Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
File: Omhc-Ip_xD_hx_40pv8927QU8LU.mft (raw, json)
Hash identifier: bWA7+ivPPrcP0G+fZ1eM1qGIb+/VKh+kuki1Cr2EOck=
Subject key identifier: 3A:12:32:39:2F:67:BC:4E:1E:57:FE:20:E5:EA:D4:90:63:3F:3E:BA
Authority key identifier: 3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
Certificate issuer: /CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Certificate serial: 0194BD4E8AED97F8F40892BEAD3E5B6E6CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
Manifest number: 136F
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: GgsWPeSLOUohaMbTcn2R72DKvqo.roa (hash: FdIvFbwyG4T9lF5cxTm74n7FrVTd+NmNKr/3LVaY4Co=)
2: Omhc-Ip_xD_hx_40pv8927QU8LU.crl (hash: /iuKOiZr52jW9PX8HuVDBBq5JPq3OR0cRbRnKIoJ7Gg=)
3: xsJ_8-HjgOrNXX0Cj4PmxL7Wmww.roa (hash: HPp2kSbUasPwNyhN/FOSH9olW8dRjUen+6wuAaVDD8Y=)
4: y3TTdcjKoEjXwgjO1xfh0tYATdA.roa (hash: 7D4/Czv6H7eCbZASUzHWZokIq1S56p3iwes3EPnUWKQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8a:ed:97:f8:f4:08:92:be:ad:3e:5b:6e:6c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a685cf88a7fc43fe1c7fe34a6ff3ddbb414f0b5
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=3a1232392f67bc4e1e57fe20e5ead490633f3eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3f:5e:b6:e5:84:50:17:0d:20:9b:db:ef:b5:
7c:2c:7c:6e:70:d3:0e:f4:82:10:de:83:b0:34:82:
09:b3:cf:e5:fc:87:6f:6d:b7:80:ca:be:35:0b:34:
a8:5a:cb:9d:d0:56:7c:a9:3f:92:d3:58:27:84:1d:
50:f1:c3:08:37:5b:00:6a:0b:73:05:06:3c:61:a0:
57:53:90:40:17:41:9d:c3:0a:a5:08:a5:d2:45:c8:
4d:f7:6b:d9:f8:ca:2b:39:f8:b1:31:db:db:31:92:
f3:59:94:84:08:81:ee:6a:e3:1f:10:db:26:41:4f:
fe:c7:7d:3f:1d:71:0b:ac:6b:ee:7c:d6:92:7e:c2:
5e:87:16:25:d6:bd:a8:0f:39:0c:75:cb:1f:18:29:
aa:69:b9:60:f6:3b:6b:04:0c:60:bc:ae:ab:c7:d2:
f5:c0:73:35:ea:07:67:f0:55:85:b3:ea:55:71:c9:
10:88:74:b6:f6:e0:47:a0:9d:0e:de:b5:dd:d0:a7:
cf:aa:d7:a3:aa:8e:a4:31:46:a5:3e:e5:a4:97:8d:
eb:51:12:f0:b8:24:f6:d0:47:66:e5:72:a2:a0:1e:
d6:78:55:52:a9:f1:b8:9f:80:d1:20:f7:30:6a:88:
30:b0:23:21:a0:2d:77:3e:df:0d:b4:f9:af:f7:de:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:12:32:39:2F:67:BC:4E:1E:57:FE:20:E5:EA:D4:90:63:3F:3E:BA
X509v3 Authority Key Identifier:
keyid:3A:68:5C:F8:8A:7F:C4:3F:E1:C7:FE:34:A6:FF:3D:DB:B4:14:F0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Omhc-Ip_xD_hx_40pv8927QU8LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e65c27-aef5-486d-b5d7-59d6ca65ccbc/1/Omhc-Ip_xD_hx_40pv8927QU8LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5d:d7:32:e4:e0:20:ce:c4:a1:2c:48:19:61:fc:6f:d5:eb:
4c:62:70:7b:e0:b6:03:5c:a7:32:0b:0b:71:c1:85:86:fa:24:
06:dc:75:69:6b:dd:90:8a:d9:fb:25:01:f1:68:49:19:9b:54:
a6:e9:ea:ae:24:78:db:bd:b3:c4:20:e9:99:bd:29:a4:67:a6:
f7:18:8d:fc:a3:f0:0f:03:0c:8b:6a:7a:0d:8d:cf:d4:b2:bd:
52:2b:55:bf:e6:25:c5:5c:1a:7f:ea:85:9d:d9:cf:1f:31:c2:
38:9e:e8:cf:a7:b0:ec:c3:01:38:b5:c4:fa:53:7e:2d:ec:bf:
d1:40:cf:15:20:e6:74:a6:2a:a3:30:ae:78:80:3c:64:2e:52:
01:4d:72:93:19:58:e0:2f:8e:73:44:a9:5c:00:4f:34:6e:ae:
63:41:df:0c:83:41:7f:03:95:65:1c:cf:db:c1:ec:65:42:87:
3d:68:c0:37:3a:16:99:ac:9c:be:dd:ea:42:b0:7d:1b:4b:c3:
17:e0:93:6e:f2:68:f0:1b:3f:ca:4f:83:87:c1:7d:38:89:0c:
a2:6c:ac:73:be:cf:b6:a8:b0:03:0b:ee:fa:23:53:f2:29:b5:
63:87:75:9c:5a:10:f0:9b:34:b1:ad:25:04:e8:0b:3a:e9:ab:
96:3f:6b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:05 2025 by rpki-client