Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
File: OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft (raw, json)
Hash identifier: dtFtO1X1B49GKMyWZoOaftWslZsz6NbjeVCW5exQxBw=
Subject key identifier: 4E:1F:C5:4C:AD:95:8C:F4:1D:28:88:18:D3:EF:E5:1A:53:5A:16:1E
Authority key identifier: 3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
Certificate issuer: /CN=3b39b2382f38512e59ed18ebfaa596c955212910
Certificate serial: 0194BCA9D4680EFAF1020547F9456E0090E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: NoOi2jkJpMpFwHCCbL-c7xjIW1s.roa (hash: Tg08HW2CXoyF7X1ERqaX+ZU6i4eKPe169u86v6bLQVU=)
2: OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl (hash: K/ZyQYtyXmvNAqaRv1+bLT+uH1WWoZ+kSWhA7LW5sdg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d4:68:0e:fa:f1:02:05:47:f9:45:6e:00:90:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b39b2382f38512e59ed18ebfaa596c955212910
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=4e1fc54cad958cf41d288818d3efe51a535a161e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:52:81:6d:9d:6f:03:11:5d:31:d3:35:85:43:
aa:4a:26:ed:eb:be:27:25:bb:f6:d3:8f:29:83:4b:
80:6c:50:93:cd:57:a2:30:83:9e:fa:62:63:a4:a9:
e0:99:fd:1e:48:de:4c:72:10:e0:13:2c:50:85:03:
b6:be:5a:45:e1:db:02:aa:a0:ee:6b:c3:b3:b6:68:
77:34:d6:25:d5:39:f8:b4:b7:20:92:06:a6:53:d2:
2b:6d:fb:9f:35:d8:af:51:89:9f:1a:92:76:40:d0:
05:2a:d4:e2:e2:c9:4f:f2:56:fe:70:19:81:70:b9:
83:74:de:79:45:8b:a5:7f:18:97:79:2a:24:36:9d:
3f:56:dc:f0:0f:eb:5c:6e:0e:d6:e8:1d:23:01:5d:
ff:55:96:4a:99:18:91:b6:8f:76:dd:fd:8a:e5:43:
d1:c0:81:ef:89:43:91:44:f7:0d:83:93:e4:4d:05:
23:81:d2:17:f0:4b:f5:95:79:6b:aa:ea:b0:33:ff:
c5:18:af:c8:6f:5f:78:71:f2:4c:7e:87:4f:64:c5:
1b:8d:ed:9f:af:46:7e:a3:99:ba:ec:02:68:bd:63:
c2:6a:3f:05:e2:28:3f:3f:68:27:8e:c7:71:74:e3:
99:d6:51:f5:bd:9d:5f:7a:02:7e:25:3b:13:3e:10:
ac:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1F:C5:4C:AD:95:8C:F4:1D:28:88:18:D3:EF:E5:1A:53:5A:16:1E
X509v3 Authority Key Identifier:
keyid:3B:39:B2:38:2F:38:51:2E:59:ED:18:EB:FA:A5:96:C9:55:21:29:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzmyOC84US5Z7Rjr-qWWyVUhKRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bdad6-0ec8-43ac-bc33-8b8d76b2d24e/1/OzmyOC84US5Z7Rjr-qWWyVUhKRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:3b:4a:56:c5:3a:53:8f:fd:fe:73:30:31:e3:c9:bc:3f:fa:
fb:8f:a9:d0:de:62:ca:da:da:c9:bb:f8:e6:15:0d:43:b4:d0:
93:58:c0:94:1d:15:5e:11:19:64:c6:4f:9e:63:ee:33:8c:b2:
5c:b2:5e:cd:56:04:a0:70:12:b7:c5:f8:da:45:00:13:04:8b:
71:be:74:a9:ed:53:91:d9:12:57:97:b1:12:14:cf:50:c9:83:
12:a0:4d:40:74:9f:f9:cb:20:08:f8:38:ca:b3:c3:40:ab:05:
55:51:a1:d5:1d:c1:7a:f2:9f:31:89:a9:b4:fe:b7:12:0d:be:
57:47:ee:ed:84:a9:ae:21:d5:2b:db:eb:d1:41:0a:6c:04:f7:
20:86:09:a3:6c:a3:39:df:8d:76:7b:7a:5f:3c:fd:45:15:21:
c6:fe:b7:b6:ea:0d:cd:09:95:ff:a3:05:a0:dc:6b:f3:c0:e0:
e5:28:bb:fc:9d:d3:31:00:dd:d4:b7:0b:54:99:b0:b1:fe:c3:
c2:04:62:e5:59:36:09:cf:74:a1:47:9b:74:7e:84:a0:b8:cc:
53:ce:c2:93:14:44:4d:e0:13:7d:81:c0:98:63:c5:83:ab:ee:
92:62:96:48:7f:21:93:98:cf:df:98:18:94:57:39:0f:b6:e0:
49:ef:33:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:03 2025 by rpki-client