Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8fca7f-a9ed-48db-a7e2-3a6fe3ba5c4d/1/OKHYmhOz67e_WeQ5Xz8Niop9Ys4.mft
File: OKHYmhOz67e_WeQ5Xz8Niop9Ys4.mft (raw, json)
Hash identifier: kXIloooHqV3nA8q/RSJ2GEtdb2N0tUPdk1YANSMLhVk=
Subject key identifier: F5:5C:C5:EA:A7:5A:0B:57:6B:DD:CA:48:FC:16:68:F1:B2:21:C2:04
Authority key identifier: 38:A1:D8:9A:13:B3:EB:B7:BF:59:E4:39:5F:3F:0D:8A:8A:7D:62:CE
Certificate issuer: /CN=38a1d89a13b3ebb7bf59e4395f3f0d8a8a7d62ce
Certificate serial: 0194BCE0DC662F87A31E6F0308286D45B262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKHYmhOz67e_WeQ5Xz8Niop9Ys4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8fca7f-a9ed-48db-a7e2-3a6fe3ba5c4d/1/OKHYmhOz67e_WeQ5Xz8Niop9Ys4.mft
Manifest number: 03AC
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: OKHYmhOz67e_WeQ5Xz8Niop9Ys4.crl (hash: FBh9tf/fEpVIy+W0vDaoKdXtWj5v66ZK9UjfHLQHbzc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:dc:66:2f:87:a3:1e:6f:03:08:28:6d:45:b2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a1d89a13b3ebb7bf59e4395f3f0d8a8a7d62ce
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=f55cc5eaa75a0b576bddca48fc1668f1b221c204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:5b:28:94:bf:e3:b1:6c:e5:a9:b2:dd:cf:
e1:43:1d:7e:bd:91:c0:c1:3f:11:ac:f7:bc:b5:34:
30:89:fc:09:0b:91:cc:43:49:f5:5f:64:16:cf:13:
e9:25:77:4c:57:35:58:37:68:44:9e:d4:50:ba:59:
a0:db:c5:be:8e:6f:76:3b:5c:0d:30:3e:d0:9c:07:
60:bb:57:c7:b2:cb:25:f2:92:51:0b:e9:5c:63:4c:
b1:d0:f8:f7:fe:d8:49:24:5a:2d:f6:bc:46:c9:9c:
4a:30:cc:47:14:c5:a5:fe:98:b4:97:ef:ca:96:ac:
5b:e2:a7:28:c6:ab:5d:08:bb:95:df:69:db:7f:68:
31:9d:09:2d:d6:0a:e8:4d:93:ea:a2:25:e0:34:e5:
b1:f5:60:89:b9:63:ea:b0:60:30:62:79:4e:ff:d1:
24:8f:86:7a:fa:df:3b:42:28:7c:a1:d4:fb:fd:ab:
35:ce:45:c2:e8:bd:c1:47:ef:07:53:5f:08:16:d0:
96:30:22:bc:da:4e:1c:c6:7c:b2:35:73:7f:94:36:
b7:bf:21:72:5b:4a:56:ca:5e:5b:5b:c0:69:7a:92:
7c:90:6c:6a:c4:d1:c8:ec:5d:c6:5e:2f:0c:d7:6d:
45:a4:ce:c7:c6:55:c5:19:35:6d:05:8f:fc:f5:c8:
8e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5C:C5:EA:A7:5A:0B:57:6B:DD:CA:48:FC:16:68:F1:B2:21:C2:04
X509v3 Authority Key Identifier:
keyid:38:A1:D8:9A:13:B3:EB:B7:BF:59:E4:39:5F:3F:0D:8A:8A:7D:62:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKHYmhOz67e_WeQ5Xz8Niop9Ys4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8fca7f-a9ed-48db-a7e2-3a6fe3ba5c4d/1/OKHYmhOz67e_WeQ5Xz8Niop9Ys4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8fca7f-a9ed-48db-a7e2-3a6fe3ba5c4d/1/OKHYmhOz67e_WeQ5Xz8Niop9Ys4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:df:8c:16:33:76:32:b1:26:18:1d:c0:ab:ff:87:0f:d7:3b:
b2:a0:95:ed:b0:87:b9:d3:11:4b:a1:3b:40:d0:1a:6a:ab:a0:
16:f0:14:14:75:59:e5:a4:04:b3:dd:f8:5d:07:e1:34:dc:a2:
f2:c9:ba:ec:6e:10:db:55:de:c8:df:cc:f4:98:7e:c4:c5:2a:
b3:d4:93:74:6c:dc:8b:13:fb:79:bf:fb:28:a1:a4:33:4a:48:
3a:9e:25:a0:9a:d3:de:e5:4e:fb:ad:3a:73:c3:0a:83:d4:d6:
d0:d7:e5:d1:cd:21:f2:31:2a:3f:2d:90:93:2f:cd:1e:1a:5d:
2f:ba:be:ec:c4:8e:a7:5e:21:d5:ab:a2:22:91:e0:ad:86:9c:
67:c0:4e:99:8e:45:ce:85:f2:75:66:b3:5b:d9:7f:bc:a0:6f:
53:24:83:22:09:f6:a2:dc:72:39:63:69:5d:a9:5b:35:a2:a5:
fa:2e:2a:af:87:5e:f1:4e:89:7a:d5:62:54:b0:75:37:95:85:
60:cd:a5:0c:f6:45:8b:d8:b2:34:29:bb:35:31:a4:65:bc:bc:
67:ee:33:e6:6f:17:fb:40:9d:bc:df:de:d6:f0:50:c2:36:ae:
ec:79:dc:3d:ea:f9:16:e9:04:d6:11:d1:9c:4b:22:36:d7:2b:
8c:ee:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:20 2025 by rpki-client