Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
File: 43ogp_KKgk9nMVpWblkkSqqMfUo.mft (raw, json)
Hash identifier: BGItebEmH+JBV/aEAz/93ABU6o+hdaL0CYQ837PzdMM=
Subject key identifier: 61:49:03:90:D4:06:11:37:D6:8E:69:82:F0:F5:BC:EE:44:CF:AA:7D
Authority key identifier: E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
Certificate issuer: /CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Certificate serial: 0194BBCEBF31AC2718E414419DD4EF9BC119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
Manifest number: 108D
Signing time: Fri 31 Jan 2025 10:01:16 +0000
Manifest this update: Fri 31 Jan 2025 10:01:16 +0000
Manifest next update: Sat 01 Feb 2025 10:01:16 +0000
Files and hashes: 1: 43ogp_KKgk9nMVpWblkkSqqMfUo.crl (hash: 5mgksg/+f5sdLyQqR6n01IgmWcRvVT9FdUxWtmMJgBk=)
2: 9PUwFWX6MI5zmQ2Oq6gL-_qhrj0.roa (hash: 3b0NbUCvSpLrWF4vh/o6Yjp7ddJczpbBr1onafxnYgk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bf:31:ac:27:18:e4:14:41:9d:d4:ef:9b:c1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37a20a7f28a824f67315a566e59244aaa8c7d4a
Validity
Not Before: Jan 31 10:01:16 2025 GMT
Not After : Feb 1 10:01:16 2025 GMT
Subject: CN=61490390d4061137d68e6982f0f5bcee44cfaa7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:71:e0:63:f2:53:67:32:92:c3:fd:58:d2:33:
10:95:0a:fc:1d:09:6b:33:d7:e7:de:b6:e3:58:ce:
4e:f5:0f:fa:99:fa:75:09:8b:74:6e:92:a7:03:1c:
8a:02:72:77:92:86:0d:e3:5d:b9:3d:cd:f4:fe:ed:
64:b6:9a:0d:08:36:9b:94:11:c9:7a:30:fc:ef:e8:
26:88:0f:4a:25:07:39:8f:f3:06:26:69:ca:f2:b3:
19:1c:6a:af:c3:42:f5:3c:74:4f:ac:b1:e3:4f:8c:
90:bf:9e:3b:23:6b:aa:55:ac:ba:6f:35:3c:d1:46:
80:09:d3:32:35:72:ba:70:58:71:72:4e:8b:a3:cd:
70:a6:c8:cf:9e:0c:62:d1:43:40:8a:57:e2:cf:37:
ce:35:44:61:88:75:50:f6:5c:b2:8d:0c:9e:2d:b6:
82:86:96:c0:b3:2a:89:cb:ba:c6:99:b5:b6:94:c5:
0d:c5:f2:9b:26:1b:a5:34:2a:60:d4:62:d4:15:9e:
d4:b1:4b:67:c0:6a:96:0e:76:6e:6b:13:2d:be:ed:
f3:79:de:78:6a:14:47:6e:30:36:7d:1c:74:40:c4:
47:8e:52:74:8a:ac:aa:56:fb:a0:a2:15:33:60:55:
e6:46:bb:ec:7e:11:24:f1:12:73:cf:ae:f1:4c:dd:
35:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:49:03:90:D4:06:11:37:D6:8E:69:82:F0:F5:BC:EE:44:CF:AA:7D
X509v3 Authority Key Identifier:
keyid:E3:7A:20:A7:F2:8A:82:4F:67:31:5A:56:6E:59:24:4A:AA:8C:7D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43ogp_KKgk9nMVpWblkkSqqMfUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ac598f-5f52-4330-b013-57069e0803b5/1/43ogp_KKgk9nMVpWblkkSqqMfUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4c:f3:21:b9:a3:da:9f:1e:db:a9:b4:89:ee:4d:7d:87:7a:
01:7d:bf:39:ce:ec:f8:e3:2e:61:fb:17:5d:9f:34:f8:84:05:
d5:60:36:c1:3c:a0:6e:13:1e:36:84:43:3b:1f:ed:b3:00:f9:
3b:5a:58:0a:bb:fd:57:49:c9:dd:29:8e:8c:44:12:b5:eb:8b:
b9:85:7f:a7:d7:4d:cb:fd:77:20:f6:05:8e:b3:09:b2:d4:36:
3d:c6:da:06:ff:ca:b6:57:5b:4c:92:b7:85:ee:6a:8a:c1:fb:
69:e1:50:56:80:c2:64:e1:28:e0:71:9e:d0:50:af:a6:4b:32:
56:03:24:53:81:93:0e:f9:c7:bc:ad:28:f8:c5:9f:ce:64:ca:
91:a1:f2:35:63:c2:fd:78:7e:c9:a2:c3:23:0f:fd:7e:5b:a9:
6e:31:32:fb:4a:34:3f:e4:2f:09:11:42:59:dd:7c:a0:78:ad:
b3:93:88:86:91:ac:5b:b0:1e:f7:f2:47:bc:ea:7f:7b:a6:03:
d8:d9:e4:81:7e:d0:92:6f:0a:a0:bf:66:65:39:8a:e6:d0:62:
1d:f0:43:cb:4b:a3:bd:3a:34:34:f5:7c:3c:b6:9f:2b:c3:0a:
21:5d:62:0d:95:f3:82:e0:b8:71:09:94:f6:ea:76:46:3d:f6:
ed:46:ab:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:32 2025 by rpki-client