Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
File: OnsDkT46KF7-Uc2sZfVQTIejRGA.mft (raw, json)
Hash identifier: ypcvcUNzNVNV+RZgFjyBu13HXB5UwYVBpeg3hGnwcFI=
Subject key identifier: B2:E8:E2:97:96:64:73:C9:65:25:EB:F2:E1:81:7A:20:B8:AD:29:66
Authority key identifier: 3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
Certificate issuer: /CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Certificate serial: 0194BBCF0206EFC4593FE02652D1B5053A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
Manifest number: 1130
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: OnsDkT46KF7-Uc2sZfVQTIejRGA.crl (hash: Z4L3v/m6Hv0Ryq3pE6wmq770+R1m/IETV+n9jFGvKfU=)
2: bXuLlzwCurMedfx4RUMXi7r1h0M.roa (hash: sXVX+GwCrEzWh3/PYurD7SBft7awlkJnghtSxD3UtHo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:02:06:ef:c4:59:3f:e0:26:52:d1:b5:05:3a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a7b03913e3a285efe51cdac65f5504c87a34460
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=b2e8e297966473c96525ebf2e1817a20b8ad2966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d8:63:04:24:8b:ff:9e:9c:1f:fb:2e:62:cc:
05:e3:ee:5b:ef:b0:21:9e:ef:06:96:3e:c9:3f:3d:
1e:e8:13:ae:9e:b5:bc:9a:3d:0b:58:1b:3c:f3:d4:
d2:4f:70:cf:27:e4:59:7e:b9:3c:9e:e0:d0:d7:20:
0d:44:79:55:4c:49:36:0d:af:4b:d2:40:78:8e:00:
69:5c:a5:27:bb:81:4d:08:1a:22:90:f6:b3:3b:dd:
05:35:a8:b5:45:62:1e:43:a1:eb:78:f5:16:ef:27:
9b:e5:27:d1:fc:6a:e6:1f:11:28:56:4a:e5:b9:da:
c8:25:60:fa:fa:c5:06:11:39:00:be:a0:b2:ce:ff:
00:b1:30:90:7e:b3:fe:22:ec:e3:52:f7:87:44:3c:
52:79:02:42:5c:e0:30:85:bb:f6:05:c9:46:95:78:
7a:cb:fc:56:49:b6:07:1a:5d:e0:b2:d6:29:af:7e:
45:2d:13:c2:1b:5f:4b:21:0d:38:90:bf:c3:c2:52:
dd:f8:03:da:0c:71:a3:1a:44:12:92:22:2e:f4:0d:
c0:b3:0b:6c:04:af:1b:84:16:e5:72:52:b8:c7:d0:
80:7d:12:c4:14:c9:a8:2c:da:e7:52:0f:7f:c0:48:
6f:70:63:d7:b8:bc:bb:b6:9b:11:16:aa:44:1f:5b:
63:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E8:E2:97:96:64:73:C9:65:25:EB:F2:E1:81:7A:20:B8:AD:29:66
X509v3 Authority Key Identifier:
keyid:3A:7B:03:91:3E:3A:28:5E:FE:51:CD:AC:65:F5:50:4C:87:A3:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnsDkT46KF7-Uc2sZfVQTIejRGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/61db6b-1d73-4ec2-8be0-f37cbaf7ce5a/1/OnsDkT46KF7-Uc2sZfVQTIejRGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:5d:ff:45:68:c5:eb:82:40:ae:a6:1e:9f:aa:24:bb:b7:9d:
3b:e3:59:81:6a:9a:f8:42:3c:c9:89:54:a4:8e:7e:00:7e:5f:
3e:c0:60:6d:a1:41:db:b1:7d:75:2e:43:cc:b0:ba:e2:b6:90:
4a:b9:44:a3:45:78:09:0a:f3:21:b5:2f:6b:00:14:01:b5:3b:
b1:63:b5:00:4d:98:b9:28:9c:02:58:cd:8d:c7:3f:d1:a5:0a:
34:c3:cf:da:e6:f5:f8:68:9b:af:b5:fb:b5:91:76:c3:07:3a:
56:72:44:4d:6b:24:25:bf:69:d2:ea:5e:71:38:ec:03:a0:4d:
6b:a6:0b:8e:a6:36:92:ed:2f:0b:80:37:f6:82:2a:4c:e7:9c:
d6:b5:40:0d:f3:f7:27:1d:ee:4b:bd:af:f0:8e:fb:c5:28:b7:
56:d5:57:d1:94:15:48:71:3b:60:7e:cd:31:9c:2e:a6:78:1f:
c0:1d:77:5c:c8:24:77:95:58:fa:ee:c8:c8:99:e8:2f:b3:57:
78:17:33:53:20:40:d3:d0:e4:6d:0e:ab:c5:72:59:e8:79:de:
eb:8d:59:33:5a:81:f3:06:05:63:5c:43:03:66:9d:f1:9c:bc:
d0:94:6c:07:86:5d:8f:4e:59:28:6d:49:10:54:ee:a5:c7:55:
e1:05:87:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:51 2025 by rpki-client