Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/oEFbY1ex6yMoIQkf1PJoeVQOaFc.mft
File: oEFbY1ex6yMoIQkf1PJoeVQOaFc.mft (raw, json)
Hash identifier: VhmgRk8reiFelEfu9vgNwfPwBk8FJLwtpba0CWv2UuQ=
Subject key identifier: B2:27:9F:30:3A:39:8F:E3:AE:5C:11:DE:06:FA:6F:FF:A0:87:AC:D2
Authority key identifier: A0:41:5B:63:57:B1:EB:23:28:21:09:1F:D4:F2:68:79:54:0E:68:57
Certificate issuer: /CN=a0415b6357b1eb232821091fd4f26879540e6857
Certificate serial: 0193D28F7F8742B706F5DCF0A48A9CB41C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEFbY1ex6yMoIQkf1PJoeVQOaFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/oEFbY1ex6yMoIQkf1PJoeVQOaFc.mft
Manifest number: 13B3
Signing time: Tue 17 Dec 2024 03:00:39 +0000
Manifest this update: Tue 17 Dec 2024 03:00:39 +0000
Manifest next update: Wed 18 Dec 2024 03:00:39 +0000
Files and hashes: 1: VZwiBrDHZnxFeoy-6tvze3e1C3M.roa (hash: exA8ig1wNCfJbJ9F5yhtBLqOVdRKhOdknjq/kKbf4Ro=)
2: oEFbY1ex6yMoIQkf1PJoeVQOaFc.crl (hash: Qu123IHnRK2RxKzYYZTsygkaG3zUi449Ajwnirycd2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d2:8f:7f:87:42:b7:06:f5:dc:f0:a4:8a:9c:b4:1c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0415b6357b1eb232821091fd4f26879540e6857
Validity
Not Before: Dec 17 03:00:39 2024 GMT
Not After : Dec 18 03:00:39 2024 GMT
Subject: CN=b2279f303a398fe3ae5c11de06fa6fffa087acd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:9f:47:0c:2d:16:b6:c9:78:88:8f:c4:a8:
12:ed:53:1b:af:cc:1a:8e:4c:05:43:32:c8:fd:60:
f8:68:51:0b:e7:89:92:47:53:b1:ba:00:7c:f9:9c:
9f:5b:c5:5e:6e:9a:0d:ce:d9:bc:27:58:45:a0:8d:
e0:43:69:d6:5f:5b:1a:a3:da:af:88:4b:6c:bc:82:
fb:c0:b8:9d:c5:3b:b9:31:f8:d4:b9:ff:5a:40:28:
28:aa:b8:bc:0f:37:ea:ce:9c:3d:f2:d8:f4:a5:13:
4b:93:b0:f9:fb:2b:16:b6:50:d9:22:f0:e5:c2:d2:
f3:28:2a:0d:7b:74:3e:17:49:4d:bc:30:32:33:17:
64:db:67:62:40:37:04:78:b5:4c:cc:96:8c:2a:b3:
8f:87:54:05:83:b5:cb:95:de:28:cd:f3:ba:62:4f:
d1:71:cb:89:9e:09:05:7e:e6:64:d8:99:6f:f1:7d:
f8:ce:ea:71:2d:4a:34:78:20:36:53:65:23:b7:08:
58:ae:2b:17:bf:02:39:c3:56:57:4b:8d:0a:ed:f4:
dd:cc:45:20:89:9e:76:24:f4:38:a4:a0:75:a8:c0:
84:49:f6:2b:8b:8e:0a:88:c5:87:c2:ff:b3:a5:b3:
d3:12:14:d3:c9:14:a9:3d:08:59:44:c4:51:d2:95:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:27:9F:30:3A:39:8F:E3:AE:5C:11:DE:06:FA:6F:FF:A0:87:AC:D2
X509v3 Authority Key Identifier:
keyid:A0:41:5B:63:57:B1:EB:23:28:21:09:1F:D4:F2:68:79:54:0E:68:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEFbY1ex6yMoIQkf1PJoeVQOaFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/oEFbY1ex6yMoIQkf1PJoeVQOaFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a665d6-b605-4de8-82ca-9c0e646b6881/1/oEFbY1ex6yMoIQkf1PJoeVQOaFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:db:8a:de:4c:db:d4:d7:33:19:7e:d6:96:8e:be:e1:4f:71:
3f:47:83:8f:77:27:54:d2:51:a5:41:7f:79:46:fe:d6:dd:ce:
73:98:6c:70:5a:ec:6f:93:b8:90:06:2e:61:d9:74:ac:69:74:
9b:a0:94:44:2a:94:e6:1e:17:dc:bb:4a:c3:6d:7e:56:72:aa:
5f:2c:2f:20:c0:67:1c:19:53:31:34:ee:17:16:e0:4e:50:ea:
65:d1:c3:6a:09:e3:66:a8:68:b8:9e:f6:85:7e:82:47:ff:e1:
da:77:da:0f:9f:42:2d:3a:32:a1:bc:92:92:9b:7b:0c:38:00:
0d:55:74:0c:0f:c4:12:73:bb:60:43:90:4e:94:d1:80:94:83:
47:ee:0a:09:7e:41:4b:14:f1:2d:a9:a0:70:07:ff:db:e8:6a:
cc:16:70:19:40:6f:f9:37:0e:d3:45:9e:ff:9c:63:98:eb:25:
cf:0c:d9:94:de:b1:cd:00:d7:54:84:96:9e:71:a0:fc:f4:ea:
ec:2f:2f:9b:bc:90:cc:c5:77:c4:bc:63:66:ce:b3:e5:3e:77:
74:af:d1:be:da:90:4d:82:08:7a:bf:0f:fe:79:ba:63:f1:95:
30:a1:33:54:56:33:7e:e6:44:1c:86:8b:f6:7b:fd:8e:18:a2:
00:8e:30:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:34:15 2025 by rpki-client