Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
File: OzoF27nHf6Fu0QRpdHpcbm6riN4.mft (raw, json)
Hash identifier: xF9Z40768m61Qskn/ftLQCNuM+n7UTwexAc3Gns69wc=
Subject key identifier: DC:A3:AF:F1:9B:1C:8C:A1:86:DC:3E:32:65:DE:B3:7F:67:05:66:06
Authority key identifier: 3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
Certificate issuer: /CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Certificate serial: 0194BCA976CC7987603DBFED89F2B5FB5127
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
Manifest number: 040A
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: 2bBaeD35kseI457ZAPL2x12So_w.roa (hash: oq5BcVgGKnzmBudzjO96n+tl2tyiGaHICIAPgJhlDTA=)
2: OzoF27nHf6Fu0QRpdHpcbm6riN4.crl (hash: EH0LT0uB0DLT4Ki5V0WboEhlTd2PprhH9cpQpgXq2+M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:76:cc:79:87:60:3d:bf:ed:89:f2:b5:fb:51:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3a05dbb9c77fa16ed10469747a5c6e6eab88de
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=dca3aff19b1c8ca186dc3e3265deb37f67056606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:85:b8:2d:f8:1a:09:84:02:b4:08:20:10:d0:
fa:f3:79:8f:3a:45:7c:60:ff:9a:48:0b:7d:de:2b:
2c:18:9b:a9:7b:33:aa:1d:97:c7:c2:c0:f9:4f:75:
a0:5f:ac:f9:7b:bd:87:da:6f:7b:e6:23:f5:08:3c:
6f:b4:c3:0c:e1:c8:54:a8:fb:14:dd:80:c0:86:71:
09:7f:e3:d6:1c:5f:28:42:80:81:11:e2:6e:53:21:
9c:68:19:e1:96:1e:bf:2f:51:5f:73:3d:3c:af:87:
69:c6:aa:a3:9b:a4:07:be:6b:52:a3:49:b7:26:be:
7d:c7:78:1e:b4:be:a5:3f:f1:e7:68:71:92:57:48:
f7:da:1f:c4:51:4d:1c:2b:d1:b9:99:bf:c4:de:31:
98:a1:b9:1f:20:18:a1:8d:48:91:64:d6:66:fc:19:
33:3c:6b:fe:fa:78:90:a2:9b:6b:52:7c:7c:8c:83:
e2:b2:c3:39:ff:5b:a0:08:4b:32:ce:12:34:05:ab:
01:13:f7:56:8f:32:6f:2e:e2:09:2e:59:53:39:29:
f1:a6:df:86:a1:d8:d4:31:a6:8b:73:7b:2e:dc:c1:
c1:36:10:6e:be:18:79:3a:c1:b9:3f:ed:86:60:24:
ae:d1:23:cd:50:04:42:7b:f4:9d:d7:2b:27:ed:af:
f0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A3:AF:F1:9B:1C:8C:A1:86:DC:3E:32:65:DE:B3:7F:67:05:66:06
X509v3 Authority Key Identifier:
keyid:3B:3A:05:DB:B9:C7:7F:A1:6E:D1:04:69:74:7A:5C:6E:6E:AB:88:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzoF27nHf6Fu0QRpdHpcbm6riN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5aa05a-720e-4d56-a3a8-a01c37b88728/1/OzoF27nHf6Fu0QRpdHpcbm6riN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3d:7f:d3:6d:fa:31:9d:3d:72:a3:8c:3e:4a:f0:93:2e:b7:
7e:90:5f:c7:94:ab:41:c6:30:ab:7f:06:0c:87:7a:ed:6a:cd:
f1:88:0d:6d:9d:84:1f:08:68:81:15:1c:a1:3c:3f:72:14:29:
95:a0:0b:ed:43:8e:ab:19:2c:10:47:a0:94:b6:2a:de:22:c6:
78:b8:aa:e8:87:3f:4e:6e:7b:e2:a8:39:ac:89:73:a2:40:54:
87:f7:d1:3c:20:5e:c3:90:5c:50:0e:c1:f8:76:a4:a5:92:e5:
27:2b:28:7e:51:20:ec:0d:c5:eb:66:20:b1:02:da:95:dc:15:
f1:f7:3b:4b:10:7b:e2:8c:d1:06:88:8b:50:49:62:19:f9:69:
0d:82:cb:af:42:b4:76:21:c7:f4:ca:66:5e:6f:6d:0d:3c:f3:
f0:07:2b:de:57:45:78:49:16:c3:a2:92:56:63:ed:84:7a:df:
2b:4d:ac:e5:c2:65:a2:76:50:4f:f7:66:12:84:54:ab:38:98:
8f:8f:8b:62:3d:bd:9f:9e:a9:73:01:16:e7:6b:17:3d:2e:3d:
1c:d7:64:d1:8b:7d:96:2a:74:3c:a0:a9:55:c9:28:1a:d1:6a:
37:a6:e4:c1:83:ba:8b:bb:57:5c:65:ea:6e:a2:8b:7d:87:ee:
51:96:6a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:52:22 2025 by rpki-client