Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
File: ORxdMzEUXsjicYdvgEIge50Ay2Q.mft (raw, json)
Hash identifier: eJnBb9LvK9uWqV/o/AERpgdSSKf39/C2C2WA60La5Iw=
Subject key identifier: DB:4A:A5:9E:85:82:14:B8:12:D4:73:2F:5E:94:3D:D5:9E:9C:3D:B4
Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64
Certificate serial: 0194BCA9EFC9A909B569E0A86F29D29BAD01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
Manifest number: 0D01
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: ORxdMzEUXsjicYdvgEIge50Ay2Q.crl (hash: dAwReYgjDCXijkOx6nS+7KNaeUDOGtO5Of/aDbVyjic=)
2: OST4PzA3ppU9tim3_KfBBcrqcgQ.roa (hash: 7aAkIwPTKpTiRriNWV3feZU6/0BHu+h2F1+5PEi7g88=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ef:c9:a9:09:b5:69:e0:a8:6f:29:d2:9b:ad:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=db4aa59e858214b812d4732f5e943dd59e9c3db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:65:9f:05:a2:5f:69:e8:e3:fc:4a:84:64:
6c:68:ed:ee:26:97:8f:3d:6f:19:37:9f:88:c9:9d:
c8:fc:a9:5b:c5:eb:d8:62:58:de:4f:29:5b:6c:ac:
ee:48:46:99:dd:00:a2:be:63:3c:44:e4:13:83:c8:
3f:0d:e1:42:40:dd:19:f8:29:c5:cd:a6:37:1b:33:
a5:bc:de:47:7d:c3:a8:c5:8b:6e:e8:4f:b2:c5:5d:
86:22:05:33:89:af:d6:e7:d6:37:cc:dc:fe:4b:90:
1b:d0:f4:c1:80:19:b2:70:14:1d:33:8b:dd:ef:42:
88:07:fa:0d:1b:6b:9f:47:b9:28:88:58:14:3e:0e:
ca:62:c7:55:92:4f:95:42:f6:a0:b0:76:f1:a5:0a:
24:76:32:58:df:c2:a6:5c:d6:4e:1b:65:9d:90:fc:
45:90:16:ba:ea:f0:24:ad:93:b5:65:ab:7e:6d:79:
9c:e3:54:14:b4:58:52:c1:fe:e8:1c:65:96:71:50:
c6:f9:d3:13:e6:65:20:d2:8e:d4:53:e2:35:5d:3c:
cd:fb:f9:c8:87:8c:2a:b3:e5:df:45:1a:e6:93:bd:
2d:ca:5e:f2:85:be:35:db:fd:b8:7e:78:79:64:e0:
57:1a:e6:3b:c6:c6:56:3a:cf:df:55:6b:1d:03:1e:
d8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:4A:A5:9E:85:82:14:B8:12:D4:73:2F:5E:94:3D:D5:9E:9C:3D:B4
X509v3 Authority Key Identifier:
keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:36:3b:6f:d0:66:b7:af:65:ed:ad:22:d9:77:15:21:89:2d:
7a:73:30:04:c5:80:1c:0a:81:97:15:cd:6a:d0:d4:35:ff:50:
8e:67:ff:ed:66:62:ab:6a:a0:01:b3:83:8e:49:d5:c3:55:2e:
ad:bb:31:58:20:bd:7f:7f:e9:b1:88:04:32:49:16:37:19:6b:
f0:b8:1a:eb:b6:4a:39:1f:4e:1d:cf:0d:4f:3f:34:50:e2:16:
48:c9:1e:12:96:c8:b9:77:2f:03:56:23:5a:b1:29:49:ce:cb:
82:94:d6:39:9a:58:5a:87:1e:4b:3f:12:d9:77:70:6d:55:a4:
94:dc:bd:56:8c:2c:86:ee:63:ae:b0:f3:f4:64:fe:5c:91:c0:
21:f2:61:13:66:d0:c5:6b:37:0a:f9:1a:e4:42:ea:90:fe:bc:
87:7f:32:4c:52:28:7a:e3:87:9f:22:c2:36:9b:95:a0:91:f8:
ac:c1:77:19:8c:56:f7:9f:24:fe:c2:bc:4c:d3:4b:16:5e:b3:
eb:2b:76:23:37:06:c3:ad:32:3c:b1:7d:b3:1e:7f:53:79:6f:
36:bb:60:01:34:44:50:9f:5a:44:ef:a3:7f:a3:ea:c3:61:06:
78:45:d8:9f:d6:2f:bc:ca:57:85:71:f7:8e:00:af:9f:7d:75:
c7:37:0d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:20 2025 by rpki-client