Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/404c04-a7f5-4cdf-8e97-18d33beb7c31/1/OneLgrqpeIoayvLsNothmB71HfI.mft
File: OneLgrqpeIoayvLsNothmB71HfI.mft (raw, json)
Hash identifier: OGvXkJh/XQ73jhQBDtHLUAR0biye7cN7XudhLR60f18=
Subject key identifier: 64:55:AE:E8:26:99:90:93:55:C9:B7:15:87:43:AE:BF:36:A8:07:AB
Authority key identifier: 3A:77:8B:82:BA:A9:78:8A:1A:CA:F2:EC:36:8B:61:98:1E:F5:1D:F2
Certificate issuer: /CN=3a778b82baa9788a1acaf2ec368b61981ef51df2
Certificate serial: 0194BD4EBA26385B32FAC228BFD08DCEC3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OneLgrqpeIoayvLsNothmB71HfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/404c04-a7f5-4cdf-8e97-18d33beb7c31/1/OneLgrqpeIoayvLsNothmB71HfI.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: OneLgrqpeIoayvLsNothmB71HfI.crl (hash: +6uQ1klrLVeLmqTCohax51AhoMCvpgVDASjoYooHRws=)
2: tSdPmCF2mRPxF2tL9jrht8v9nd0.roa (hash: 25zx6oeH7z2ZyGM4y2LzPQiLw04ocTvL7Bq+gPKpw0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ba:26:38:5b:32:fa:c2:28:bf:d0:8d:ce:c3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a778b82baa9788a1acaf2ec368b61981ef51df2
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=6455aee82699909355c9b7158743aebf36a807ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:32:59:ba:83:76:af:20:86:a3:af:f3:94:
6f:c6:94:0d:79:47:2d:13:04:79:9f:ac:77:d0:6a:
2c:02:f7:19:b5:2f:c1:2c:1c:98:d7:71:c7:46:39:
a0:56:cb:5d:ff:12:34:33:df:de:d0:a3:fa:68:d2:
d7:7c:57:12:6d:ba:fd:6d:8d:3d:ba:c9:1e:32:9d:
a0:71:e9:a0:ef:42:71:43:11:13:db:1c:32:b2:46:
dd:97:35:e4:13:ae:d2:f3:c9:6f:f7:46:f4:a5:4c:
9f:4f:09:1e:1d:27:95:e1:d2:5f:6f:f1:30:fe:bf:
f9:6a:e5:df:99:cf:c4:31:e6:73:89:fe:66:9b:59:
cf:08:be:5b:d0:6c:52:17:ef:8e:e9:4c:37:dc:cb:
f0:83:5b:ae:31:84:db:92:e0:34:ed:33:3c:69:d3:
65:c4:ba:ac:df:91:10:b4:e7:49:a4:1a:93:35:b9:
3e:6a:6c:e9:db:fc:8b:88:c4:5f:15:b2:b1:dc:a5:
60:99:15:8d:b5:5f:bc:47:6c:25:55:fc:43:22:b3:
98:6b:b7:86:bc:d6:5e:b5:d3:04:c0:02:92:97:75:
5b:b0:b8:04:3e:04:ae:5e:fb:fd:d0:20:f1:b3:34:
01:51:e8:b7:4e:0f:8d:0c:74:7c:d3:a9:3c:2e:74:
c5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:55:AE:E8:26:99:90:93:55:C9:B7:15:87:43:AE:BF:36:A8:07:AB
X509v3 Authority Key Identifier:
keyid:3A:77:8B:82:BA:A9:78:8A:1A:CA:F2:EC:36:8B:61:98:1E:F5:1D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OneLgrqpeIoayvLsNothmB71HfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/404c04-a7f5-4cdf-8e97-18d33beb7c31/1/OneLgrqpeIoayvLsNothmB71HfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/404c04-a7f5-4cdf-8e97-18d33beb7c31/1/OneLgrqpeIoayvLsNothmB71HfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:3a:90:11:a3:4f:28:67:d6:40:de:26:43:fa:b4:3b:21:1d:
ff:cf:5e:cd:d6:ec:d0:5f:d7:90:3e:7a:0d:23:92:47:6e:7c:
a4:ca:ec:dc:42:ab:7e:61:69:c6:1e:31:f3:47:f3:73:63:cf:
77:65:60:5b:c8:1f:76:db:28:7b:14:56:af:e3:bb:1e:7d:c6:
f9:ea:c9:7f:91:80:ad:b1:58:88:65:43:1b:12:a2:4f:4d:7e:
06:e6:f3:c7:d7:03:16:a6:4f:64:0c:06:29:59:b0:2d:ff:e1:
e0:f4:ef:89:81:33:76:9f:78:f3:82:5b:f3:c1:97:90:8f:03:
22:0f:22:dd:91:8c:4a:b9:6b:96:38:53:25:04:2e:89:f2:21:
65:b4:3c:a9:09:e1:01:9c:ff:ae:11:78:ff:37:31:98:ce:de:
06:43:c3:f3:b3:99:8e:f3:df:82:11:79:15:9c:c3:e1:f3:8c:
d8:fd:95:d5:77:71:68:b4:b4:43:4f:42:8a:26:ba:da:47:3e:
ac:81:3d:6b:43:1a:d6:ac:dd:41:57:bc:77:f8:5a:cc:7c:97:
13:6e:dd:88:65:7c:47:ad:67:e3:90:68:63:9b:34:bb:4a:9c:
53:5a:e8:92:03:c3:ca:48:4d:ff:8b:29:a7:7e:ad:01:24:68:
99:28:13:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:20:08 2025 by rpki-client