Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
File: OJsvo2UTg6f8aoatulbHxiB9dWg.mft (raw, json)
Hash identifier: p5m8BP0t83FD3jyz/nfkwTfw9zG5NL//oWNBomZCiB0=
Subject key identifier: D4:02:3E:1B:3B:B8:EC:BF:25:4F:96:FB:82:82:EE:5B:4F:1D:15:F2
Authority key identifier: 38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
Certificate issuer: /CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Certificate serial: 0194BC04FA9C3AC8002CBD5C757643D7529D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
Manifest number: 0C13
Signing time: Fri 31 Jan 2025 11:00:30 +0000
Manifest this update: Fri 31 Jan 2025 11:00:30 +0000
Manifest next update: Sat 01 Feb 2025 11:00:30 +0000
Files and hashes: 1: LVniV-fBUsD2XHyiKXh59lNaKck.roa (hash: e7ROoJyN3pM39RDR+x9hRmjX8OTAnl8OOTQ8mCyFwtU=)
2: OJsvo2UTg6f8aoatulbHxiB9dWg.crl (hash: 3vbHAXe/cCHGkvPJFtb757pvk2I1QQTSN9GRhEPbfYo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:fa:9c:3a:c8:00:2c:bd:5c:75:76:43:d7:52:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389b2fa3651383a7fc6a86adba56c7c6207d7568
Validity
Not Before: Jan 31 11:00:30 2025 GMT
Not After : Feb 1 11:00:30 2025 GMT
Subject: CN=d4023e1b3bb8ecbf254f96fb8282ee5b4f1d15f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:c4:ba:1d:e4:1f:ae:63:a8:cb:0c:9c:92:
9e:cf:88:f1:a3:3b:44:dd:e8:61:e9:f4:d0:6a:83:
45:85:c6:05:14:c3:19:f8:dd:da:cb:43:44:61:5d:
94:a4:73:f8:f3:1a:71:de:4b:a4:4c:6d:13:cb:b1:
fc:f9:3b:a8:89:3e:c2:d4:d7:b5:49:2a:83:ff:b2:
73:6b:32:bb:43:0a:b3:5c:3f:5e:20:42:60:94:f1:
f2:17:e6:05:d4:09:a3:7d:25:0a:03:5a:af:98:6e:
9c:79:a1:5e:d5:bf:a2:fd:47:0b:8b:59:da:00:65:
73:c0:e3:df:f5:43:24:34:fd:15:3e:12:e8:63:15:
3d:48:cf:71:5c:29:50:8e:90:2f:64:66:7e:cd:10:
21:d4:24:73:3c:da:a8:9c:99:d9:87:54:b3:b7:c8:
5a:92:b0:9a:e9:f3:59:12:72:d5:01:fc:00:db:1b:
3e:32:4c:76:48:45:e4:3b:2c:ee:2f:cf:a3:c3:7c:
f3:60:bb:de:c1:77:a6:28:d9:50:ba:1e:6c:8b:a9:
c0:f7:bf:89:d2:ca:53:2b:84:02:af:f3:d9:dd:a9:
40:84:be:ed:36:82:83:4e:54:3c:96:8f:c3:2e:f7:
14:26:0c:5b:48:86:59:da:d5:53:d1:a5:b8:af:41:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:02:3E:1B:3B:B8:EC:BF:25:4F:96:FB:82:82:EE:5B:4F:1D:15:F2
X509v3 Authority Key Identifier:
keyid:38:9B:2F:A3:65:13:83:A7:FC:6A:86:AD:BA:56:C7:C6:20:7D:75:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJsvo2UTg6f8aoatulbHxiB9dWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/1ad26f-a33e-4069-a802-373b522a821d/1/OJsvo2UTg6f8aoatulbHxiB9dWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:39:85:55:42:9e:ee:85:82:bf:c5:be:c9:d2:1e:55:25:8b:
e5:d2:a3:ef:6d:da:e5:8d:8f:9f:74:af:fd:81:21:14:07:41:
f6:40:73:c7:7c:21:ef:3b:8d:41:41:76:2c:97:75:2f:cd:8a:
22:f6:e1:52:90:93:ce:12:77:54:72:79:10:97:99:85:ce:41:
15:c9:a8:32:f9:c8:44:06:68:f0:c8:d1:dc:69:b1:0b:49:65:
a8:3f:07:6a:aa:9f:68:23:d9:db:d2:9f:12:9b:16:a1:21:42:
7e:da:c8:f6:16:7e:a6:6a:1c:90:46:40:0b:1a:0a:b8:12:fd:
7b:1f:f5:79:e7:e0:16:17:f3:f0:0c:16:5b:78:fd:b1:f7:93:
98:f2:11:21:4d:4f:ae:59:de:ac:9c:bc:17:e8:47:07:80:43:
9e:e2:71:d5:f5:a7:c4:c2:cf:bd:4e:cd:d7:1c:0a:93:42:a4:
ba:76:49:2c:24:db:7e:2e:65:5f:4a:45:87:2c:36:aa:cd:dd:
3f:7a:7a:aa:ab:ce:d2:0b:e3:8a:27:27:a5:b1:64:f5:a5:49:
18:4b:ef:54:0b:ad:d0:cd:80:4e:9f:83:b2:f8:c9:fe:7f:b7:
90:f4:5b:db:8b:95:76:42:9f:8e:48:b0:da:09:5b:08:2b:af:
74:64:1b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:30:43 2025 by rpki-client