Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
File: OA73_1tU9T_PIxKr4uw_WVi6FCU.mft (raw, json)
Hash identifier: oUotnMAism2pDYt5M9eOQz+lb/p55RYnPUn7ETWTMik=
Subject key identifier: 8A:32:F9:7E:1D:54:07:C9:4E:E6:80:82:26:05:96:5D:8D:9F:BE:64
Authority key identifier: 38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
Certificate issuer: /CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Certificate serial: 0194BCA98EF82213249CB9CF1ED0A9462B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: MS2eFccf4vEvkGRnlPG3imTckEg.roa (hash: +v5mVYQhL/JfyFrRFVMWxQ02mierIx6iDDJ3fFkdoPo=)
2: OA73_1tU9T_PIxKr4uw_WVi6FCU.crl (hash: DcjF/jRJ8mKkW33FYWTjavSZHvXmQFpz3GyCyHEIo1s=)
3: XQ5elbBA2ZOvWo4wBD0xrzoPgZw.roa (hash: ziFD345nN2nfL35s2objtJIz7sADWUma9lbt9LOBqXI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8e:f8:22:13:24:9c:b9:cf:1e:d0:a9:46:2b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380ef7ff5b54f53fcf2312abe2ec3f5958ba1425
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=8a32f97e1d5407c94ee680822605965d8d9fbe64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:88:9c:c8:27:2d:b4:96:37:f7:43:af:3d:
dd:15:7c:ca:4e:84:61:73:81:82:51:7a:6f:48:22:
2e:3c:30:c9:02:24:b9:a6:0a:ac:cc:c9:07:cf:01:
11:f2:bf:93:f1:69:11:38:67:61:11:f6:55:36:dc:
af:9e:ff:fa:ed:81:b3:68:37:07:66:d4:3b:18:e2:
7b:ce:04:52:1f:d6:5a:b2:7f:52:17:ac:ab:86:a4:
3d:bf:39:44:2c:68:10:00:8e:b7:42:f9:28:3e:09:
ab:28:8b:9b:58:a4:74:25:1b:b0:45:f2:e8:3b:d3:
7a:96:5b:73:41:92:a0:16:53:a4:6b:77:ed:d4:01:
4e:f8:03:89:30:76:49:0d:43:ef:9a:bc:d8:23:6f:
e9:d9:f9:98:a5:a5:a5:3e:d5:64:62:19:80:96:c3:
f9:ec:ca:17:86:ba:e4:d8:27:4e:6b:df:02:8c:62:
ec:40:bc:30:53:6b:96:ab:34:91:20:50:57:2a:8d:
33:44:25:96:71:bd:20:82:69:f4:9a:53:84:a9:0b:
0e:52:ff:81:8f:33:db:d4:ab:74:94:8c:9e:bd:cc:
65:72:35:d2:eb:56:1d:23:31:b1:76:8c:0f:60:8f:
e5:07:dd:98:a6:57:cd:ef:44:d7:c5:60:bf:16:3a:
d7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:32:F9:7E:1D:54:07:C9:4E:E6:80:82:26:05:96:5D:8D:9F:BE:64
X509v3 Authority Key Identifier:
keyid:38:0E:F7:FF:5B:54:F5:3F:CF:23:12:AB:E2:EC:3F:59:58:BA:14:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA73_1tU9T_PIxKr4uw_WVi6FCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d91255-3243-4a47-946a-f04cc1c230cf/1/OA73_1tU9T_PIxKr4uw_WVi6FCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ac:7c:b3:d2:80:89:c7:50:e9:8a:8d:ce:d7:ab:3c:56:c9:
61:57:df:94:c5:8c:a6:63:16:49:bd:43:9a:51:21:25:73:66:
f3:52:2a:5f:d0:91:85:67:af:4f:d6:31:f3:0f:72:0b:86:49:
e2:e9:56:3d:c7:e2:0e:2f:47:9c:3a:67:2d:68:87:ae:b3:30:
38:3f:7d:d0:f1:95:50:1a:b3:e7:e1:0c:86:1b:fd:72:2a:31:
e7:39:15:43:f8:3e:a0:7a:1f:8b:0f:ab:1a:b6:c2:d2:a6:90:
41:84:48:0d:8c:b7:56:bd:c0:22:7c:cd:a8:69:8e:23:f4:01:
c4:3d:e1:76:9e:1d:c3:0e:9d:9e:5c:e3:51:4c:63:41:62:7c:
45:a3:1d:a2:3b:37:e3:24:f1:c0:ce:30:c2:68:02:c1:bc:a5:
d4:97:21:26:d3:dd:b2:ca:6f:5b:23:88:af:29:12:b6:03:5b:
ce:14:ef:e9:42:55:05:19:e3:e8:3f:db:20:8c:24:51:b7:fd:
06:e3:c8:b4:4b:e0:94:29:aa:08:d7:ef:72:27:d1:b3:aa:77:
96:9d:5a:50:7f:77:89:23:22:2c:9b:47:b3:08:94:0d:87:42:
17:e9:28:b1:64:27:ee:2a:94:60:4e:73:54:aa:75:74:7d:f8:
d9:47:51:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:15:52 2025 by rpki-client