Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
File: oL_QbOhVti2baIzYxTXV9JTNOTI.mft (raw, json)
Hash identifier: KKScGhfgiQ0jHQf+le1BPo6uTD8Xx3jk8afYlTSTC0g=
Subject key identifier: 18:AE:11:28:22:48:6A:3D:DC:1A:93:45:39:04:94:D0:20:AA:05:F3
Authority key identifier: A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
Certificate issuer: /CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Certificate serial: 0194BD1789BB1D5BC925AB295235E695352A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: YZGMIvadW2xPxhoSXpNJb8SDWu8.roa (hash: jQfGmlQO1sTVXZe+wmgboQPBpNBgVW+6jbuLSLsW9ZU=)
2: oL_QbOhVti2baIzYxTXV9JTNOTI.crl (hash: vLNdgQzxkOh4RVt7T4r7h4vDb4tInh+6nF5ph6J/n0I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:89:bb:1d:5b:c9:25:ab:29:52:35:e6:95:35:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0bfd06ce855b62d9b688cd8c535d5f494cd3932
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=18ae112822486a3ddc1a9345390494d020aa05f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:ae:07:3c:73:fd:fd:14:6a:3c:3b:1d:08:
0f:90:14:da:a9:69:3d:79:45:33:86:1c:98:78:32:
e0:c1:0d:2d:6a:69:8d:91:c4:44:1d:d2:04:fc:3c:
41:80:c7:92:41:38:7b:81:59:dd:3e:f2:74:02:05:
bd:c9:59:26:58:3e:23:7b:43:81:9d:97:b5:3d:d1:
1f:12:05:27:2c:85:1d:1f:26:eb:ff:e0:60:2f:1f:
86:cf:4a:d0:5c:1e:a3:1a:12:5a:b6:69:f7:d7:83:
a3:7f:ad:6e:49:41:68:30:96:0a:ed:67:ca:29:b5:
60:87:c1:29:bb:25:24:0e:ec:cd:3e:ed:36:16:4a:
76:e6:d7:30:99:00:7d:d7:d2:73:17:42:c6:b5:91:
22:17:6b:cd:4e:2d:2a:ec:79:ac:67:75:10:1a:56:
94:92:3f:b6:ac:70:22:fa:5e:3a:73:95:90:b3:7e:
be:50:cc:69:eb:c7:c9:7a:0e:86:d0:2c:ba:40:51:
8a:be:76:99:3c:95:71:05:20:e2:91:f6:02:c0:af:
6a:e1:e7:93:df:85:df:4e:36:94:b5:3e:a4:ff:4e:
18:9d:86:77:bf:cd:74:6c:be:94:a9:6d:54:5e:62:
59:21:54:29:bd:d9:84:d4:d6:e8:27:50:e1:f5:a5:
66:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AE:11:28:22:48:6A:3D:DC:1A:93:45:39:04:94:D0:20:AA:05:F3
X509v3 Authority Key Identifier:
keyid:A0:BF:D0:6C:E8:55:B6:2D:9B:68:8C:D8:C5:35:D5:F4:94:CD:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oL_QbOhVti2baIzYxTXV9JTNOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/03316d-04e0-4660-a63e-671839200604/1/oL_QbOhVti2baIzYxTXV9JTNOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:d1:0f:a3:cb:25:94:26:d0:3b:b8:9e:ae:0c:ac:b6:4a:fb:
94:73:a1:a0:d7:f1:41:a2:6c:eb:92:f1:a9:f1:07:83:60:52:
eb:82:66:72:4f:fa:09:a2:5c:17:d3:33:3a:3f:cd:da:a1:11:
f6:53:a7:3c:4e:89:32:c5:c2:c5:0e:83:5f:80:54:a7:e9:82:
af:67:8b:00:fa:05:a5:7a:18:82:f3:9c:65:27:12:67:3a:b0:
b4:aa:7c:e1:16:32:7f:ab:e4:bb:92:aa:91:ab:81:65:68:ce:
d7:c4:39:e2:60:91:91:22:45:20:95:2a:4f:8e:07:54:c7:a8:
29:5a:72:c7:48:88:66:6d:9e:84:fe:09:d8:20:f7:47:5a:7b:
f1:79:9d:74:58:6f:0f:b1:b8:1e:59:01:d7:f0:da:b6:86:1a:
98:71:46:90:2f:bb:e1:e0:4c:13:c9:d5:99:c1:7e:d4:ab:e1:
4f:94:ff:08:14:a4:7b:5e:23:ad:0d:04:0d:8c:45:0e:05:52:
2c:70:06:70:b9:3d:d5:99:d1:1d:17:b1:0e:fa:ed:91:07:f1:
6f:d2:2f:e1:c9:12:55:fd:db:16:a4:03:b0:f4:8d:94:24:90:
f0:fd:e4:20:f9:ab:c4:16:5b:dd:6f:97:53:57:4f:c9:41:c6:
bd:65:50:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:45:00 2025 by rpki-client