Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
File: OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft (raw, json)
Hash identifier: XOq0NAtr6FryOEguJngBuU1FmNL01tUvcJV1JGeD8ZQ=
Subject key identifier: 63:E7:91:FF:ED:95:3A:B6:E2:70:95:30:EB:4F:E1:DF:89:21:A0:FA
Authority key identifier: 3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
Certificate issuer: /CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Certificate serial: 0194BD4E971B487F445A4656FD7027BA644A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:31 +0000
Manifest this update: Fri 31 Jan 2025 17:00:31 +0000
Manifest next update: Sat 01 Feb 2025 17:00:31 +0000
Files and hashes: 1: 8b8hGUt6rzi1dlifxra-q3rgP6w.roa (hash: KASE+0wVItpUVcgXdu/CScsiZaEIchQxerFmFT5uHpo=)
2: OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl (hash: dzHJdknRGo0UriJA6CY9uVRsfpDKkUHPQSzw/Bcuvwc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:97:1b:48:7f:44:5a:46:56:fd:70:27:ba:64:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae0096247a8c54e5de8c1b0daf1054aec8cc450
Validity
Not Before: Jan 31 17:00:31 2025 GMT
Not After : Feb 1 17:00:31 2025 GMT
Subject: CN=63e791ffed953ab6e2709530eb4fe1df8921a0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c8:eb:f9:1e:60:c4:fa:ae:b2:15:ee:42:61:
f8:6b:d7:b8:45:65:3b:ad:e2:6c:00:41:62:93:c2:
d8:7e:ae:2b:12:7b:01:99:a1:9b:fe:30:a6:33:86:
03:e1:bc:39:da:35:ca:d4:1a:04:45:92:63:56:f0:
be:e4:e3:39:f5:c4:3f:cb:05:7f:1b:b9:f9:8e:50:
87:95:fc:c8:84:cb:f2:a2:7e:3c:fd:1c:0a:cf:aa:
e0:eb:7a:68:65:7a:94:db:b4:43:27:8a:fd:37:9a:
e4:d8:4f:49:7c:21:64:c5:2a:a8:d4:d1:51:6d:77:
86:73:ac:4f:3a:63:84:5e:6c:a6:24:8b:b3:6b:45:
b1:b7:fa:0b:7f:38:42:db:6e:27:b2:cb:4b:c3:65:
7a:89:c1:81:76:38:79:e5:2c:ab:73:47:f8:f8:ee:
87:02:17:1e:44:4a:53:36:e9:bb:b3:26:00:2a:88:
95:3d:bf:b0:8d:6e:6d:54:2f:6d:db:41:26:c5:f6:
bf:44:92:00:01:0f:90:29:39:7d:7f:c0:d6:56:3b:
b2:87:21:25:3f:f6:9a:56:c3:b7:b4:a2:be:9b:a8:
9a:9f:49:91:4b:5b:73:bb:dc:b2:df:7f:de:e9:98:
f8:cc:af:55:a8:d0:94:67:5e:d2:34:86:12:45:80:
38:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E7:91:FF:ED:95:3A:B6:E2:70:95:30:EB:4F:E1:DF:89:21:A0:FA
X509v3 Authority Key Identifier:
keyid:3A:E0:09:62:47:A8:C5:4E:5D:E8:C1:B0:DA:F1:05:4A:EC:8C:C4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuAJYkeoxU5d6MGw2vEFSuyMxFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0aa494-9308-47ee-a808-b9722144513f/1/OuAJYkeoxU5d6MGw2vEFSuyMxFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:51:33:7b:63:a7:f2:b2:b9:66:43:b7:94:a9:ab:d4:1e:4d:
8d:04:74:f5:9e:90:a5:10:45:e1:13:09:39:99:85:65:1a:8f:
dd:dc:0b:5b:d5:f7:de:af:ba:00:64:92:d5:a9:7e:0d:72:a2:
de:6c:36:8c:af:f1:74:a6:73:7d:fa:b1:91:35:3a:df:7d:9e:
3c:48:6b:54:ad:93:5a:bf:92:d5:dd:99:c2:7b:5f:19:9f:ee:
f6:69:03:09:eb:62:68:53:78:18:d8:09:ba:f5:90:18:67:92:
55:cb:a7:67:75:7a:6a:89:1f:7d:04:52:3e:a4:68:9c:c5:76:
e6:71:10:0a:b9:18:54:a3:f4:8b:bb:1b:13:3b:c3:86:81:15:
64:31:c0:54:2a:7b:3c:86:d2:db:8e:a9:3e:bf:9c:0c:19:34:
69:02:5c:d2:18:d8:a5:f6:84:25:61:df:27:da:f1:65:96:12:
e7:43:6e:0d:83:d4:12:4c:f8:b1:ce:d5:64:56:2c:65:8c:0a:
14:88:18:fb:45:37:de:52:dc:6f:62:fe:8a:7c:de:93:6e:42:
e9:70:f9:a1:c2:92:22:ac:23:ac:70:96:bb:ca:a9:54:ae:fa:
92:f9:79:1e:e7:96:9f:a7:96:c1:3b:53:b3:de:09:75:48:61:
b0:6f:2b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:49 2025 by rpki-client