Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
File: rOSXY9L9uQmGRpQDBmy15qeCXww.mft (raw, json)
Hash identifier: asdz1QhtwnpdyZt4L4ZM5SqygiBomVbkhf4qYU9rTeg=
Subject key identifier: B3:21:73:41:9D:E6:F7:E1:05:90:06:D7:A8:D9:9C:6C:C8:E1:B3:FD
Authority key identifier: AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
Certificate issuer: /CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Certificate serial: 0194BBCE5B19FC65D016F708F0511965C79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
Manifest number: 05FC
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: p6b5EpB9c04G0H9epOzZ502GLYU.roa (hash: v+k+Z0JEiTZ2gXLB8F8c6K6wI0rlhBKKMatrNLNpk+s=)
2: rOSXY9L9uQmGRpQDBmy15qeCXww.crl (hash: fzmNbqW1x0iklXX5hvO3mTdXIoHoEZvSed4HGS+AXpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5b:19:fc:65:d0:16:f7:08:f0:51:19:65:c7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace49763d2fdb90986469403066cb5e6a7825f0c
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=b32173419de6f7e1059006d7a8d99c6cc8e1b3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6d:b2:1d:5e:2b:2c:29:37:d0:68:63:cc:d9:
85:1c:c1:9a:6c:9b:04:11:d0:5a:a3:63:0c:dc:6c:
8f:88:99:63:42:d1:b8:ed:48:7d:53:99:12:cf:e6:
c5:23:cb:0c:75:be:34:7d:6a:a3:6a:9f:04:66:38:
14:7b:ed:8a:7b:00:a5:fb:df:6e:9a:0d:b3:c3:c3:
9b:b6:67:c4:e1:8c:c9:25:03:72:c6:49:d8:44:f8:
34:92:1a:b3:77:de:1b:2c:a9:00:bd:ff:fd:92:fd:
96:d7:4f:1a:d9:8e:9a:14:81:00:e4:14:45:97:04:
ab:1f:1b:56:7f:1d:27:47:ca:46:f9:41:9f:a3:6c:
2b:d2:00:e2:b2:d3:25:d0:f6:60:97:51:ec:38:02:
60:f1:06:7c:2d:38:d7:10:c1:d1:f8:0b:cb:f7:8f:
93:6c:76:89:79:eb:91:43:04:14:bc:65:95:fb:cd:
1c:00:4a:a5:06:94:27:11:f5:d5:cd:a0:a3:a8:41:
61:89:d0:83:e7:c4:46:13:a6:45:9b:dd:f1:c6:86:
ee:75:c5:18:14:df:6e:aa:f5:76:76:0a:d5:b8:93:
51:3d:4c:ff:ad:ab:4e:f8:13:2b:57:4b:e2:23:53:
9c:9d:9e:cf:d5:e3:12:bf:be:d8:64:3e:ef:8b:88:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:73:41:9D:E6:F7:E1:05:90:06:D7:A8:D9:9C:6C:C8:E1:B3:FD
X509v3 Authority Key Identifier:
keyid:AC:E4:97:63:D2:FD:B9:09:86:46:94:03:06:6C:B5:E6:A7:82:5F:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rOSXY9L9uQmGRpQDBmy15qeCXww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/4630fd-a0ca-48a0-bcab-90a8c6e785c9/1/rOSXY9L9uQmGRpQDBmy15qeCXww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:48:a2:93:c7:7d:75:cd:a1:a3:27:0a:c8:34:6d:fa:27:3c:
82:1a:7d:0c:a2:47:a7:01:cb:41:9f:4d:d4:e8:b1:d7:68:ac:
d9:a6:27:0f:1b:06:08:9c:aa:53:6d:e5:bf:fc:18:77:99:99:
42:48:16:a8:5c:0d:b1:41:e0:73:26:84:e8:c4:87:b0:1c:a4:
5b:eb:17:52:91:98:e9:fe:ac:6b:db:18:28:4d:1c:21:fd:e9:
a8:5b:35:b5:08:ab:8e:e7:df:c9:53:d9:cd:e8:c6:de:e9:04:
d3:a2:60:9d:2b:fa:cf:a8:d1:30:1b:72:1a:95:1a:54:1d:75:
51:20:b1:3b:8d:f1:67:74:f1:a1:d8:40:70:f5:6d:97:69:03:
dc:8b:6c:73:df:ed:41:ee:15:c6:64:d8:ec:9c:a1:d3:fa:2d:
37:11:81:83:8e:af:b4:f2:44:ee:dd:7b:3a:39:75:21:d4:0a:
5e:c3:8c:48:a1:8c:6b:c7:df:03:cf:f5:6e:f1:e1:30:31:4b:
a4:e0:2a:2d:27:80:f2:f6:dd:8c:64:f1:59:91:4d:d0:58:ff:
d0:ac:2f:6c:4b:72:21:b6:7a:48:73:93:a1:c1:2e:64:04:40:
bb:4b:95:f1:eb:7c:52:b4:56:f9:f2:e6:42:66:66:cb:17:83:
22:e7:9b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:29 2025 by rpki-client