f:1c:d0:93:90:cb:8b:
55:94:58:94:08:84:6a:3a:bf:47:0c:f2:4f:2a:5f:
b1:2f:6c:be:dd:96:52:db:a8:52:f6:e6:25:d7:87:
35:d2:7d:a3:c2:a3:76:97:fa:ab:35:a9:69:00:d1:
e7:a8:2c:0c:c2:c7:19:d0:73:55:07:c0:86:cd:df:
67:fa:21:d1:7b:5e:cb:13:b5:c0:6a:31:f9:ce:51:
3c:dd:ad:43:61:79:e4:48:de:84:9e:8f:4b:59:8a:
47:d2:94:03:62:e1:d1:d4:7a:69:94:09:4b:b2:ea:
60:79:e9:ea:c3:23:62:45:74:6d:2d:81:b1:fe:f4:
be:43:b7:47:da:75:25:b4:68:d2:c5:f9:38:d4:21:
8f:b3:0f:fc:fa:27:79:d8:59:f2:15:ab:db:c6:16:
57:4d:84:94:6b:bf:8a:98:12:42:a2:fc:a7:0b:d0:
95:01:3f:b2:6d:38:04:38:43:2a:60:96:55:cc:fc:
5e:09:bf:4d:a9:07:65:e8:84:5e:b0:17:85:e4:c8:
d7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BA:03:32:8A:89:FC:87:5C:0F:62:76:D1:74:80:A2:B6:CF:DE:B6
X509v3 Authority Key Identifier:
keyid:D6:43:AE:C2:2F:81:9C:F0:1F:2C:63:63:03:5D:97:F8:E0:E3:82:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kOuwi-BnPAfLGNjA12X-ODjgjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e29a57-6b76-4a06-a116-f6f323fd96e0/1/1kOuwi-BnPAfLGNjA12X-ODjgjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:14:06:13:20:f3:79:15:82:2c:0d:e0:b5:08:ad:88:f6:f0:
9b:28:e4:24:8d:4a:88:d5:eb:62:ce:01:d0:0e:e2:b6:ea:ba:
16:51:49:0d:1f:64:2f:42:43:00:29:f6:e5:67:23:d0:aa:d5:
3f:07:2f:80:01:91:e2:2f:bb:e6:dc:fb:f4:d8:2c:a0:5d:2a:
6e:9e:73:1b:46:a7:6d:15:53:ec:56:ea:0a:60:fa:3d:73:eb:
80:86:07:0c:38:a1:2b:28:4e:8e:12:ec:9d:3a:ed:6a:f8:cb:
c4:c4:e0:3a:e9:7b:73:ec:92:75:1f:e3:60:ae:b5:c2:c3:e0:
a8:dd:b3:fe:52:a6:59:27:20:ad:72:aa:5d:9d:5e:83:8a:55:
8e:2f:7d:07:9b:64:b2:c2:73:86:52:52:64:26:ca:ae:22:e3:
26:b1:a0:ec:93:c3:9d:ad:df:44:5f:01:40:35:10:6f:f3:3f:
02:66:56:1d:56:e0:aa:3c:17:e0:e8:38:9d:92:05:3f:f7:1a:
cd:c9:3b:c8:b2:42:bd:f2:e8:54:f7:7b:9f:a5:1b:b4:27:80:
d5:50:a4:e1:6d:cf:d5:f7:41:f3:be:38:21:0b:9e:ce:33:87:
5f:bf:d4:48:3a:6d:46:45:cc:46:8e:c2:4f:9c:3b:a2:99:a5:
4b:64:2e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:33 2025 by rpki-client