Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.mft
File: OLkSoeqxjrcpdF6JeBOLJcRAd2E.mft (raw, json)
Hash identifier: IH+OFDAzuyyGgzSD5wTyGXbYdtP7efdiMZFDQVMH+fU=
Subject key identifier: D7:73:BB:1B:40:F6:9C:91:64:04:3E:E5:F8:B7:CB:C4:D9:D8:CE:CE
Authority key identifier: 38:B9:12:A1:EA:B1:8E:B7:29:74:5E:89:78:13:8B:25:C4:40:77:61
Certificate issuer: /CN=38b912a1eab18eb729745e8978138b25c4407761
Certificate serial: 0194BC3C78E60DB5AC75C79AB42427277153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLkSoeqxjrcpdF6JeBOLJcRAd2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.mft
Manifest number: 0B0C
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: FVz1Gs3goS-mz1CP7z4LNut0fHE.roa (hash: +EzGyBevLVejen0VLkmFtejit+8sBRd5jz7yFu64Sbw=)
2: OLkSoeqxjrcpdF6JeBOLJcRAd2E.crl (hash: +fuI1uWroL3EyjJdUoF/SSm4S+viaybdQiDmBJb6vD4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:78:e6:0d:b5:ac:75:c7:9a:b4:24:27:27:71:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b912a1eab18eb729745e8978138b25c4407761
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=d773bb1b40f69c9164043ee5f8b7cbc4d9d8cece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:40:db:87:38:ab:0b:98:18:c9:92:57:f6:86:
6f:64:52:5f:57:e2:1c:0f:cd:a3:18:54:a1:e9:84:
cf:8b:68:cc:14:12:94:4e:06:9c:1f:bd:d5:c7:06:
54:f5:34:0a:91:43:d4:92:37:9e:36:49:7f:94:75:
bb:4f:98:bf:c6:27:16:b1:52:87:5f:c4:45:55:b1:
23:5f:30:21:d4:50:02:30:47:bf:b4:89:51:24:15:
83:80:29:20:14:1d:01:0c:37:3e:35:98:c2:fe:67:
a6:4c:c7:d6:dd:e4:d5:5e:e3:d4:71:a6:ba:da:f4:
0f:31:d0:0f:1f:af:4a:5b:95:f5:84:3c:44:2c:c1:
08:16:11:18:94:5e:c6:ba:c6:15:fd:b1:34:2c:95:
3a:25:91:dc:2b:35:c0:49:33:a0:5f:6b:14:b1:de:
08:75:d8:db:c1:22:78:54:6f:67:10:e3:a7:48:2d:
69:db:aa:8d:6c:89:d3:d5:c5:28:f4:08:f3:78:4c:
4b:d1:d0:47:95:ea:4b:73:4c:e8:f1:b8:da:25:19:
43:bc:07:eb:05:61:1c:ee:6b:56:71:be:49:f9:b6:
9f:2c:f8:57:ea:e1:30:30:37:bb:d1:e5:8f:39:43:
e3:df:f2:83:4a:b4:d5:bf:24:72:4a:4e:6a:bc:03:
dc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:73:BB:1B:40:F6:9C:91:64:04:3E:E5:F8:B7:CB:C4:D9:D8:CE:CE
X509v3 Authority Key Identifier:
keyid:38:B9:12:A1:EA:B1:8E:B7:29:74:5E:89:78:13:8B:25:C4:40:77:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLkSoeqxjrcpdF6JeBOLJcRAd2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/3fae96-4aae-4544-bef2-c1d521166bec/1/OLkSoeqxjrcpdF6JeBOLJcRAd2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b5:26:6c:c9:eb:b0:24:ca:e5:3a:64:60:32:8a:5b:a2:a6:
19:c2:c8:89:f1:09:2a:02:07:33:1b:e2:e8:c9:0a:7a:bd:44:
9d:e6:21:1b:d5:db:1c:6d:89:03:52:5b:4f:72:4b:1f:0e:d7:
1e:c8:2f:00:05:0c:b1:1e:cb:74:76:91:5d:f2:72:18:75:9a:
31:11:8f:cc:77:13:25:8c:69:12:8d:f9:2b:5b:90:ab:e9:2c:
dd:55:0c:d9:75:95:75:a3:55:4f:f7:38:c3:1e:05:72:ea:ec:
f1:f1:ef:96:bc:b6:d5:bc:04:ef:45:b5:9f:d4:c5:20:8e:e4:
6d:ea:fd:7c:12:74:ed:94:1d:f4:b4:f8:4b:bd:e0:0d:81:66:
86:d6:34:65:da:f2:fb:c8:73:61:27:60:a4:bb:ce:37:3e:ba:
9b:1e:d1:97:d5:68:de:fd:d2:99:70:3c:2d:bc:e9:f1:e7:68:
2f:f7:5f:36:44:13:78:40:4a:92:1d:d3:31:d7:46:74:69:f8:
ca:9f:d7:f9:5c:44:9f:c8:1c:d6:60:ba:11:8b:40:e6:4b:6e:
6b:0f:06:4b:71:70:62:81:3d:79:0f:b0:0a:85:f6:a1:15:fa:
68:13:55:5e:5f:73:15:40:18:12:86:89:f4:85:2e:75:59:89:
e5:be:45:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:13 2025 by rpki-client