Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
File: oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft (raw, json)
Hash identifier: 9DJ1EUeBWCqeZZluLdkI2TvUB54KHFpuRlZ2vww3bsE=
Subject key identifier: A9:76:C4:5F:09:AF:DF:4A:11:1E:AB:60:FA:A4:70:8E:90:49:D9:AF
Authority key identifier: A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
Certificate issuer: /CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Certificate serial: 0194BCA990EB93FABE89A6C103B5C1D4F151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
Manifest number: 0B17
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl (hash: wDWSX/jWXNMRPMwFoP8Up+Z54yo4fpIiFjhC/ICQ5yA=)
2: q9BWcMARtQ3_HrPyS7FBIEXNhsI.roa (hash: D3KwQaIiGET5pyY7n2Q5pJoywyLFE76xEx7j4PCoCfY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:90:eb:93:fa:be:89:a6:c1:03:b5:c1:d4:f1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07dcb6db9a75c1017fee672f73b961771b77ca1
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=a976c45f09afdf4a111eab60faa4708e9049d9af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:78:28:94:52:b1:e8:e9:ce:62:ab:64:00:c4:
a5:f7:c6:5b:05:7f:cd:3b:62:a5:c1:ec:d2:56:2b:
3a:1e:ba:89:14:3a:05:94:9b:65:a6:f9:bb:61:e9:
d4:ef:8f:13:9c:f8:d6:64:32:55:3f:f3:db:1a:9f:
24:43:18:0f:e0:b3:e3:50:08:c0:7f:06:f8:45:a7:
84:f5:8b:8b:f2:3a:49:c1:f0:63:b4:60:69:6f:3e:
89:f7:ac:c0:d7:5f:68:4d:2e:0e:35:08:64:43:9a:
c3:cf:f4:a2:4c:36:4d:da:8f:b9:fc:58:c2:a1:bc:
20:3d:28:78:98:0b:d5:1e:f3:a9:66:07:55:17:c1:
2c:e3:d2:5b:93:0f:ed:b1:fa:30:73:d6:0c:14:92:
31:a5:b2:75:f2:bc:ed:e5:80:6f:0b:dc:88:18:0e:
d1:bf:14:c0:1c:4e:51:9d:07:30:a2:dd:40:bb:f9:
42:69:fa:b1:7c:cf:d5:ba:c8:17:a1:41:44:e5:63:
18:76:e7:ca:db:be:f1:02:68:15:db:b9:2d:e7:fd:
41:1f:58:50:d1:27:98:8d:72:25:e9:2a:66:70:eb:
cb:21:2e:68:54:e7:97:b7:92:fd:20:cb:7e:cb:06:
1f:ed:b1:03:0f:c1:13:35:3d:48:d8:06:1a:20:b0:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:76:C4:5F:09:AF:DF:4A:11:1E:AB:60:FA:A4:70:8E:90:49:D9:AF
X509v3 Authority Key Identifier:
keyid:A0:7D:CB:6D:B9:A7:5C:10:17:FE:E6:72:F7:3B:96:17:71:B7:7C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH3LbbmnXBAX_uZy9zuWF3G3fKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/303105-e7c8-4a44-a181-cb40ee048dc0/1/oH3LbbmnXBAX_uZy9zuWF3G3fKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:58:20:79:1d:78:39:76:94:15:3e:85:2c:74:b4:8a:49:a5:
e7:3f:84:31:bb:c0:d3:0f:a7:9e:7b:8a:27:66:6f:cf:41:3e:
1a:0b:55:27:90:8a:75:25:2e:65:60:2b:98:91:2a:2e:1f:8d:
b8:63:ca:90:15:1c:74:30:8d:8a:70:2b:1e:12:b0:f2:96:fa:
35:f1:93:ae:80:64:60:73:c6:22:7c:cf:e5:1e:81:74:bd:54:
75:3e:67:b5:fb:1d:ef:4a:5b:d3:49:76:62:41:03:55:4b:40:
71:86:69:7f:45:74:25:d8:96:75:5b:ba:be:23:8a:5d:68:52:
85:44:46:35:46:ee:4d:23:c6:87:ff:3d:dd:d9:0f:fb:3a:8b:
de:f6:02:60:30:80:7c:75:0f:5e:cf:49:ed:43:ae:b0:6f:70:
49:a0:f7:df:f9:aa:01:e3:c4:f1:a2:2c:39:5e:6c:d8:75:64:
c1:21:c1:17:69:4b:a8:c3:83:6b:9a:48:73:6e:94:36:e3:74:
b2:e6:b7:99:4a:85:37:e9:8f:d2:8f:d3:bc:c8:57:55:67:8c:
3e:ce:14:0b:c9:97:fe:ec:6f:18:26:ff:03:3f:cb:f4:f6:84:
73:ae:03:7f:73:fd:07:5e:54:6e:90:21:58:3e:c9:fe:0e:40:
84:0d:e1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:24:35 2025 by rpki-client