Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
File: O8y8cOGLbGnlPvUqXpJeX08M3ME.mft (raw, json)
Hash identifier: nX8bJBVOm0PUANoN6uaITONijkCt+LHmM2reKnN39Fc=
Subject key identifier: 43:0F:0F:99:EC:C6:EA:91:29:FF:97:AA:CA:67:E0:2B:B3:F1:FA:BB
Authority key identifier: 3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
Certificate issuer: /CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Certificate serial: 0194BD4ECDA0EC90AAD578A3CD9EF32AE288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
Manifest number: 0717
Signing time: Fri 31 Jan 2025 17:00:45 +0000
Manifest this update: Fri 31 Jan 2025 17:00:45 +0000
Manifest next update: Sat 01 Feb 2025 17:00:45 +0000
Files and hashes: 1: HabUl_PN48YzZNEWtBkjKb82MF0.roa (hash: 0wbJ0AQU5TxqX4mMc5xSS1a+CKR/ct/c7MrrwJkkz0M=)
2: O8y8cOGLbGnlPvUqXpJeX08M3ME.crl (hash: IVK1B0boua6TodDbvaPPEMe4ssXHZOxrXMEq8XS3P4U=)
3: Xi6D2TOsmKaKt73p2J8BVcS5X-U.roa (hash: bCMKnUY3Dzp0FpBoWOs1dTC9ELOluXfiQXdDZqb6JDc=)
4: ngjx-TB8ucax_4bLzcbBQjEnd4s.roa (hash: wWZqraR65yYRHuKrbldK9gSPA1D5WeOPM/TT1ybqX/k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:cd:a0:ec:90:aa:d5:78:a3:cd:9e:f3:2a:e2:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccbc70e18b6c69e53ef52a5e925e5f4f0cdcc1
Validity
Not Before: Jan 31 17:00:45 2025 GMT
Not After : Feb 1 17:00:45 2025 GMT
Subject: CN=430f0f99ecc6ea9129ff97aaca67e02bb3f1fabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3c:94:d6:07:e2:12:cf:0c:a3:64:9d:44:94:
e9:06:8c:d1:9c:1f:60:6f:25:f3:f2:8d:dd:0a:23:
c1:17:71:54:12:e1:3d:18:15:a8:98:0a:99:f0:48:
6d:47:b4:58:8c:05:ba:a2:d4:09:2e:3c:69:99:70:
59:f9:05:4d:00:ba:d0:0d:91:60:90:73:2d:b4:44:
53:81:66:30:1a:2e:b4:f9:18:fb:b5:8f:77:15:40:
fa:ad:a4:94:f9:0f:1b:e9:8d:d7:74:b7:0d:b7:fc:
13:23:8f:9d:07:14:ac:32:cf:99:72:59:cc:1b:48:
66:66:f0:48:7f:c2:e6:77:5d:1f:87:4e:13:ae:02:
c0:fd:a9:75:6c:10:d5:20:00:56:b9:06:ff:b9:13:
b9:6f:d7:87:43:18:39:55:fa:d8:8a:7b:bd:1a:d3:
01:26:00:ae:ac:f1:58:b9:f9:77:8e:f6:c7:86:a0:
b5:8d:41:ed:03:8d:1a:4d:7d:b2:e8:21:88:cc:3f:
8b:45:2e:41:e1:4f:7b:82:14:39:bd:ec:14:46:56:
80:d0:93:96:60:15:44:63:be:23:a6:ae:0d:3a:05:
05:56:86:1c:ae:e1:9e:bd:37:94:72:7a:31:46:30:
e4:24:e9:3f:a3:07:71:2e:9e:2c:e7:0b:17:0b:7f:
2a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0F:0F:99:EC:C6:EA:91:29:FF:97:AA:CA:67:E0:2B:B3:F1:FA:BB
X509v3 Authority Key Identifier:
keyid:3B:CC:BC:70:E1:8B:6C:69:E5:3E:F5:2A:5E:92:5E:5F:4F:0C:DC:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8y8cOGLbGnlPvUqXpJeX08M3ME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/8a4773-a2bd-40d2-bfc8-bbe60ea222c5/1/O8y8cOGLbGnlPvUqXpJeX08M3ME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:86:19:d6:b9:6b:12:44:91:e3:b6:ea:2a:49:bc:b0:c7:7d:
a9:20:51:db:09:4a:53:c8:3d:a4:07:a8:84:5b:62:04:e4:80:
14:03:b6:d5:bb:39:2d:4b:45:c1:b6:6f:b9:54:f8:88:ff:3e:
14:1e:b3:9d:69:e3:c7:de:c8:72:0b:fc:d8:ab:af:06:e8:0c:
82:51:5e:19:76:33:9b:47:b1:12:44:0b:3e:e1:97:6b:af:fc:
c8:eb:5c:e0:b5:39:23:fa:17:cd:95:ee:2b:a1:f5:c4:9b:be:
82:32:b4:06:ba:78:2c:91:89:60:e6:7b:5f:e4:47:83:09:2f:
9b:4a:7d:44:2e:51:c4:d1:78:bb:df:3f:63:c6:fc:6e:c0:7e:
b6:fb:22:8c:ef:21:a4:41:a7:cc:30:13:fd:e1:3d:5f:49:ff:
6a:d7:ca:dd:46:12:86:6c:2a:99:a9:c6:8a:53:ff:4c:13:cc:
01:c9:ca:ce:2e:5b:2e:9a:fe:3e:aa:73:88:3f:d8:45:03:68:
b1:8f:06:bc:da:94:f0:5f:56:05:10:3f:78:60:8d:45:71:1f:
14:68:7f:3b:4f:39:ce:0e:b7:43:88:c8:b5:16:14:bd:fe:6c:
d1:16:d9:ef:7c:04:98:5a:28:39:bc:90:0f:99:2f:ae:60:b3:
28:42:92:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:18 2025 by rpki-client