Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.mft
File: OKN8JN3KNH1xPteU0zzUqBqLSYo.mft (raw, json)
Hash identifier: 3BkEQRKq95DRmlp/dWiMkY6I5bzafmTfklUEdXVlaT4=
Subject key identifier: 7D:22:44:B5:BC:50:58:CF:CD:DD:1C:AC:2D:A5:44:C7:30:A7:26:D4
Authority key identifier: 38:A3:7C:24:DD:CA:34:7D:71:3E:D7:94:D3:3C:D4:A8:1A:8B:49:8A
Certificate issuer: /CN=38a37c24ddca347d713ed794d33cd4a81a8b498a
Certificate serial: 0194BCA9A13A85A1985BA506F2EFC6FD45A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKN8JN3KNH1xPteU0zzUqBqLSYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.mft
Manifest number: 13D6
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: KBxZJWrk1-bZEdk3S7yVEPMKVtM.roa (hash: BpbYbbHeyy+1nQHRcRldIZ4LwMax+kHyBfVOH0ykZeU=)
2: OKN8JN3KNH1xPteU0zzUqBqLSYo.crl (hash: AeqheGwiBCZJH1YH7abq2zQiU60RBfH2sfTdGIbNpyw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a1:3a:85:a1:98:5b:a5:06:f2:ef:c6:fd:45:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a37c24ddca347d713ed794d33cd4a81a8b498a
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=7d2244b5bc5058cfcddd1cac2da544c730a726d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a2:57:66:85:8e:8c:13:48:12:93:8e:7a:83:
8d:4a:f5:4c:11:9c:26:0d:69:a6:99:be:ce:f3:e7:
e6:e7:a5:22:6c:b8:c6:eb:12:7a:fe:c7:c0:6a:39:
8d:d3:2f:db:e1:ca:bc:7f:ad:e6:bd:d0:3b:ec:f3:
d3:5d:46:e3:21:88:65:4e:3b:ff:a9:14:2e:18:c8:
3f:71:c0:4b:67:85:36:a2:15:34:f6:6d:57:f6:93:
91:c4:c7:f4:24:c7:54:ce:9f:45:55:db:4b:69:0f:
36:26:95:13:db:9b:af:b4:e5:cb:32:97:a6:74:3e:
fa:53:7e:fa:8b:ad:04:b9:bb:52:c9:bd:34:8b:32:
af:85:ed:61:f8:07:c0:68:e7:43:19:13:34:89:cf:
5d:e0:62:14:a3:fb:c7:a3:36:3a:97:c1:14:3c:77:
4e:57:31:e3:04:24:b1:8a:fe:a0:0e:86:7c:ca:ee:
ea:d1:1d:ac:01:b6:13:29:3d:89:12:58:52:35:36:
ea:73:40:d3:24:57:70:a9:03:a7:f3:e9:44:e4:cf:
25:ca:a5:8e:e1:cf:92:06:a4:4e:19:84:6d:52:15:
98:bb:56:23:3d:e1:19:9c:88:85:29:1a:7f:d9:25:
d1:f5:24:92:1f:04:a5:09:10:3e:76:1f:7a:09:8b:
6e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:22:44:B5:BC:50:58:CF:CD:DD:1C:AC:2D:A5:44:C7:30:A7:26:D4
X509v3 Authority Key Identifier:
keyid:38:A3:7C:24:DD:CA:34:7D:71:3E:D7:94:D3:3C:D4:A8:1A:8B:49:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKN8JN3KNH1xPteU0zzUqBqLSYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1e33c3-d197-45f2-828e-44a49d263700/1/OKN8JN3KNH1xPteU0zzUqBqLSYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:0a:95:12:01:ed:bd:a5:fa:22:cb:5b:ec:a7:20:3d:10:67:
7e:0f:5b:59:93:3f:e8:56:d1:7f:ba:1d:d5:3a:a8:11:5d:57:
4a:bf:53:9e:92:68:d5:1c:6c:ca:2c:e8:2f:99:fc:ae:65:81:
df:cc:c1:f6:ab:49:a8:66:37:40:2b:c8:1c:a8:8d:48:a0:a0:
60:e7:7a:a5:24:c0:ed:5f:5d:f5:a3:5e:39:b3:fe:fa:b5:ab:
cf:26:7a:d6:05:cf:be:24:7d:e4:48:05:21:cc:3a:18:7b:ac:
97:1b:bf:7f:6e:35:ab:e0:20:38:a0:38:f7:f5:17:e7:88:fc:
aa:a7:8f:c6:b3:26:c6:91:fd:61:07:44:6d:c6:9b:ae:2f:3a:
fc:d0:db:61:13:e3:3e:a7:c7:f5:2f:e2:bf:31:6d:d9:6c:1e:
a9:1c:a8:2b:06:5a:3c:e5:28:73:3f:8c:45:07:4f:a4:d4:57:
39:b1:00:c3:bb:59:c7:8a:51:8d:16:5a:84:46:74:ac:37:2f:
70:1b:8e:92:f2:51:ef:c3:cd:8f:dd:49:c8:a7:8d:6b:07:ea:
b7:fc:ca:4f:3f:ef:95:e8:82:85:94:8c:a4:ab:c9:fe:b8:62:
7c:23:bd:04:96:9c:8d:f5:90:e7:fc:f4:6c:0a:59:0b:5c:ce:
ea:d8:d2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:44 2025 by rpki-client