Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
File: 1OKXHl2BaclArwINsCe-2tiZFZA.mft (raw, json)
Hash identifier: 0fTpJ4nyJepXzf6Vm+Oe8k9UVeg7cN8OSOSNmltb2BU=
Subject key identifier: D9:37:06:24:42:D3:41:0D:11:81:D4:DD:CE:79:73:4C:F9:B3:EA:45
Authority key identifier: D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
Certificate issuer: /CN=d4e2971e5d8169c940af020db027bedad8991590
Certificate serial: 0194BCA975C75D5D1B18CAB4618E503FBACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: 1OKXHl2BaclArwINsCe-2tiZFZA.crl (hash: +t0vU9uFsoRL7ypIrd5BS4wxbfeziTU9VHvJZav0UHw=)
2: t9RZtYM1TGEMt1syPgITn8S6yxc.roa (hash: zIj5Jh4OKcBo5HQ6NodMOlq+a7yM6D/J29/6rKcVe2U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:75:c7:5d:5d:1b:18:ca:b4:61:8e:50:3f:ba:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e2971e5d8169c940af020db027bedad8991590
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=d937062442d3410d1181d4ddce79734cf9b3ea45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ce:3e:9f:92:f4:19:c4:3d:1b:65:3c:82:cf:
41:d6:d7:17:4d:5f:cf:74:17:ad:7e:3e:59:15:16:
96:51:e5:62:bc:be:d2:4f:12:13:10:3c:87:94:fe:
4d:bc:db:b0:79:07:39:29:bc:ce:f7:63:c9:d6:ab:
fa:6e:f0:2c:b6:9d:8d:7b:83:08:39:f4:d9:07:e3:
f1:2d:f0:d3:89:25:bd:8c:a3:56:e9:59:80:00:5f:
dc:7d:73:4f:f0:7e:89:0b:4b:5d:84:37:3b:a7:0f:
1a:70:fa:d3:ca:e4:40:a7:9c:ea:44:d0:e8:8e:bc:
ee:43:1b:0b:75:51:25:46:d3:ae:5d:1d:f4:14:cf:
7d:0b:5a:95:9e:55:01:1e:5e:52:ea:a9:95:b3:13:
5f:65:44:b5:dc:81:29:04:a0:05:d2:5c:e1:a6:3a:
61:c9:f1:fb:76:d2:b5:63:46:d9:1b:f8:78:60:36:
2e:29:27:9c:45:62:a3:3a:79:46:c2:e8:8c:22:5c:
9e:0e:c7:b3:da:fa:f9:65:1b:04:53:0e:01:b7:89:
d6:77:2c:5e:8c:e6:90:92:25:72:0c:72:11:fb:6f:
56:cd:95:a2:8d:31:f6:b0:e4:d8:40:1b:bc:9f:c5:
cf:91:a3:88:30:a4:a8:5d:aa:0b:45:5b:58:e3:11:
13:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:37:06:24:42:D3:41:0D:11:81:D4:DD:CE:79:73:4C:F9:B3:EA:45
X509v3 Authority Key Identifier:
keyid:D4:E2:97:1E:5D:81:69:C9:40:AF:02:0D:B0:27:BE:DA:D8:99:15:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OKXHl2BaclArwINsCe-2tiZFZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/478aea-6b94-49a3-aa7f-189490d60ea6/1/1OKXHl2BaclArwINsCe-2tiZFZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7a:9d:f5:bb:ed:38:51:a9:19:d5:49:a7:96:6f:eb:5a:e1:
1b:8b:b8:12:9b:d2:00:5e:88:0e:a1:da:f0:e5:aa:e6:43:87:
02:66:f2:17:95:99:c7:2b:ff:4a:22:b8:fc:cf:cb:be:48:84:
26:ca:a3:17:bf:6e:8d:98:28:2f:75:93:6c:c4:32:6e:5b:81:
86:cc:92:78:e2:5f:9f:ab:31:2b:57:4d:a9:d0:64:b9:d2:f9:
67:b1:e8:1c:d9:b0:ab:e6:78:b8:da:df:4d:ad:3a:cd:7f:08:
aa:43:15:ab:1c:10:1c:6f:40:dd:f5:3f:b2:ab:8b:bb:70:d3:
72:1a:44:bc:85:e7:eb:a7:30:00:ce:f4:ad:2f:bf:89:d3:17:
6b:99:ae:3b:82:3d:95:30:1e:bf:78:72:b5:62:9b:ae:e5:12:
e5:f1:f5:71:ee:dd:95:03:6d:9c:45:26:f9:68:71:90:ff:1f:
bb:6f:5d:0f:50:7b:0a:3a:74:75:c8:be:82:56:32:c3:0a:e1:
7e:42:00:bc:43:9d:02:19:ba:88:e3:7e:c9:f6:f9:ac:22:b8:
ba:d5:ea:72:72:4c:2e:71:fe:29:f0:16:e2:7f:8e:11:d8:8b:
e0:9b:79:f2:73:da:a6:54:64:af:01:12:aa:07:70:35:84:7b:
4e:2b:30:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:02 2025 by rpki-client