Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d14728-442e-44ea-afd7-1b5cd5b4d399/1/OmEbwpH_HeAiVvIxU0VoBgP6Tts.mft
File: OmEbwpH_HeAiVvIxU0VoBgP6Tts.mft (raw, json)
Hash identifier: 9ClT2uPBH0vP085BYu01VDYainCCM1NWEniytm/8D8g=
Subject key identifier: 5B:AB:78:AC:11:4E:76:B7:1D:60:58:47:65:2D:27:1A:0D:F1:B3:2B
Authority key identifier: 3A:61:1B:C2:91:FF:1D:E0:22:56:F2:31:53:45:68:06:03:FA:4E:DB
Certificate issuer: /CN=3a611bc291ff1de02256f2315345680603fa4edb
Certificate serial: 0194BD4E780F42CFEEAC7C3231A2BD2F3C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmEbwpH_HeAiVvIxU0VoBgP6Tts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d14728-442e-44ea-afd7-1b5cd5b4d399/1/OmEbwpH_HeAiVvIxU0VoBgP6Tts.mft
Manifest number: 02F0
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: OmEbwpH_HeAiVvIxU0VoBgP6Tts.crl (hash: dlAL1wXYsKMDxtF9E91AKAmxodXCCCYRiFUjD6cGtSo=)
2: WMqMrN8GSXOfRqdUfWDSfGSeNoY.roa (hash: +HUvEm/zmLGsWH85M7k1xXVdXwdEmqkh5XDlJHFGu2c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:78:0f:42:cf:ee:ac:7c:32:31:a2:bd:2f:3c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a611bc291ff1de02256f2315345680603fa4edb
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=5bab78ac114e76b71d605847652d271a0df1b32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:2b:ba:ee:97:6c:08:bf:d8:77:0b:1e:8b:
ee:b3:ab:fb:8e:08:2b:0d:f2:c1:61:de:b7:3d:f5:
5e:22:79:a2:2e:58:a3:60:53:5d:fe:9a:be:b5:71:
e9:7b:f5:fe:4e:66:39:c4:a4:01:57:af:69:2b:82:
4a:08:74:a7:eb:ff:69:82:0c:1c:a8:37:aa:c8:cf:
e4:01:b3:81:be:8c:34:fe:cb:85:d8:98:20:71:8b:
4f:26:1a:10:e9:7c:a3:0a:db:59:99:c5:5e:a8:57:
03:fc:88:98:66:38:6c:a1:c4:13:41:ad:26:7f:de:
ec:67:8a:67:12:70:70:15:b4:21:06:6d:a7:50:40:
1f:fd:6d:7a:57:86:55:52:0e:94:ac:7d:74:3f:ba:
f6:df:e8:5a:81:95:39:0a:53:63:9c:5b:10:4b:e1:
61:91:88:2c:26:4b:1e:47:ab:4a:9d:40:30:c1:50:
6d:f6:58:c9:3c:50:c5:01:a6:af:b3:fb:1d:69:ff:
e2:c9:79:d3:ec:50:37:44:31:db:b2:e0:d2:b7:ab:
b0:da:f8:7e:34:54:50:30:ce:29:5c:b5:94:a1:33:
ef:08:5b:4f:2e:e0:69:06:be:51:f3:0d:5a:8d:71:
13:45:60:8c:c9:9c:36:69:86:48:29:fc:7c:da:5e:
06:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AB:78:AC:11:4E:76:B7:1D:60:58:47:65:2D:27:1A:0D:F1:B3:2B
X509v3 Authority Key Identifier:
keyid:3A:61:1B:C2:91:FF:1D:E0:22:56:F2:31:53:45:68:06:03:FA:4E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmEbwpH_HeAiVvIxU0VoBgP6Tts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d14728-442e-44ea-afd7-1b5cd5b4d399/1/OmEbwpH_HeAiVvIxU0VoBgP6Tts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d14728-442e-44ea-afd7-1b5cd5b4d399/1/OmEbwpH_HeAiVvIxU0VoBgP6Tts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:2e:73:d8:58:5c:20:29:90:cf:a4:3f:81:e3:5c:54:42:3b:
af:ad:00:58:91:d8:b5:36:27:d8:ae:15:2c:01:2b:7e:c8:27:
a0:3f:1c:95:eb:2c:38:4e:c9:74:25:d7:d5:39:33:a6:ab:e6:
30:81:92:77:33:64:93:a4:e6:dd:b1:13:e0:43:f3:80:43:dd:
2e:9c:7f:e0:f0:91:f6:ed:b2:8e:1b:89:6f:43:53:d8:be:27:
1a:11:7a:d7:a6:3e:5c:24:ae:0e:44:bc:81:63:dd:e7:8c:d7:
ec:1d:31:95:0b:e5:e2:b2:a5:06:67:ac:61:d3:2a:3d:69:26:
ee:e0:46:eb:3e:fe:ba:13:1f:82:81:f1:53:7b:f2:5c:14:bc:
d7:58:c9:77:cf:96:63:a0:66:36:f9:97:96:2e:c1:59:23:7c:
e6:80:de:94:7b:50:15:49:c9:2c:13:38:f5:fd:e1:a5:fe:26:
d7:f9:e6:20:48:10:5e:25:ba:18:2f:9c:59:16:a6:9f:81:98:
94:be:3c:27:39:9e:14:82:d1:67:a8:ac:5b:b0:50:91:7e:f8:
9f:8a:bb:29:f6:d4:1e:17:b5:7d:af:7e:48:54:83:1c:59:b3:
8f:be:1a:db:f6:eb:c9:be:94:eb:3a:40:83:22:3e:10:ff:10:
3b:c5:33:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:40:29 2025 by rpki-client