Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
File: oHejVvB-B0yubybn9Yk9zp2sitM.mft (raw, json)
Hash identifier: PDckuv4PHVajyCmJRpLqBLsJZVrm1kS+WwYbDYTdV90=
Subject key identifier: 62:5A:1C:11:01:61:2A:24:C3:92:FA:AB:C4:35:3B:B9:A3:39:23:F3
Authority key identifier: A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
Certificate issuer: /CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Certificate serial: 0194BC3C910539907350E4AE503E21217546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
Manifest number: 0F19
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: lxW4zSYAimUluowH0s8gP36GI8E.roa (hash: ACOT5wzA2KcUFV8Qgc3AQN3HAUIG6x6Guns6Pzhv5rk=)
2: oHejVvB-B0yubybn9Yk9zp2sitM.crl (hash: TQsctzP4PXplhqW+HvdlwG1varZr++7jehdQ+p03uV0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:91:05:39:90:73:50:e4:ae:50:3e:21:21:75:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a077a356f07e074cae6f26e7f5893dce9dac8ad3
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=625a1c1101612a24c392faabc4353bb9a33923f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:db:97:95:eb:a0:7e:fe:57:08:c9:fe:0f:
57:1d:c9:12:18:ba:6e:ef:a8:0e:fc:bc:1d:8c:74:
08:cb:b8:9a:7c:00:7c:80:8d:e6:62:ce:6e:d5:ac:
32:d8:73:02:1f:39:3a:58:e0:a9:4d:ab:21:5f:05:
5b:4a:cc:c3:89:cd:78:79:9c:51:e7:0c:dd:ee:09:
0e:ae:61:d2:c6:14:9b:81:48:f7:d9:c4:ef:c2:79:
1d:02:b7:fe:a3:40:db:e3:82:f9:72:46:4c:95:61:
0d:e2:6d:0a:f3:de:2c:14:f8:8d:0c:35:14:8e:76:
e3:b8:31:1d:b1:91:42:63:9b:bf:26:31:89:e3:d5:
3a:35:ca:ab:a8:3d:5a:e9:6f:30:02:8e:0b:92:43:
93:b1:15:a6:4a:ab:2b:8d:53:8c:3f:32:51:e7:06:
34:77:82:bd:4f:ab:27:95:4f:12:73:f8:ea:97:05:
39:db:69:5b:e1:46:39:91:46:ea:a0:8a:92:40:2d:
32:95:ec:ad:7c:ad:7c:66:00:63:53:5f:e9:3f:87:
6e:ab:1e:20:af:1e:17:0b:71:8a:2e:23:05:ea:55:
b7:39:74:df:87:1b:c0:ab:1b:c9:b4:cb:1a:87:f8:
2a:fd:24:45:64:12:21:ac:22:9c:1b:e5:32:6e:d5:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5A:1C:11:01:61:2A:24:C3:92:FA:AB:C4:35:3B:B9:A3:39:23:F3
X509v3 Authority Key Identifier:
keyid:A0:77:A3:56:F0:7E:07:4C:AE:6F:26:E7:F5:89:3D:CE:9D:AC:8A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHejVvB-B0yubybn9Yk9zp2sitM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/23b3ce-9922-42fb-a124-48093fb6c67f/1/oHejVvB-B0yubybn9Yk9zp2sitM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:98:0e:be:74:50:94:d1:07:31:80:2a:8f:6e:6f:ee:a8:07:
c1:94:2e:a8:9f:8f:54:a1:64:e4:6c:27:2d:eb:45:94:1c:c9:
f2:7b:e6:15:fb:ed:e8:83:7a:71:f5:8b:92:5f:54:e4:dc:b0:
3a:6d:42:8e:35:c2:04:47:d3:b8:6c:63:ae:1d:3f:24:ba:ad:
0d:3e:36:6d:4e:ca:bd:6a:8c:50:6e:a2:4f:10:4d:91:c2:e5:
ad:26:26:86:41:59:f2:e0:75:de:03:2a:c3:ef:84:12:7a:2f:
78:30:06:43:53:00:b3:87:cc:98:99:a6:a3:e1:c6:b6:7f:ed:
ba:ae:11:62:d6:31:02:fe:d7:0e:db:f8:1d:94:20:a5:86:06:
e6:81:18:f6:5c:72:a3:3a:ca:f5:7e:a1:a5:10:c5:e4:07:bb:
11:5a:de:4c:3d:be:a4:9b:10:72:19:06:03:a8:76:66:ad:d1:
12:ca:fb:a0:6b:06:0b:97:e3:b5:3d:a9:43:d6:cc:d6:cf:ad:
b4:56:0b:39:f5:b2:69:cb:d3:af:7d:c7:f3:1a:d7:60:17:a4:
32:f0:66:8d:16:3a:8e:23:9f:37:8f:cc:05:9a:15:d7:52:b5:
7a:53:c7:25:7e:25:f0:01:f1:68:31:30:54:4e:fc:5e:49:4a:
ca:11:af:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:09 2025 by rpki-client