Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
File: oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft (raw, json)
Hash identifier: OAZ7uLRQDgfXfPBxR7CNuE6RPfPzyFwk5p2T8ulDjU0=
Subject key identifier: 8B:00:C1:32:3D:B0:1A:2B:A4:C8:86:F4:A3:58:45:FD:C6:27:F7:1F
Authority key identifier: A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4
Certificate issuer: /CN=a006ca06965bee681c3531b426b599a401e1a5a4
Certificate serial: 0194BCE05B316BD2C5EFF8E2120D167224FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
Manifest number: 0534
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: 4C0OXayjBs5jaM2cyHhqCBjs15k.roa (hash: Z1AW2ktKl7nH/pif3t4jJj3aESh4kYBCdiYTjw37+0A=)
2: oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl (hash: p32N6Vp6vU0TOapNbDU8bNMTofvuM/yvaLaWF6t4oFY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5b:31:6b:d2:c5:ef:f8:e2:12:0d:16:72:24:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a006ca06965bee681c3531b426b599a401e1a5a4
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=8b00c1323db01a2ba4c886f4a35845fdc627f71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:dc:b4:c9:a0:1b:e4:f1:5c:71:48:b9:70:72:
89:31:a2:4e:df:78:79:d0:4a:1e:31:e1:03:ab:43:
82:53:fd:28:0a:b4:c7:b4:6a:6c:29:ab:ed:58:cc:
74:45:fd:6a:32:55:32:36:10:67:5a:cb:93:63:cd:
6b:08:4a:c5:79:0e:18:dc:a6:bb:d4:59:0e:a5:d8:
28:57:ae:c8:9a:8f:c6:5b:7f:fe:7c:40:81:58:67:
e8:2b:d1:2e:26:c8:1e:16:fb:b2:e0:54:de:92:b9:
d7:4d:71:b1:2b:db:ed:43:83:93:de:6d:4c:e7:d2:
01:ab:e0:d9:d4:c5:72:a9:fd:15:30:28:a2:03:b8:
aa:97:a6:11:d8:f3:d1:4e:02:9c:fc:04:43:bf:38:
be:0f:bc:7c:bb:50:5a:07:3b:42:9c:0c:61:77:7e:
1e:e3:51:f3:f3:56:43:fb:5d:e1:99:14:06:a6:1d:
da:f6:f4:0c:8f:9f:94:ad:47:c2:69:7c:15:c3:73:
bb:c2:0d:ba:28:99:da:c5:83:9a:90:f0:c2:0f:ef:
36:d1:b3:c8:47:55:57:65:31:ca:8f:79:cb:3d:c7:
77:14:e8:69:43:e3:9b:b2:52:41:09:5e:5c:6a:36:
0d:ff:a0:1a:b4:01:b5:70:fd:dc:96:be:b9:d1:60:
0a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:00:C1:32:3D:B0:1A:2B:A4:C8:86:F4:A3:58:45:FD:C6:27:F7:1F
X509v3 Authority Key Identifier:
keyid:A0:06:CA:06:96:5B:EE:68:1C:35:31:B4:26:B5:99:A4:01:E1:A5:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/7e2b0a-a8ed-47b7-9d74-ab975f7d3533/1/oAbKBpZb7mgcNTG0JrWZpAHhpaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:30:0d:85:a1:77:5b:d5:71:8a:02:5c:eb:f1:72:c6:3b:ef:
4a:8a:73:b1:b5:90:1a:5e:9f:1c:88:1d:5c:81:92:40:7f:58:
1f:9e:13:ae:2d:ea:b8:10:46:b3:0d:30:3c:5b:33:50:3c:99:
69:f2:6f:43:bd:a6:f4:18:01:f9:e7:f5:32:d9:a9:36:2f:ec:
b2:5c:02:2c:84:54:ba:76:d9:bf:eb:da:6e:78:3a:3e:59:62:
1b:fd:a7:e0:0b:44:98:8c:83:c1:84:76:d1:7e:d2:ba:47:fd:
fe:03:54:02:0f:32:97:c6:d0:e3:fd:05:cd:00:43:03:44:06:
07:c0:38:f4:00:11:b8:3c:df:fa:6f:61:51:44:c0:74:67:ad:
ca:af:25:fd:3d:24:3d:3e:9d:6e:ab:82:1e:88:3b:e6:16:41:
ba:d7:11:b2:04:c2:5d:b9:af:0e:9f:1d:2f:e4:f8:57:38:62:
39:cd:9c:6a:eb:03:c8:54:33:b7:27:86:1c:c3:1b:cb:f3:fb:
ce:af:2f:f7:23:0f:6d:ca:d4:16:31:fa:3b:94:72:14:15:64:
b2:b2:01:dc:fe:fe:90:20:a9:6a:11:04:56:c2:cc:64:03:cb:
04:9b:ce:6b:68:a9:68:16:3a:24:7c:6b:80:6f:5d:93:ae:94:
13:bc:48:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:09 2025 by rpki-client