Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
File: OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft (raw, json)
Hash identifier: VK4agIuIGynBmxwPXnQWCpUVArCnr6RF1WNHRx/qQ/w=
Subject key identifier: EF:02:09:C1:66:30:1D:59:B7:64:EA:05:84:88:52:70:6D:06:EA:28
Authority key identifier: 3A:40:FF:15:4C:45:39:43:A0:B0:2A:A6:50:21:C9:C2:64:94:7C:2B
Certificate issuer: /CN=3a40ff154c453943a0b02aa65021c9c264947c2b
Certificate serial: 0194BC3C48627D1079450BC4FDBB493D19ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
Manifest number: 0B10
Signing time: Fri 31 Jan 2025 12:00:54 +0000
Manifest this update: Fri 31 Jan 2025 12:00:54 +0000
Manifest next update: Sat 01 Feb 2025 12:00:54 +0000
Files and hashes: 1: 0wAgKVyytNbhNR-_RR1IsIpFFy0.roa (hash: hGr01I8nbqs/LJEbN09Cfzd/lbJVo6JwWOtLmEfD1wA=)
2: OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl (hash: mGc+xQvui+IihEXcoEolUkf8Msj/NTm+sf4C8WsiMW4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:48:62:7d:10:79:45:0b:c4:fd:bb:49:3d:19:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a40ff154c453943a0b02aa65021c9c264947c2b
Validity
Not Before: Jan 31 12:00:54 2025 GMT
Not After : Feb 1 12:00:54 2025 GMT
Subject: CN=ef0209c166301d59b764ea05848852706d06ea28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bb:4b:ea:cc:b4:96:fb:3c:b0:64:ac:9d:62:
21:a6:f3:73:53:72:db:67:c0:0a:74:b0:b0:86:0d:
37:e5:1f:60:da:9d:52:c4:b5:7a:24:16:c1:a2:2e:
f4:1a:54:56:1c:82:2e:47:f6:3e:f9:6c:aa:0b:19:
98:8e:4d:45:3c:d4:09:6e:aa:96:d7:c3:9f:16:27:
f1:5f:60:34:7f:9e:2c:16:da:bf:27:37:c6:56:2b:
59:74:12:a8:bd:e7:e2:fb:2e:6a:b0:ad:b5:52:25:
0e:a4:cb:8d:25:e0:0b:82:3c:a9:16:57:61:14:c7:
a6:ea:56:f6:1b:dc:23:ee:2c:54:cf:66:02:c2:82:
5b:6d:38:15:e3:10:46:a8:3e:a2:3d:55:06:b1:8a:
4d:95:a0:a2:14:8e:60:33:e7:4c:dc:e5:63:8a:19:
d6:58:ab:f6:fa:13:c8:f4:4f:65:4c:25:76:42:ff:
98:18:7e:6e:98:69:58:1a:3e:62:a9:80:21:ae:33:
b2:16:26:af:e0:fd:62:4a:26:ba:24:4a:a8:09:40:
44:57:10:80:77:47:8d:e3:27:a4:fd:d0:e6:22:be:
30:78:5d:4a:d7:30:13:3a:af:ae:dd:5b:d8:e3:1d:
57:be:83:25:4f:d3:e7:a5:d6:0d:35:af:1b:7f:bc:
d7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:02:09:C1:66:30:1D:59:B7:64:EA:05:84:88:52:70:6D:06:EA:28
X509v3 Authority Key Identifier:
keyid:3A:40:FF:15:4C:45:39:43:A0:B0:2A:A6:50:21:C9:C2:64:94:7C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkD_FUxFOUOgsCqmUCHJwmSUfCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/4efcae-afc9-422b-aadd-82bb0bb11e3e/1/OkD_FUxFOUOgsCqmUCHJwmSUfCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:45:92:cb:4c:1e:9c:38:35:a0:c1:cb:2a:f9:8a:cd:c8:d3:
75:80:fa:80:07:1a:5f:a3:16:f5:1d:78:57:9c:64:ea:ba:41:
44:bb:8a:fb:d3:a8:97:64:a1:46:6a:dc:0f:44:87:9b:9a:c4:
6a:8f:9b:9b:45:3e:3f:e9:04:fa:3c:eb:af:fb:25:44:82:7b:
f4:50:4f:ed:9c:f8:a1:41:5b:7a:02:4f:4d:4e:7b:1f:cc:2f:
6b:83:7c:ee:3d:3f:4b:06:68:b6:fc:cf:9e:39:54:2e:a4:27:
5b:7c:a4:ff:3c:77:d6:81:45:d5:0e:06:7a:f1:f9:7f:92:39:
6d:c1:57:cd:ef:5d:a2:c0:01:41:fc:4d:47:95:37:2e:cb:de:
84:18:e3:f6:52:94:a3:3f:db:62:58:7e:1c:c0:e9:f3:78:51:
a9:7d:fb:d7:c8:e8:69:ad:fa:df:2e:33:44:55:e0:72:d9:eb:
64:bd:a7:0e:1b:c9:64:4f:0e:2a:30:00:06:c8:66:11:0d:2b:
19:6d:ea:58:ab:b1:78:dc:fd:9e:85:6c:e7:48:51:9e:37:3e:
ce:ad:06:6d:f3:f5:f8:c2:d1:a9:30:1e:77:b9:ba:94:f4:ac:
d2:0c:ea:74:72:60:6c:5b:98:25:d2:c7:3c:9a:f0:f7:82:fe:
bc:89:a8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:01 2025 by rpki-client