Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
File: okz5AynEe6NDpmzWXTiDOjV7WVU.mft (raw, json)
Hash identifier: ADq5z/rKmH/Po6nJQVVKt5a6dRhfwhwh4Qxl/FBq2WI=
Subject key identifier: 19:38:E0:91:9D:B9:06:2A:A8:D0:F1:49:58:36:CA:E2:5B:9F:93:92
Authority key identifier: A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
Certificate issuer: /CN=a24cf90329c47ba343a66cd65d38833a357b5955
Certificate serial: 0194BD857942D2E9D9E96D88EF27085ECE9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 18:00:28 +0000
Manifest this update: Fri 31 Jan 2025 18:00:28 +0000
Manifest next update: Sat 01 Feb 2025 18:00:28 +0000
Files and hashes: 1: L_hJzZcxwJZunjzxLQL-YVG1jT0.roa (hash: /H7f2gZdXTvhI8V5NwcetnxeXbpLznW3EXechuUQFz0=)
2: RwOt6V2v9wJzu17DXTZnu1cti-k.roa (hash: pKpNRVrX80xh9DAepdCWEqDAUnRd1u2Llc+QIfnWV/Q=)
3: okz5AynEe6NDpmzWXTiDOjV7WVU.crl (hash: RL+sJsnk2fZVIBAV9jpz2vVdtVFYTE5XGyFyGXWCNAI=)
4: tDQAlIS1RkP7Hll5jY6GwoLQRHA.roa (hash: ZBp1qrqjsUhmRr1QqJR4LsXUqiXorK/xdRoQ9NS8bh8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:79:42:d2:e9:d9:e9:6d:88:ef:27:08:5e:ce:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24cf90329c47ba343a66cd65d38833a357b5955
Validity
Not Before: Jan 31 18:00:28 2025 GMT
Not After : Feb 1 18:00:28 2025 GMT
Subject: CN=1938e0919db9062aa8d0f1495836cae25b9f9392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4c:46:39:d1:fb:c4:f5:77:31:d9:c9:c5:bb:
10:2f:70:5f:ad:14:03:ec:95:b0:0c:82:9e:e6:d5:
93:c8:cb:41:33:10:da:40:66:87:db:08:f9:61:8d:
45:b7:dc:81:10:e8:e5:62:5d:bd:5b:b3:05:ec:b2:
2f:86:b1:3e:fd:84:6a:16:fc:cf:26:b9:3c:6d:b7:
83:a2:39:4a:25:2c:76:aa:dc:8a:4f:02:1c:5e:ea:
f8:b9:31:01:03:c5:52:c6:57:ee:7b:d4:97:cd:b6:
4d:4f:57:42:2a:ad:75:5c:c9:45:b7:3b:ca:54:42:
84:25:cc:2b:c2:97:52:74:5a:9e:80:b2:51:aa:e4:
be:10:d7:79:bb:6c:6d:11:c3:fe:80:12:d5:7e:08:
d6:e1:28:1a:73:3d:0a:96:a3:2c:66:e2:04:57:7b:
11:c2:a6:cc:d5:91:30:3d:6b:96:f3:9b:4e:58:e1:
bc:7b:47:08:6c:ab:0f:51:65:ed:69:97:62:74:52:
be:7d:76:63:0c:96:e9:05:5f:36:c4:80:0e:7c:97:
12:2e:24:11:49:be:73:b4:d5:c2:a1:37:8a:02:d7:
c3:67:47:29:11:e5:c2:76:48:06:db:d1:08:74:80:
d4:0e:8e:7a:07:9d:3b:77:b0:ff:b8:81:4d:dc:f5:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:38:E0:91:9D:B9:06:2A:A8:D0:F1:49:58:36:CA:E2:5B:9F:93:92
X509v3 Authority Key Identifier:
keyid:A2:4C:F9:03:29:C4:7B:A3:43:A6:6C:D6:5D:38:83:3A:35:7B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okz5AynEe6NDpmzWXTiDOjV7WVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/dea149-4fb8-4978-a46b-33985db8047a/1/okz5AynEe6NDpmzWXTiDOjV7WVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e0:8a:38:9d:65:07:71:64:7a:e2:3b:31:af:7f:89:1a:2b:
f0:b7:3f:7e:ce:f2:9d:42:2d:2d:a6:eb:4d:39:52:db:15:5d:
d6:04:12:2f:82:ea:5c:72:12:1c:05:c6:c9:b8:a7:81:59:1d:
c4:bd:48:69:91:02:30:fa:da:7a:a3:9b:5e:66:dc:c4:b3:99:
aa:c2:b6:96:1d:a9:8b:e1:4f:75:b7:6e:38:c1:c6:a0:69:0d:
fe:24:4f:31:b8:ea:63:8d:14:2b:aa:58:5c:cd:f7:6d:5f:30:
a9:26:65:9a:d1:e4:80:a8:c0:06:ca:07:16:50:fd:f5:8f:f3:
5e:7b:a8:58:6f:95:9d:d3:7e:46:d0:30:8f:b8:be:7d:cf:68:
f4:de:72:5b:9f:3b:f5:04:b3:e4:95:fd:37:67:63:e4:54:e8:
f7:c6:22:5b:c6:f0:c4:8f:c3:7b:47:aa:12:93:ee:9e:19:df:
20:05:71:a8:5d:1a:bd:af:08:6a:7a:71:ef:07:be:94:8a:6f:
27:d5:24:c4:a5:b8:e3:11:4b:39:9a:12:dc:e2:e3:0f:77:c8:
3e:f1:6b:e3:7c:4d:cc:20:62:6b:ab:81:c5:8f:3d:ca:06:a2:
78:37:32:dd:5e:9a:8f:3b:81:23:cb:4d:ca:e6:ae:95:9e:a8:
a6:93:37:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:24:35 2025 by rpki-client