Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
File: oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft (raw, json)
Hash identifier: lSLLfJx+KQSx7KiIO4SzW27QrfSOFK7jB8UkZBagmmw=
Subject key identifier: A4:6C:CA:E6:9E:C1:30:F3:A3:F9:E3:97:9B:D9:3D:DA:6D:F3:FE:36
Authority key identifier: A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
Certificate issuer: /CN=a1655282be419d21222b506fb7a368c3fe5db23d
Certificate serial: 0194BD178FB27C814D3689782CF77020E1E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: SxgKNPaYJVhAK36SOSTuyxJmYzI.roa (hash: iBEUhnRScZ+rajzC9bqU9rcXbnYIQMvrpQOY+tW8FQc=)
2: oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl (hash: fN+P5BWC8LTqlGk8UL18043npocYGj+GtMsYRqRXN20=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8f:b2:7c:81:4d:36:89:78:2c:f7:70:20:e1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1655282be419d21222b506fb7a368c3fe5db23d
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=a46ccae69ec130f3a3f9e3979bd93dda6df3fe36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c4:54:b8:9b:9c:91:82:7f:fc:00:d7:71:55:
e3:96:65:9e:1f:51:9c:aa:e8:73:ab:36:2d:f1:60:
47:08:eb:be:24:28:9f:5c:4d:9e:44:91:50:07:c3:
6c:9b:a9:73:e2:61:f0:f7:46:cd:a0:b6:47:08:b7:
e5:ee:e0:12:68:0d:1b:ad:e4:2a:a4:e1:3a:67:ee:
b8:22:fd:01:db:af:ea:b2:75:ed:ef:dc:27:06:9f:
3a:4c:5b:22:b4:c3:50:d8:00:90:ee:9b:5b:9f:11:
68:91:04:d2:a6:4f:b0:1b:11:0b:57:19:43:e6:b5:
61:47:8c:64:35:b5:c4:37:7f:88:72:95:25:c6:ee:
8a:ac:4c:1d:35:ef:20:0c:bb:a8:60:66:df:42:e9:
2b:70:89:33:61:d7:5c:e6:08:d5:53:60:89:2c:5c:
c0:cf:41:ea:12:02:c2:22:8d:ea:5e:60:97:6a:98:
e0:58:17:4d:9a:29:19:ef:7e:3d:f9:c6:fa:b9:f7:
5d:47:20:90:be:85:ae:c9:2a:6a:6e:bd:83:02:68:
85:b0:71:24:4c:08:ea:fc:16:fa:dd:1c:0a:b4:7a:
15:5b:2c:89:ee:95:d9:53:5e:c6:f5:55:fa:3f:97:
92:ee:57:d6:7c:d0:2d:a7:45:8f:a9:59:aa:7a:e3:
8b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6C:CA:E6:9E:C1:30:F3:A3:F9:E3:97:9B:D9:3D:DA:6D:F3:FE:36
X509v3 Authority Key Identifier:
keyid:A1:65:52:82:BE:41:9D:21:22:2B:50:6F:B7:A3:68:C3:FE:5D:B2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWVSgr5BnSEiK1Bvt6Now_5dsj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/8062a9-7f47-44ea-abb7-91dbc9f0e8db/1/oWVSgr5BnSEiK1Bvt6Now_5dsj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:76:ac:d4:0c:8c:00:34:31:cd:19:3e:fc:51:26:22:d9:ee:
dd:e7:e8:5a:85:52:19:61:e3:90:70:ce:be:ef:c5:f3:b1:b1:
3f:03:71:08:8f:62:5d:47:0e:11:2a:5b:36:0b:3b:16:f1:a7:
f8:fe:7f:86:79:a7:2b:2f:c8:f5:41:a8:d5:50:a0:d7:a4:84:
ef:fd:4c:48:fe:76:fe:b0:54:d2:6a:9e:96:19:81:64:39:63:
23:08:25:a1:37:ac:a3:96:cb:ce:80:e9:a2:cc:b7:d9:98:b9:
a0:9b:00:b5:fd:8f:1f:ba:35:c8:7a:79:5a:d6:5d:19:88:f8:
0e:60:1f:fa:29:0c:98:87:81:20:3a:8a:67:69:fc:b1:03:0c:
a1:61:58:ea:1a:4e:6d:a9:0c:9f:48:80:fe:c9:c1:3a:0c:0a:
17:80:88:e6:38:5c:93:25:e1:d9:7a:e5:0a:fc:73:92:21:b3:
12:a5:65:ab:08:48:8d:24:99:44:71:0b:3d:b8:49:45:50:03:
be:cc:10:8b:13:7d:c7:ca:0a:ab:8b:3c:45:e9:66:2a:3d:06:
aa:08:ab:cc:84:23:79:00:81:b0:e0:e7:7f:66:b5:ea:53:2b:
77:50:ea:53:8f:2d:4c:f5:9b:1e:4e:14:7c:9c:c4:5f:7f:6d:
1a:71:31:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:06 2025 by rpki-client