Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
File: O8o0owNBd9CEM40zsIm34DzKOoo.mft (raw, json)
Hash identifier: pi8auOckKvwMskCdA5S9TSGPGFx4SnI570ejiQ+ZokI=
Subject key identifier: D4:14:55:6D:67:B8:F9:6A:F8:B6:82:B0:41:AF:A3:E4:9E:D5:D5:FC
Authority key identifier: 3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
Certificate issuer: /CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Certificate serial: 0194BCA991E2F4A960063739B65E674134BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
Manifest number: 07F0
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: 9gtsAx5FJEnGGDpA05vpeEmKqKo.roa (hash: o4FWNQc0AMne1CzN76Z/FZhfpanxpLPH29H5fHhS0kY=)
2: O8o0owNBd9CEM40zsIm34DzKOoo.crl (hash: jup3FbsUB9rWSE3Lx2LkwtGkkhbRlLHBf1DK3XbXoYE=)
3: hLarQu01JmUX4vnwkcXB98ezIuw.roa (hash: iDJuyq+rVzU9ZgKvDwW/L+MmLaOlvdq9nbxde1XNlsM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:91:e2:f4:a9:60:06:37:39:b6:5e:67:41:34:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bca34a3034177d084338d33b089b7e03cca3a8a
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=d414556d67b8f96af8b682b041afa3e49ed5d5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:83:4c:6e:88:cd:ca:da:81:e6:d3:e6:dd:a7:
9c:2f:8a:4e:28:d9:12:db:76:f8:ae:cb:35:97:30:
6d:0b:59:73:98:e9:ed:6e:31:ec:34:2c:cf:42:b9:
7d:2c:1e:b5:bd:4a:85:f0:45:37:db:89:d9:eb:dc:
a8:a7:7d:6b:5e:f1:c4:95:34:b2:14:33:a9:a8:9a:
c3:6e:fd:73:3a:e3:bc:25:0c:da:ca:ea:a4:8a:1a:
25:36:24:9e:1c:17:99:67:ec:cc:bb:18:61:38:54:
06:92:24:6d:29:c8:4c:30:95:71:14:08:70:bd:ef:
a2:21:71:e4:07:7a:f5:b4:b3:8a:a2:53:c2:64:95:
c0:b4:fa:e3:dd:80:c7:47:ce:0f:f0:87:fe:4f:98:
bc:d6:1e:27:b9:ab:ca:84:c2:e5:52:86:e3:ba:4c:
e7:64:2f:0a:fb:91:a9:53:d4:41:97:3c:c9:e1:3e:
37:43:fd:51:35:ec:fb:8d:92:5e:ca:53:7e:d2:33:
24:c8:5a:c1:81:80:ea:a7:ce:51:01:b9:23:e4:b8:
43:c4:87:d9:e8:30:15:86:0e:95:ac:8a:e1:98:41:
3c:58:76:02:b3:8b:36:ff:c5:7e:1f:4d:28:a8:2b:
71:32:de:d5:7f:ac:ec:9f:65:68:83:60:48:71:5d:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:14:55:6D:67:B8:F9:6A:F8:B6:82:B0:41:AF:A3:E4:9E:D5:D5:FC
X509v3 Authority Key Identifier:
keyid:3B:CA:34:A3:03:41:77:D0:84:33:8D:33:B0:89:B7:E0:3C:CA:3A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8o0owNBd9CEM40zsIm34DzKOoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d1245c-02cf-48b5-9e42-89753f2b47dc/1/O8o0owNBd9CEM40zsIm34DzKOoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1a:b0:f0:0f:8a:37:c9:f4:64:3f:72:7c:40:0c:96:8b:54:
76:ef:b7:da:84:15:d6:ed:dd:03:59:4c:d7:b5:b9:49:ef:3e:
d2:f6:9c:4e:1c:f4:45:78:4f:21:9c:cb:cb:b5:d6:08:df:3b:
30:e3:6d:ee:c2:e0:a2:b9:d3:f4:07:db:b3:5a:87:e3:e9:33:
d6:1d:f0:2e:7f:32:41:6c:dc:e2:54:b9:4e:8b:b8:12:55:78:
e7:91:c8:20:3d:e7:cd:1a:f6:56:e9:a1:cb:41:f9:0b:2c:9e:
a7:2b:ec:b9:1d:cc:ad:de:51:57:e3:f9:de:92:f2:03:1c:78:
73:85:65:3b:d5:ae:28:f9:7e:d4:4e:37:dc:11:8a:a1:ae:91:
ec:a2:b2:77:5b:eb:0e:16:66:19:00:89:8e:0f:23:ed:86:ad:
06:cd:e4:33:1c:e9:b0:7a:4d:b2:b3:38:3e:c9:10:68:37:d3:
50:2b:97:dd:89:07:19:44:86:0f:6f:4b:30:16:a1:43:27:ed:
72:96:37:69:a7:2a:f6:4d:5a:e6:5e:5a:7c:61:3a:95:c8:45:
b8:7d:eb:ec:06:17:d2:9b:6b:b7:ec:8b:30:6b:64:0b:11:f7:
b4:ff:23:c9:ba:93:65:c2:32:07:e5:d8:20:3c:4f:ef:66:e2:
df:b1:e4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:58:34 2025 by rpki-client