Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
File: oKbWsIdGH97GpbnVLSmDLY8pnIc.mft (raw, json)
Hash identifier: 7Cg1cX8o8LMOACiev12HbOAT5+I35Ibv5FmHo++Bz8w=
Subject key identifier: FC:39:2B:28:86:4C:9A:46:73:29:B3:9D:D9:DC:54:6A:F0:6F:A2:B9
Authority key identifier: A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
Certificate issuer: /CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Certificate serial: 0194BD17E7A2AAEBD46C02476D0131AE0015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: ABSwg5iM7lDSwpBpbSUM-jWDkxQ.roa (hash: DOO9GA+T1exZrXJnaC8HcR8le9oe4m7a+sJjxpyxjOg=)
2: GJYCLN0ib9ODqjC_4u9aKGjHiAs.roa (hash: AqwhbZ6NQ3s8EvVMwRFSwmoYz6Yquuk8Hi4hrgtZv3M=)
3: oKbWsIdGH97GpbnVLSmDLY8pnIc.crl (hash: 7HkPdgKHfIgUnLpGAs/J0OQiYvQxv6no9bVR2YJgzts=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e7:a2:aa:eb:d4:6c:02:47:6d:01:31:ae:00:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a6d6b087461fdec6a5b9d52d29832d8f299c87
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=fc392b28864c9a467329b39dd9dc546af06fa2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e9:5b:25:c9:0a:38:fa:a0:52:13:01:2d:cb:
21:40:5e:38:ba:1b:ee:c2:fa:62:5e:ad:4c:29:ec:
f1:9d:bc:ee:f2:72:f4:ad:d7:82:79:7e:6a:35:9e:
4d:37:96:f7:fc:09:6a:65:0d:48:1a:a1:62:58:95:
aa:aa:25:44:46:ce:3f:05:cf:5e:78:dd:a1:37:92:
9e:d7:2c:c7:d1:56:97:ee:e6:15:91:75:1e:59:db:
4e:60:6e:65:5e:70:ce:e6:37:aa:2e:e0:3d:cc:59:
27:51:23:a1:91:cd:ce:93:06:6c:96:20:36:b1:91:
79:38:aa:8f:09:68:e4:c6:d4:0b:cc:2f:89:f1:43:
fa:96:aa:53:a0:89:11:61:d8:57:ae:08:dd:a6:18:
77:27:84:84:f3:3b:17:ba:56:99:b5:9f:a9:2f:c0:
59:9d:b2:6d:5b:16:c2:cb:18:7b:cd:ec:c7:ba:10:
a5:32:3a:e6:c8:96:8e:21:48:b2:d5:63:76:09:aa:
62:4e:3a:5b:8b:87:bb:a4:cc:a4:2e:7e:4b:62:63:
0c:76:6c:a8:ca:a5:db:f4:ed:af:3c:0c:8e:0d:46:
9a:f1:0f:af:e3:df:78:b3:d3:cb:07:b8:1e:a6:08:
f5:de:88:44:a7:17:77:07:ba:47:26:84:ba:d2:70:
20:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:39:2B:28:86:4C:9A:46:73:29:B3:9D:D9:DC:54:6A:F0:6F:A2:B9
X509v3 Authority Key Identifier:
keyid:A0:A6:D6:B0:87:46:1F:DE:C6:A5:B9:D5:2D:29:83:2D:8F:29:9C:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKbWsIdGH97GpbnVLSmDLY8pnIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/2d7609-2142-4a03-b11e-1148fde7aef7/1/oKbWsIdGH97GpbnVLSmDLY8pnIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:94:c8:29:54:48:9f:1c:20:cd:88:56:8b:97:a3:67:93:03:
71:cc:3c:12:1a:a5:3b:8b:ef:6a:d4:9d:1a:dc:98:94:4c:b0:
03:82:5e:43:5d:4d:29:79:a5:12:8a:6a:c3:93:47:db:e5:27:
0c:a9:6c:45:db:33:c8:99:49:5b:e8:cb:44:6e:df:c7:6b:d3:
32:60:5b:fe:76:e6:f9:ac:39:c3:95:e3:ff:d9:6e:b7:9e:d2:
c2:55:30:4a:a8:ce:e7:ee:19:91:0f:b6:03:55:69:0a:6d:eb:
a2:a9:b4:80:01:11:de:54:31:87:be:34:dd:e7:d6:a9:f6:68:
08:aa:b0:53:5f:bc:b6:36:8f:7a:9c:99:f7:0a:5b:95:00:1a:
39:5b:95:28:10:91:69:62:f3:27:94:03:60:bc:4d:0c:de:e7:
74:73:b5:e1:0f:2a:9e:db:7c:01:f1:d5:a7:b6:de:3e:fe:4c:
35:60:8d:36:4a:79:bd:12:42:33:32:e4:ac:85:9a:f3:42:34:
c7:02:df:d6:6b:11:cb:30:b5:5f:5d:25:9a:2c:20:e9:75:70:
c7:a3:d0:97:d6:69:2b:43:cb:ab:b8:93:53:73:87:20:78:9d:
e9:74:7a:a1:38:aa:59:00:6a:49:f0:9f:66:01:f9:19:90:a4:
39:d6:aa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:29 2025 by rpki-client