Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
File: oNxs0zNOAmkDIjc8O1BuQYT67H8.mft (raw, json)
Hash identifier: 9xf6JG9R4TXf9LGJ4O5VekfzFX3ghmYaLfPZkpcil7Q=
Subject key identifier: 54:63:0D:A6:E8:09:58:E6:02:B8:7E:5B:D2:B0:51:BF:70:71:6D:85
Authority key identifier: A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
Certificate issuer: /CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Certificate serial: 0194BCA9703C72249A3482B51C731CEC6C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
Manifest number: 0257
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: L2QPsEXXxjypDuteGOkuNir3lUA.roa (hash: mcJaTh3VxTTNDuoHtoju+OCGdo4jk9ztR2/hlQRPaNY=)
2: oNxs0zNOAmkDIjc8O1BuQYT67H8.crl (hash: olz13cPXEr4xC/G3IIAF1Jngj7qSMB8z4cOT4FkiegU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:70:3c:72:24:9a:34:82:b5:1c:73:1c:ec:6c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0dc6cd3334e02690322373c3b506e4184faec7f
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=54630da6e80958e602b87e5bd2b051bf70716d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:77:17:42:ec:44:26:97:8e:9f:95:67:3e:95:
54:30:5b:b8:98:fa:38:c5:73:8f:7b:0e:82:9f:f3:
93:f9:6c:8d:99:0c:88:24:28:a8:9c:7e:02:5a:4a:
d1:23:3f:50:2c:13:d4:27:da:aa:ec:b2:e7:e4:76:
a8:26:43:13:86:d8:46:b6:6f:cc:68:f0:92:5c:0c:
bf:1b:04:1f:54:f4:0f:33:28:8a:36:f7:47:df:12:
3f:c2:a0:f7:19:90:e4:0d:d0:e3:e2:32:7b:ac:f4:
96:84:a9:53:a8:eb:f1:3d:35:11:96:bc:df:89:78:
7c:fb:93:34:0e:54:8f:0e:23:e1:f2:e4:28:b3:fe:
b5:c5:f0:77:87:fd:7d:39:5c:9e:7e:46:d4:68:01:
76:93:41:89:46:65:e2:b5:84:46:74:0a:ce:a6:ba:
3b:e5:7c:5f:23:8b:7c:0d:a9:d3:9d:da:0a:4a:cf:
0e:8e:75:f7:1d:0b:fd:a8:55:6b:7e:7b:7a:65:a1:
29:aa:eb:a1:5e:d0:9e:5c:dd:ad:f5:d3:e0:90:6e:
5f:77:82:f1:2b:fb:66:dc:b4:ad:2d:67:fe:28:03:
ed:e1:f3:8d:26:1c:14:f5:3a:39:52:57:fa:08:7c:
ad:c6:39:46:3a:16:86:26:26:af:b0:bd:12:e2:f6:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:63:0D:A6:E8:09:58:E6:02:B8:7E:5B:D2:B0:51:BF:70:71:6D:85
X509v3 Authority Key Identifier:
keyid:A0:DC:6C:D3:33:4E:02:69:03:22:37:3C:3B:50:6E:41:84:FA:EC:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNxs0zNOAmkDIjc8O1BuQYT67H8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c01f90-d0fa-4976-b1c0-d1ff75a7a35c/1/oNxs0zNOAmkDIjc8O1BuQYT67H8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0f:6a:15:5b:2f:ee:67:6e:68:d7:38:42:bb:e2:42:fd:1c:
3d:68:c5:a8:73:b6:10:e5:1c:fb:ce:a6:a3:42:c7:79:df:95:
a2:2e:61:77:e4:81:54:9e:ef:76:18:87:90:f9:77:79:ec:72:
34:ae:02:88:a2:d2:c9:94:99:3a:58:07:a7:6b:b1:ca:49:da:
cf:65:b0:16:48:88:5b:33:77:d3:93:49:48:54:89:3d:fb:6c:
0e:f6:0c:41:35:d6:8e:6b:0c:40:36:39:31:86:b2:e6:c8:38:
54:7f:29:58:b8:ee:f0:80:b8:cc:e8:13:71:7c:ef:8c:1a:d3:
e4:22:b7:3f:6a:b7:b3:ff:8e:01:3a:4e:8f:6e:59:5c:1e:3b:
c7:7b:fd:57:24:a7:a7:80:84:03:5c:ca:df:e3:4a:e7:bb:e5:
ef:f6:81:06:b2:5e:61:fa:bb:63:81:b7:11:a7:7b:39:c6:99:
65:30:d0:d9:9e:08:da:d6:61:1b:6f:4b:71:f2:58:5b:e7:b4:
13:36:6b:b2:01:f5:5a:ca:44:c9:85:04:81:e1:5c:f5:21:89:
8a:f3:ae:29:09:93:a4:10:ec:35:da:65:eb:5e:b1:df:80:08:
ca:e6:2e:c9:a7:8f:da:2b:45:50:af:e9:76:f6:b1:72:4d:18:
6e:d7:a5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:42 2025 by rpki-client