Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
File: OBLJfb0yGVtq-pEUC1UgteDCxb4.mft (raw, json)
Hash identifier: /HgVHi1//ZaV9lA7By9fZcU7sK9o2vYe9ai27WiPAo8=
Subject key identifier: 6D:68:BC:40:42:23:6A:8B:09:BB:34:56:95:0A:41:AD:B4:8D:B0:32
Authority key identifier: 38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
Certificate issuer: /CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Certificate serial: 0194BC04F1B6B8811B1B54CEC21A305773C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
Manifest number: 116F
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: KgcCICa_-hixWZTTUELiCMTd1qc.roa (hash: aB/2vvsZVUV2pqutYR0WS2bhu7nsx+1f1yx0LZyC04o=)
2: OBLJfb0yGVtq-pEUC1UgteDCxb4.crl (hash: p8DAvuDM2cUHi3grpHxj1ccvq9PQHA/Z6WWjruOw3Ag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f1:b6:b8:81:1b:1b:54:ce:c2:1a:30:57:73:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3812c97dbd32195b6afa91140b5520b5e0c2c5be
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=6d68bc4042236a8b09bb3456950a41adb48db032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a7:fd:44:34:37:d5:ae:3f:1f:8b:5e:7a:ac:
26:74:db:6f:36:95:99:65:e6:eb:a3:96:76:c3:59:
ca:13:53:b6:5d:4c:bb:27:a4:6f:03:5d:0d:27:ee:
d6:63:f6:18:e4:fe:a3:23:7d:3a:7c:2a:ed:07:15:
92:30:2f:12:5b:c5:54:25:e1:5e:67:d5:a3:e5:6a:
95:4a:c0:e3:05:9b:f0:b9:50:25:73:ef:53:08:65:
37:0a:7b:7a:a2:a7:02:44:40:52:fe:b2:c2:9a:68:
2e:c3:15:1d:4b:16:c3:d3:93:b0:68:40:b0:27:0e:
52:96:07:52:b3:a5:22:38:bc:7c:54:7a:51:92:41:
c6:46:f7:62:a8:33:6e:46:d7:31:29:a1:d7:71:36:
8c:07:51:51:b3:74:4c:bc:24:bd:61:20:c1:15:98:
f8:eb:be:76:8f:cb:31:b9:f5:88:94:e0:39:db:b0:
2e:9f:eb:d6:72:a0:45:87:9e:5c:91:f3:ee:bd:0d:
7d:8b:7e:a5:af:b4:5b:1b:97:5e:af:9b:ff:f2:a2:
a3:95:b9:65:01:9f:12:0b:12:c7:d2:73:25:54:c0:
b6:0b:cb:54:77:65:4e:0f:97:c6:0c:16:e4:3a:6c:
2e:4f:63:43:50:26:f4:97:a7:7c:02:1f:b8:af:74:
b2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:68:BC:40:42:23:6A:8B:09:BB:34:56:95:0A:41:AD:B4:8D:B0:32
X509v3 Authority Key Identifier:
keyid:38:12:C9:7D:BD:32:19:5B:6A:FA:91:14:0B:55:20:B5:E0:C2:C5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBLJfb0yGVtq-pEUC1UgteDCxb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb53fc-7096-4594-91b1-d92785a61219/1/OBLJfb0yGVtq-pEUC1UgteDCxb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0e:a9:be:3b:15:2e:24:ea:c0:dc:f4:06:13:f8:d0:3c:6a:
23:61:fb:a0:b3:01:26:36:c2:af:55:5d:aa:70:31:da:74:f0:
f9:24:e0:2d:fe:0f:63:ce:64:14:87:9f:de:eb:35:81:3d:82:
8c:fd:5e:de:b0:4c:fe:98:90:55:6c:b3:af:ef:a5:45:3d:8d:
77:7d:3e:b2:3b:4a:ff:ae:46:54:46:f5:40:d0:5a:0b:85:8d:
bd:63:cd:4d:56:e6:ec:ba:2b:36:d1:11:cb:cd:84:be:31:76:
6a:29:c4:9b:ab:d1:47:30:02:4b:4e:7e:79:f6:17:63:ac:f0:
c5:8a:c9:1a:7a:be:b1:89:2d:a7:05:3e:9a:45:00:96:de:29:
d0:ca:ca:0b:e0:67:a0:7d:e0:fc:78:30:cb:0b:26:c3:db:0f:
cf:c4:b0:58:db:1b:d1:8f:07:0d:f8:ef:67:af:0c:bb:80:cf:
1d:d0:8c:d1:b7:60:38:00:a9:d5:f3:b9:96:ec:1d:dc:cb:f1:
5c:d1:73:e5:f7:f0:1c:55:71:74:b1:2d:5a:77:89:a9:9a:ef:
e5:52:57:cd:6e:90:1c:63:d4:b1:f4:d8:fb:75:8d:1e:f0:db:
97:95:21:54:60:b2:42:61:34:34:07:bf:cd:a5:ab:fd:9f:80:
4b:2e:8f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:28:32 2025 by rpki-client