Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
File: oisfTQq0ODaycVOQgo2QdyzJ2No.mft (raw, json)
Hash identifier: BiZF3a/nVrTU5VWV/FyusUWgEZmIiDWSYNooiBaE/qA=
Subject key identifier: 1A:86:CD:F7:BA:BE:36:1F:7F:56:83:65:39:73:BA:34:30:CC:52:77
Authority key identifier: A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
Certificate issuer: /CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Certificate serial: 0194BCE0C202FBE4BDA6A1690D04F6FF5B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
Manifest number: 02F3
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: k7Y-Fi38UuRFP0meJSeQGqi_KaA.roa (hash: JhnVrlDDk0WiXfNjueDV4ScJZ+zIOFgIC2tv2w+Bb00=)
2: oisfTQq0ODaycVOQgo2QdyzJ2No.crl (hash: xxq8AedaAzTlHfWaOtVwNx+LDjKTNXhIUg8Tdkq5W/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c2:02:fb:e4:bd:a6:a1:69:0d:04:f6:ff:5b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a22b1f4d0ab43836b2715390828d90772cc9d8da
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=1a86cdf7babe361f7f5683653973ba3430cc5277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:c0:55:14:79:ab:45:a0:d0:94:e1:e2:ba:
78:2a:89:10:44:f4:a5:8e:6c:57:20:54:ac:4a:40:
50:09:d7:dd:21:56:3c:fb:c8:57:f5:f1:4c:b8:10:
e0:fe:0e:fc:22:06:6a:92:4f:d6:df:59:f9:ba:0a:
f8:49:4c:9b:3f:40:2e:e4:0a:52:1f:c6:00:00:12:
ff:81:72:95:be:db:75:2d:01:e2:58:72:c9:68:bd:
5f:39:f4:12:dd:8c:4f:c2:1b:c4:96:d5:d8:6e:3b:
4b:c4:e3:05:e0:ef:c8:df:8e:60:39:e6:32:d1:64:
c2:12:db:c8:1d:0c:c0:8c:54:40:40:d1:e7:f8:83:
6b:17:36:3d:9f:19:2b:6d:4c:b9:58:e6:9f:3e:b6:
ac:f8:36:38:07:81:48:ff:2f:5d:a6:16:7a:71:b1:
fd:14:39:5b:55:d0:4c:f1:86:7c:d3:f2:8b:9d:6d:
93:78:62:c1:65:2c:42:3f:28:cf:92:72:e5:65:db:
d1:79:84:d9:76:1c:9e:de:ff:31:b3:30:bf:38:0f:
84:3e:6f:8c:34:9d:18:14:d5:42:5a:9c:7a:48:4f:
f7:ea:de:34:a4:bd:6c:f1:8c:c9:0c:5d:cf:fc:1e:
cf:64:6d:48:1a:f4:8f:59:c8:a5:15:7b:02:48:b0:
b0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:86:CD:F7:BA:BE:36:1F:7F:56:83:65:39:73:BA:34:30:CC:52:77
X509v3 Authority Key Identifier:
keyid:A2:2B:1F:4D:0A:B4:38:36:B2:71:53:90:82:8D:90:77:2C:C9:D8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oisfTQq0ODaycVOQgo2QdyzJ2No.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/0ef403-9eff-4048-872e-4f43195d196f/1/oisfTQq0ODaycVOQgo2QdyzJ2No.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3f:51:15:64:c1:2a:e6:3c:30:b8:fc:de:81:43:20:87:43:
cc:b0:75:da:2d:63:e2:3f:4c:c3:97:d9:30:b0:9b:4c:8c:89:
76:f1:62:80:42:e7:29:94:06:2a:eb:0e:b6:60:cb:e4:ee:e8:
a8:98:cd:d7:e1:79:78:f4:52:1c:fb:ca:ed:08:94:3a:b0:da:
9b:0e:d2:aa:a1:a0:75:82:a3:db:0b:f8:92:92:c3:62:41:a4:
0d:4e:09:a0:0d:cf:b9:45:48:95:59:51:d2:15:23:13:c4:33:
18:0c:67:24:c6:74:db:d6:86:e4:64:95:c4:7f:b5:54:4d:5d:
0f:f2:53:c1:58:ff:44:ff:80:3a:3b:c9:3b:95:ae:ae:ec:86:
60:7f:c3:52:f4:31:d2:c0:41:75:1d:b3:9a:fe:e1:c2:77:57:
64:34:ac:ce:a2:10:71:08:f5:4a:e7:fa:f1:7d:e8:e8:4d:b1:
4f:92:cd:50:5b:5f:d6:b3:80:24:f2:ec:f0:04:c5:12:bf:1c:
f4:49:c3:26:75:e3:f0:cb:bf:6d:d8:2e:43:a8:30:7f:c7:28:
41:a0:f3:bd:e4:4a:63:a7:da:d3:26:4b:10:48:3f:7a:f0:69:
47:1b:f0:8e:cd:68:65:b6:b4:67:00:42:dc:d8:55:01:2c:63:
06:96:a9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:14:40 2025 by rpki-client