Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
File: OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft (raw, json)
Hash identifier: ZklGL/SL9Ak2ndNTMi0+1umzQMWIRs08j6MZcKr7HHk=
Subject key identifier: A0:B2:68:10:12:5E:21:AD:93:82:43:82:3F:05:3F:93:CF:08:6A:61
Authority key identifier: 39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
Certificate issuer: /CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Certificate serial: 0194BD85872897AAA1A78CA08D6EE16B6803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
Manifest number: 08F5
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl (hash: UydjQCnsnzwwdfOQ73n8AwFuZeMV00yh72QOKGZWqIo=)
2: ZheJClH79M-pTRLGEsquKEEr6pM.roa (hash: eeP+fsrVhAPz7GiAy+y57uO8gQvXWPRMB7ruMgXE6Js=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:87:28:97:aa:a1:a7:8c:a0:8d:6e:e1:6b:68:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398881e06383fd2c36e9f245c4bfa1301d15a537
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=a0b26810125e21ad938243823f053f93cf086a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:57:8d:73:f9:10:11:e3:0d:cc:0b:21:79:
57:f4:b6:ae:ab:2f:7e:bb:81:de:d3:e2:87:5b:c1:
13:53:93:75:9d:4c:8f:8c:ea:1a:59:ec:54:cf:74:
c7:fd:8d:22:46:36:08:5e:66:31:63:8e:85:6a:da:
d5:f9:a2:96:04:46:41:57:8a:75:96:ad:0d:66:15:
ad:bb:ae:28:8a:3d:cf:06:d9:52:41:cd:85:ca:07:
2e:6d:b2:13:55:84:4d:2a:bc:e7:0d:e2:b0:e7:b8:
f7:50:16:15:8a:3f:55:b0:bc:51:63:e1:c6:9d:6b:
9a:3d:2e:32:85:6a:37:9b:0b:da:4e:88:45:95:89:
ef:94:42:6b:73:16:b6:0e:af:37:75:c5:58:d1:83:
15:32:18:90:19:50:bc:7e:16:8b:68:cc:a3:3f:33:
e3:60:50:ef:80:6a:e0:08:41:64:68:51:35:d5:13:
0e:a8:65:78:18:78:6b:7a:60:44:ec:c7:a8:75:f4:
92:bf:8f:52:59:70:65:4f:b9:b6:28:75:07:42:8f:
64:bb:42:e8:a8:82:9c:49:eb:40:8d:98:0d:3e:6d:
04:ea:aa:35:e9:ee:3d:2a:fc:ae:f4:52:b5:50:67:
5e:b5:d1:72:ff:be:84:fc:13:50:15:f5:55:aa:d7:
4e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B2:68:10:12:5E:21:AD:93:82:43:82:3F:05:3F:93:CF:08:6A:61
X509v3 Authority Key Identifier:
keyid:39:88:81:E0:63:83:FD:2C:36:E9:F2:45:C4:BF:A1:30:1D:15:A5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYiB4GOD_Sw26fJFxL-hMB0VpTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/cda215-49ae-407b-af3b-359e4e4d9175/1/OYiB4GOD_Sw26fJFxL-hMB0VpTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a2:04:c4:cd:2d:c1:5f:5e:d2:3f:df:28:40:00:44:8b:7d:
32:d3:14:d0:33:5d:da:77:b4:9d:c8:95:7b:ca:82:46:55:50:
1c:9b:d4:63:39:f5:a6:4c:5e:39:55:ce:84:c6:08:a8:60:d8:
19:78:42:53:e6:92:56:ad:5c:a2:05:b8:96:68:b0:28:f4:b9:
d8:0d:fe:f2:9a:16:0c:a0:ce:ef:14:d3:a9:fa:6b:4b:b7:2d:
2d:dd:d9:50:50:6e:c3:84:76:de:e6:3c:18:63:be:1b:14:29:
c9:05:bb:b5:9a:cd:00:bd:ff:9d:f8:d2:52:c3:23:1c:a6:80:
23:49:d6:f4:89:79:86:63:d6:66:4a:28:5a:cb:9a:22:3b:8a:
14:de:7d:c2:1c:02:9d:2d:a9:73:02:3b:04:7c:b1:e9:29:3d:
22:f2:14:70:91:52:b4:35:9d:9b:98:f9:29:e0:a6:c1:68:3b:
34:19:a4:80:8f:c8:7f:31:7f:9d:09:5d:ea:c9:55:11:d3:46:
7b:c6:3a:78:3a:8e:7a:04:a0:38:0d:5b:28:92:2b:5a:37:4a:
11:e1:f0:dd:a2:2f:ef:aa:54:49:2b:42:53:e3:2f:64:72:87:
04:69:7c:39:28:36:c1:ca:00:37:c7:01:d7:a3:6f:d2:88:57:
fc:ad:d5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:04 2025 by rpki-client