Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft
File: otCM3GpDDvDaiCmRcla2rY0KNvk.mft (raw, json)
Hash identifier: WzcjkmyIx6hzjDcusIU5GP79GRC99218bJsAkX6l7mc=
Subject key identifier: 64:CE:BD:37:17:7F:8B:EC:C0:18:7C:DF:DC:38:0D:FC:5E:11:62:61
Authority key identifier: A2:D0:8C:DC:6A:43:0E:F0:DA:88:29:91:72:56:B6:AD:8D:0A:36:F9
Certificate issuer: /CN=a2d08cdc6a430ef0da8829917256b6ad8d0a36f9
Certificate serial: 0194BBCE880415D2B8DC0107B37F1CAA29C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft
Manifest number: 064D
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: otCM3GpDDvDaiCmRcla2rY0KNvk.crl (hash: x1IeYw47wwd+IaO/zWE0L0Ttc72pp3CKkySgszwXBrI=)
2: uWHHQqBwsm-RgF6BGlPrCIiU5u8.roa (hash: c70DUe86Dscr+BOk1RbQf+gmFBszpSvbzYy8111R1f4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:88:04:15:d2:b8:dc:01:07:b3:7f:1c:aa:29:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d08cdc6a430ef0da8829917256b6ad8d0a36f9
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=64cebd37177f8becc0187cdfdc380dfc5e116261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f6:74:24:07:f9:ce:3d:3e:78:84:3d:cb:6e:
94:e3:56:1e:e9:59:97:36:c0:1f:61:e7:46:dd:58:
e4:8f:1f:82:7a:2c:a4:f8:d3:a1:1e:52:92:65:7d:
65:a8:08:fa:c9:f4:8c:de:b7:24:ad:b2:86:a3:f0:
e8:a2:71:4b:bc:83:70:4f:32:b6:6d:0f:2a:dd:e7:
40:7c:e6:df:c1:b0:3e:f9:1d:64:07:1b:60:39:4a:
d1:08:6a:0a:4b:56:95:de:39:95:30:4c:d8:a0:6b:
d3:d9:8b:92:21:e0:ae:07:45:3b:1e:92:9c:34:a2:
42:be:5a:0e:11:dc:13:6c:2b:91:4e:9d:3c:04:28:
37:f2:64:e5:73:be:68:e7:31:6e:8c:e1:05:d3:94:
f4:32:ef:0d:99:c2:b2:dc:1f:01:23:e2:50:f0:d2:
a8:ec:c1:76:c7:ae:1f:ac:3c:3a:66:8e:d4:fb:4b:
c2:36:c2:d9:71:5c:ef:85:f1:c3:43:8e:3e:0e:1b:
7e:fa:b3:56:ae:9b:c6:c2:7f:70:84:73:70:cb:87:
fb:7c:35:d0:11:3c:9c:6e:90:82:4a:89:b6:cb:28:
b0:2f:ba:82:d7:7c:95:04:02:39:ff:d7:d3:5e:2d:
ab:75:2f:9a:1a:33:c1:63:c3:03:f6:7b:91:e3:39:
bd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CE:BD:37:17:7F:8B:EC:C0:18:7C:DF:DC:38:0D:FC:5E:11:62:61
X509v3 Authority Key Identifier:
keyid:A2:D0:8C:DC:6A:43:0E:F0:DA:88:29:91:72:56:B6:AD:8D:0A:36:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otCM3GpDDvDaiCmRcla2rY0KNvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/bc19cc-0f53-4d10-af93-dc01a19b2856/1/otCM3GpDDvDaiCmRcla2rY0KNvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:29:10:dc:d8:28:6b:8f:a7:52:11:aa:23:34:50:ff:7a:2f:
79:f2:7f:04:b9:c9:90:0f:ca:2e:81:99:86:33:bb:b6:50:25:
4a:84:df:8c:b2:32:cb:e3:26:65:5b:68:90:45:6c:f7:49:5d:
51:c4:7c:56:61:ad:37:40:fd:90:ee:7d:17:52:46:4a:e4:d1:
b3:33:f8:bb:e4:69:64:a3:b9:f3:d3:18:1b:39:d5:49:1f:15:
cd:70:16:3f:62:cd:07:b8:83:1f:bc:7b:5e:ba:68:0d:f4:ee:
b0:82:1c:5b:97:fd:14:1b:f7:11:4a:10:e7:22:70:97:f4:19:
87:49:2c:c6:3e:6e:26:9c:3d:81:09:c6:3d:4e:3f:1d:3d:eb:
09:7f:e6:2c:be:f0:1e:06:88:d5:7e:38:7b:e8:54:ba:64:c3:
ac:5c:2b:22:54:8e:fd:23:2b:9d:02:59:9c:9c:5f:dc:bc:0a:
bd:d8:bf:06:fc:1e:bc:1e:02:5b:ff:3a:1a:c4:72:0c:6e:f2:
a5:33:66:07:19:f2:0d:21:c5:08:ba:bf:48:b0:f3:9c:3e:fe:
29:23:91:67:21:b0:8c:8f:5e:d2:aa:23:6b:ea:23:84:58:8e:
73:b4:7c:3b:14:94:82:73:b9:1a:16:04:f6:f7:64:d1:a7:a1:
b5:65:fa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:28 2025 by rpki-client