Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
File: OtEfbBeesxQqSO5ksulM3p3TYXM.mft (raw, json)
Hash identifier: c2+6yCQ0C1V3f7JDSxgwZdvBQYQkuX1s+ys8UEs0g6o=
Subject key identifier: 1A:92:8F:75:B0:C9:58:71:80:61:89:20:B6:EA:0A:0E:2B:AA:26:4C
Authority key identifier: 3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
Certificate issuer: /CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Certificate serial: 0194BD85B20C493587E989E4646A39326CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: OtEfbBeesxQqSO5ksulM3p3TYXM.crl (hash: vOYEmhEx/fuInaf51d9RvBomyrDzCqBiVNnlShuB6ZI=)
2: UcqTmJ89l8NUNjKYfDLMA156xvg.roa (hash: vHYUpfnZxXjHkU7oFNbi+l4QCTaNKF/HLN9VYPGDanA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b2:0c:49:35:87:e9:89:e4:64:6a:39:32:6c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad11f6c179eb3142a48ee64b2e94cde9dd36173
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=1a928f75b0c9587180618920b6ea0a0e2baa264c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:47:20:36:a8:fc:d1:ea:95:7f:76:ad:1c:
17:f3:b4:3a:0d:09:86:5b:52:95:95:4a:1d:ae:9e:
db:89:60:17:53:c2:b0:7b:0a:c9:08:da:2b:58:c5:
9d:ad:7c:eb:c0:58:59:c4:4a:ec:18:c4:bd:ba:5f:
ff:d7:c7:14:02:37:57:89:37:a5:67:56:c4:27:72:
51:fc:f8:8c:71:54:5b:92:99:58:bc:bd:0b:86:a0:
8d:9c:9c:f7:2a:cc:65:e9:37:ff:3b:87:46:cf:dd:
65:e2:0e:3c:d7:81:e8:28:d2:02:d6:2d:70:12:6c:
52:6c:71:4f:a2:62:a6:40:63:cf:6d:76:f7:dd:12:
fc:c4:1d:ae:a5:16:b1:07:97:7e:19:48:1f:d1:86:
58:95:7c:47:25:4f:fc:fe:1c:35:f8:63:90:70:ff:
8c:81:20:da:a6:b3:e1:41:7f:4d:c2:bd:13:3d:de:
42:32:f6:59:10:53:b6:a5:31:bb:44:b9:a2:bc:c9:
21:8c:05:0c:2e:1c:40:04:0b:b5:2e:66:1c:20:ec:
ba:00:f1:36:ce:dc:a5:45:d7:90:ed:bc:f9:ae:cf:
b0:7b:7d:17:c8:b4:01:ef:4f:52:3b:92:4b:4e:b8:
fa:22:67:e1:1d:fe:27:39:2e:7b:93:03:2a:7a:d2:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:92:8F:75:B0:C9:58:71:80:61:89:20:B6:EA:0A:0E:2B:AA:26:4C
X509v3 Authority Key Identifier:
keyid:3A:D1:1F:6C:17:9E:B3:14:2A:48:EE:64:B2:E9:4C:DE:9D:D3:61:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtEfbBeesxQqSO5ksulM3p3TYXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/7dbf36-2485-4935-a0c7-ef91d8b5b081/1/OtEfbBeesxQqSO5ksulM3p3TYXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6b:60:b5:43:5b:d7:95:09:a3:2a:95:c3:d7:ae:0e:db:74:
44:cc:b7:a1:cf:30:e6:d0:87:01:3a:40:30:21:69:85:0b:d7:
1e:56:c8:21:f3:d2:cb:ed:23:da:1e:1a:94:62:99:37:c1:2d:
63:1d:71:55:70:19:3e:14:3c:20:3d:f0:b6:9a:aa:b9:ee:63:
75:c1:77:f0:be:39:3c:90:54:ed:06:5b:b2:6b:d5:5e:da:d8:
4b:cb:63:50:9a:e7:4a:1a:b8:5f:59:25:21:60:9c:b1:01:1a:
50:b4:c5:7e:7d:a3:51:6e:d0:43:1d:11:03:8e:f5:ef:3c:b4:
62:8a:db:16:55:78:87:7b:49:30:91:0f:44:0e:18:2f:2e:bc:
c3:59:14:1e:52:76:2a:13:ca:14:31:f3:1c:f9:b5:c8:2e:a5:
36:3d:bb:3d:11:f1:d6:6a:ff:64:e3:00:07:ad:10:7d:87:b7:
31:ec:b1:fa:f4:e9:62:eb:6f:0d:8c:8f:fa:4c:31:3b:cb:f8:
71:b3:f5:0c:25:85:4d:f6:6a:71:34:32:39:69:18:b1:41:55:
49:37:da:3f:80:ce:58:66:ac:a0:55:23:1a:2e:e2:59:b8:9a:
2f:bb:9d:0d:3c:25:d0:96:ca:d2:43:6a:9c:4f:f9:68:26:66:
a9:bd:c8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:36 2025 by rpki-client