Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
File: o1xUQ64gP2R-4wa573LaxQtd9RQ.mft (raw, json)
Hash identifier: BinIyx2As4/wayDBkjempxoTKR/OclHNcYR45j5Cpuw=
Subject key identifier: 7D:BA:1E:3B:36:EE:6F:5C:37:38:52:C7:CD:19:78:0F:EA:A1:1D:79
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 0194BCA9A77C4B374BD9108995A0F16B8F7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
Manifest number: 1173
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: TzcKOj9Zbs6KbPYh_IUNdJFuw_o.roa (hash: Nd8DGSNjI4U6VllZfkdb3mT7nzYndNyfiOfx/EMJxwE=)
2: VUbUkp8nNfi8QcLP1MtPwMzqOp0.roa (hash: VuYMTVLRYxWMtUC1yaRKRtUhGRVxqU/rFMLN7WkXA8A=)
3: o1xUQ64gP2R-4wa573LaxQtd9RQ.crl (hash: BPCIZRm/5VkPEN9rnZ5q1hCQkTEHZ2/GPnQ+ihM56l8=)
4: sMVCu-0bJfKqyvTZHFvSmvFdXyE.roa (hash: aQQWCKTl2XdVtZ9D4c2Q6AEK4cq2JGEeV3mdBjyd4QA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a7:7c:4b:37:4b:d9:10:89:95:a0:f1:6b:8f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=7dba1e3b36ee6f5c373852c7cd19780feaa11d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:3d:4b:61:d2:63:51:ba:37:3d:3c:c6:6a:
64:ac:2f:b8:31:83:7a:1d:a5:0a:e6:d1:c2:20:6e:
60:66:a7:87:16:c5:8b:44:a0:94:ac:9f:fc:0e:77:
4a:31:14:09:6a:99:af:15:2a:ae:1f:ec:9d:fd:25:
79:a5:9e:1c:c5:46:6d:b0:2f:2c:ae:03:13:93:7b:
65:14:0f:a3:e5:1f:0d:79:0d:cf:b5:fe:32:c0:d3:
23:27:2d:b4:08:d1:47:c0:eb:7b:00:49:2a:0f:98:
47:0c:99:f9:e9:0a:54:a6:47:95:7a:11:e0:81:03:
b2:80:b6:e9:3c:cc:53:f1:7b:50:55:cf:51:3b:85:
fe:21:25:d9:da:99:1d:e0:54:72:b0:c3:86:1a:a4:
93:16:7e:84:fe:51:b5:81:5e:48:15:29:a4:e5:c7:
b6:51:87:ff:33:ef:80:2c:60:14:fb:8d:9b:bb:89:
7e:92:ff:a0:1b:d5:4d:2e:b0:f9:96:dc:35:29:35:
da:d3:ea:c2:c4:7b:6b:ac:28:0f:8b:47:96:8e:e8:
9d:a5:5c:25:de:d4:de:f1:9a:1c:aa:52:1a:d4:79:
b8:11:73:46:90:0d:13:5d:07:fd:c2:37:6b:bd:a1:
e3:91:8e:49:4c:b8:31:3e:68:dc:7c:cf:84:30:53:
e3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BA:1E:3B:36:EE:6F:5C:37:38:52:C7:CD:19:78:0F:EA:A1:1D:79
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:0e:0f:c1:d9:14:90:cf:20:3e:36:7f:32:5c:23:53:37:49:
85:dd:d7:ce:b5:91:a8:30:d4:f3:12:b8:47:24:f7:1a:41:f1:
47:f5:e5:00:35:d7:71:cd:39:df:d9:d0:01:8a:ff:68:d2:e9:
7e:49:56:ba:f4:a2:35:3e:71:61:c0:7c:b3:ed:0f:cd:22:fa:
79:cd:80:98:05:fe:4d:c4:d0:4b:fd:1a:c1:4f:a2:d9:05:83:
4c:08:50:81:14:a5:67:b1:6d:41:dd:f6:49:c3:cb:4d:ef:f4:
13:82:5d:9f:9d:67:83:23:79:f1:b1:1b:de:cb:71:dc:24:aa:
c5:e9:ca:8e:e6:dc:4b:87:d3:2b:e8:a8:19:7a:f5:b6:a3:30:
ac:1d:b2:9c:c2:8c:2a:24:74:26:ce:67:48:94:13:b4:12:c2:
12:e6:58:f3:2e:63:0e:e6:b8:4b:4a:b6:29:67:35:a8:b2:f3:
87:e9:02:57:2d:19:f2:e2:18:5d:54:7d:98:71:b4:75:e2:35:
5c:6c:bc:24:5a:60:a0:c2:e7:56:56:38:24:09:b7:a7:15:e1:
fa:f3:18:87:39:9d:ce:9b:40:b1:df:3f:82:1b:1f:4c:3d:d9:
88:5a:1b:83:12:43:9f:58:95:8b:49:78:bc:5c:4d:b8:0d:f0:
90:36:c9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:30 2025 by rpki-client