Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
File: Ojz5kZosgUbJb1oUsVdFm3lLai4.mft (raw, json)
Hash identifier: h0GKKs6wlIAMPFvS0dT9WaphuZ4dxco0PXEJPD5M+E0=
Subject key identifier: A3:E4:07:7A:0E:10:7A:E4:E6:B0:AD:48:1B:58:62:9E:F8:58:B9:25
Authority key identifier: 3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
Certificate issuer: /CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Certificate serial: 0194BBCDD8C55D94817E7B172B3EA9AA05E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: Ojz5kZosgUbJb1oUsVdFm3lLai4.crl (hash: wO8eSesyYXaovtRCgjvXYITmPwjiSMBWQ89+rI3KOmk=)
2: jm4B5paf_GVr-GpkHFsecVdl0nk.roa (hash: l8vtbC+hCoUUJ+YOCg7b9XUWVs7njLshIKLeOlHSZao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d8:c5:5d:94:81:7e:7b:17:2b:3e:a9:aa:05:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3cf9919a2c8146c96f5a14b157459b794b6a2e
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=a3e4077a0e107ae4e6b0ad481b58629ef858b925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:60:d6:43:fd:cb:ca:45:44:02:b4:1b:4a:
3a:a6:d9:a1:4b:37:35:d3:1f:ef:55:e8:1a:f7:84:
bc:f2:fb:e3:45:4b:90:35:62:71:22:1c:5b:b8:47:
42:17:fd:1d:b7:f8:fc:7a:8b:f0:26:3a:7f:3e:98:
c6:72:e3:50:e6:10:e6:ca:5b:bc:83:30:1f:60:8e:
ee:94:16:32:53:60:cd:73:7d:03:cc:f6:b6:83:8f:
70:98:a7:95:55:00:2c:a3:dd:df:d8:83:ce:bf:38:
18:16:cd:2c:c9:7a:67:69:dd:20:3c:16:db:66:ca:
80:16:4e:e5:f1:98:9e:5e:b0:2e:8b:95:7b:f2:f7:
dc:77:20:b1:d6:b8:ad:db:94:61:b3:cf:5b:28:0d:
cb:96:c9:62:a4:2a:b3:30:a8:88:a5:00:18:e5:d5:
4d:7c:f8:68:0b:95:25:d6:42:8d:04:5b:89:e6:c8:
c0:51:8e:88:3f:fe:cf:99:f0:c6:ac:c8:21:48:f8:
38:12:d5:ad:16:bf:7f:cc:0d:cf:87:65:12:b1:13:
1c:7e:97:36:fc:d1:84:e3:95:2a:8e:36:46:07:6a:
65:97:6b:67:d1:cf:38:99:1e:6e:07:15:ac:d4:4c:
be:e2:ce:02:5e:d4:72:07:d3:6c:1a:35:c3:06:ae:
f2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E4:07:7A:0E:10:7A:E4:E6:B0:AD:48:1B:58:62:9E:F8:58:B9:25
X509v3 Authority Key Identifier:
keyid:3A:3C:F9:91:9A:2C:81:46:C9:6F:5A:14:B1:57:45:9B:79:4B:6A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojz5kZosgUbJb1oUsVdFm3lLai4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/9ea49a-cf67-466a-ab5c-70cbf5149a5a/1/Ojz5kZosgUbJb1oUsVdFm3lLai4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:97:b5:b5:c4:30:0e:43:c9:a4:af:12:9f:c1:af:8f:3b:af:
5c:8a:3a:ef:07:90:e8:5a:f0:0d:6c:cd:f5:c5:3d:7e:a7:21:
b0:e4:0e:1a:dd:1a:5a:79:00:ff:c6:1f:f8:a7:36:d4:af:a8:
38:9d:2d:20:f0:e9:c8:15:60:e2:ad:f2:00:98:33:93:ec:59:
1a:39:85:d7:d5:da:fc:67:84:d8:3b:b0:88:75:c1:55:b6:fe:
7b:7b:31:f3:a6:dc:4d:e0:39:d8:e4:23:96:63:c9:ab:5d:5d:
ed:12:59:19:78:b4:94:2f:31:c7:57:15:f7:b5:eb:41:26:8f:
55:81:7c:2a:0d:fa:96:a4:75:7d:75:86:51:a1:00:c9:8a:80:
ed:1c:53:10:06:5d:38:13:7e:b7:d0:78:c5:5e:e2:0f:cb:81:
63:71:5f:79:0a:fe:a8:d0:c9:fc:cf:28:db:eb:3e:18:21:2d:
bd:00:fd:b3:36:65:22:28:85:74:f1:6d:4d:0e:5d:9f:8e:2c:
fa:86:ed:f9:73:d2:4a:bb:b5:b5:0f:0f:7b:82:a9:0e:b3:31:
ad:cf:48:30:41:e4:d6:bb:86:36:b4:62:c9:e2:b7:d2:a1:12:
07:4e:75:b5:5c:3a:c8:17:85:59:87:a3:2b:b6:5e:be:9b:0f:
ff:c6:48:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:14:03 2025 by rpki-client