Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
File: odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft (raw, json)
Hash identifier: nazq0kIt0qzBlUGnx4H74QqAEPv4QXyklvq6I8FgDvM=
Subject key identifier: 02:82:DC:69:24:04:1E:0A:04:A6:AF:F7:BD:4C:78:2D:D4:D4:29:C1
Authority key identifier: A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
Certificate issuer: /CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Certificate serial: 0194BD1762DC7FCD6E96E4661B0869EDA1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: FGv164p9oNmasj4tz9FMT-yTJe8.roa (hash: 2RdxitfGw59b2KF3BO+RbESKDdD8hgmB641at2eVQlk=)
2: odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl (hash: d2jQXcbTYWesOzbRnUtS1tVPJdsnrNUoD1S0/TX9XLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:62:dc:7f:cd:6e:96:e4:66:1b:08:69:ed:a1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d9b35bc3e9f2493c64d06f5b2d4a99c5f251e9
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=0282dc6924041e0a04a6aff7bd4c782dd4d429c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:17:23:dc:89:60:4b:2c:42:0a:01:33:31:a1:
d0:68:60:ea:2c:d9:4a:f0:50:90:bf:2f:2a:4e:45:
4e:99:21:80:2b:0e:27:69:12:7a:6c:55:21:e4:5a:
a0:ee:2c:34:16:6b:bb:6a:20:c8:b9:20:f0:de:77:
39:4f:ef:b5:e2:c5:71:36:85:5c:b4:b2:d6:31:da:
ca:2c:f8:34:ef:c9:fe:70:90:ef:c7:c1:9a:3c:2a:
2f:82:1a:a4:38:32:50:be:95:19:94:ef:7b:f5:a5:
1a:f8:97:c5:83:63:35:22:e8:37:04:fa:a8:a6:c4:
da:e8:3c:cc:92:62:fb:a4:c8:05:b7:ee:1c:28:5b:
2f:a0:fe:4f:b3:85:79:f7:ba:db:6e:72:8b:7c:72:
8c:6f:c0:fb:b5:69:0c:b6:3e:eb:08:28:59:27:dd:
90:d6:ac:77:3b:ef:dd:d2:bd:12:2e:93:b8:95:19:
9a:0b:c1:b3:d8:0a:01:a3:91:83:44:81:57:74:dc:
e0:25:cc:46:c3:0b:79:23:ac:73:41:1c:4b:9d:d3:
e2:97:fe:4e:aa:3a:e6:67:67:ff:af:76:3a:e2:88:
95:cb:b6:96:82:f5:c5:a4:6a:46:a7:5f:31:1d:a0:
ed:68:29:1c:f6:ad:ea:f5:9a:96:4e:f6:e0:9f:63:
09:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:82:DC:69:24:04:1E:0A:04:A6:AF:F7:BD:4C:78:2D:D4:D4:29:C1
X509v3 Authority Key Identifier:
keyid:A1:D9:B3:5B:C3:E9:F2:49:3C:64:D0:6F:5B:2D:4A:99:C5:F2:51:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odmzW8Pp8kk8ZNBvWy1KmcXyUek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/4656f7-0054-48d4-961a-6dbdec51168d/1/odmzW8Pp8kk8ZNBvWy1KmcXyUek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:a0:b1:90:64:3a:fb:ee:3f:b7:16:47:c2:36:f0:50:7b:01:
47:bd:f6:ac:3d:fa:b5:f6:cc:f9:b3:25:6b:9f:a7:9e:e3:6e:
14:a5:3b:14:f9:e9:bb:37:2c:2d:ef:eb:cf:b9:6d:63:1a:34:
7f:09:d6:a3:29:f9:9c:9e:57:e5:57:ab:7d:27:a4:de:5d:8e:
19:59:29:63:55:8b:d9:f7:20:98:0e:87:3c:24:3d:a8:8e:39:
a7:9b:d4:21:92:fe:5d:49:6d:c0:3a:dc:49:b4:6c:ee:a7:4b:
77:07:87:1b:57:d8:0c:48:c4:ad:52:12:ee:c1:8e:84:58:14:
b8:2a:de:8b:14:f4:1f:3c:a2:d5:11:38:66:e7:8c:c7:a4:38:
f1:64:df:19:0e:64:c8:cd:7a:9b:38:6d:d0:f7:d4:f1:bd:10:
9c:07:b8:3b:fe:56:bb:88:44:32:96:eb:c3:d2:16:b6:eb:75:
17:c2:54:ff:c4:15:b0:98:8d:6a:56:5a:02:e0:13:63:dc:c5:
2e:4c:9f:69:3a:d0:f6:57:5f:1e:40:a6:4c:13:3d:be:40:23:
f6:46:ee:4a:45:ae:a0:55:36:2c:0d:28:e1:5b:a8:7b:70:60:
ad:ee:af:24:6b:dc:d0:bd:d3:13:e2:45:6d:63:5e:7e:8e:46:
6e:29:97:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:53:21 2025 by rpki-client