Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
File: O_zNSgBCLIZfUJO4W7howrswxGk.mft (raw, json)
Hash identifier: Shg6r7xOWOQUoUOKH/wBpQWEX5dMSCXsFEgK9H13Ixg=
Subject key identifier: AD:1E:2E:0F:86:43:EA:90:EA:0D:C0:D9:85:C2:9E:3C:C5:E4:E5:13
Authority key identifier: 3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
Certificate issuer: /CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Certificate serial: 0194BCA9A66439A13F41400A20DCE9F9CB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: 3U1ZWgNoASiRwWRzOTs9a26_aSI.roa (hash: rfiPEMHu4Dy2ke39aiCtx6HNVMRJPDS81QuXHyTH8CQ=)
2: O_zNSgBCLIZfUJO4W7howrswxGk.crl (hash: k0k4BQBRAw9MP6XfRxHzPYlKg7SgGhmLLSUW8+JybYg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a6:64:39:a1:3f:41:40:0a:20:dc:e9:f9:cb:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=ad1e2e0f8643ea90ea0dc0d985c29e3cc5e4e513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:42:f1:db:77:ab:41:79:90:89:50:45:8f:a2:
16:38:be:79:e0:59:ec:54:76:cf:71:f8:27:7c:aa:
84:36:ee:db:3d:73:99:48:b3:68:2a:0a:e4:91:d8:
d6:00:dc:cf:d7:e6:43:21:a2:d6:7f:a2:82:e4:f3:
e6:09:03:4d:88:b2:8e:97:ad:7b:88:7c:26:0b:0c:
df:4c:c0:a9:fb:a4:6d:e0:1d:e8:c3:93:19:72:54:
5d:01:06:29:3f:aa:f1:46:5d:9a:8d:9c:7f:cc:7d:
a1:13:27:f9:cc:d4:2c:af:1a:20:22:a4:cd:6f:c5:
95:c4:f0:c4:d1:bd:2c:41:09:cc:f6:6b:36:3a:6b:
3d:0c:2a:b3:2b:60:c9:ce:30:9f:3e:15:d6:fb:39:
20:72:0b:f7:56:c2:5b:95:31:e9:29:bf:81:8d:94:
ea:f1:a8:f2:dd:af:4b:f2:54:fa:19:c6:1a:7d:43:
8b:75:8d:93:49:59:e6:c9:91:e1:fc:f8:01:3e:54:
cc:f8:0c:88:bb:9b:d3:1f:76:62:98:0f:80:a4:34:
22:80:87:99:25:ba:c6:94:45:24:84:d8:eb:e8:47:
2f:86:fe:bf:2b:84:46:a3:03:54:a9:eb:a9:58:c7:
68:08:89:f8:f0:47:99:5d:37:29:02:33:ce:1c:c6:
a0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1E:2E:0F:86:43:EA:90:EA:0D:C0:D9:85:C2:9E:3C:C5:E4:E5:13
X509v3 Authority Key Identifier:
keyid:3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:87:d1:02:63:65:ac:c9:51:a4:4c:0a:7b:0a:cb:ea:56:56:
dc:d5:14:2a:2a:73:22:49:76:e2:3e:80:90:03:b1:88:32:cb:
00:8e:4e:df:30:06:6c:c9:4e:e9:ef:f4:9d:e9:aa:37:30:31:
ea:18:d5:62:77:7a:b4:2b:6b:3e:5e:fe:09:11:ed:fb:fc:cf:
35:9c:ba:86:65:41:ff:8c:22:43:e1:cd:20:a2:6d:fc:83:1d:
b7:3d:c3:af:15:d6:e0:42:15:53:6b:95:cb:08:0d:d0:4a:d1:
33:25:6c:e7:f5:cb:5e:b0:b5:cc:03:56:3d:c9:10:66:a2:b5:
ec:55:a5:7d:df:49:a1:60:ce:fa:b7:08:17:9d:a5:a1:40:40:
cc:ad:b6:5c:54:fe:54:a2:80:96:3c:9b:cc:89:cf:54:e3:f6:
51:29:fa:d3:f7:56:32:10:14:65:75:bd:45:4e:3b:8a:17:02:
c4:14:d2:73:2e:45:78:ce:64:55:60:59:6e:ad:93:7e:13:b3:
a0:b5:04:f9:8e:26:1a:bd:e5:47:96:89:d6:b5:f9:f5:64:23:
8a:cc:d9:b1:2d:3d:13:b9:05:5d:c8:7d:a3:77:9e:29:db:ff:
ba:39:4c:66:cf:e3:69:9c:96:a9:7f:bc:67:ba:a3:11:44:2c:
77:3b:4b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:33 2025 by rpki-client