Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
File: oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft (raw, json)
Hash identifier: 0FNUmaCFyW73qPaRHlSZ0SpOTVzE+uhpYXIa0yL1TA0=
Subject key identifier: A1:2C:BE:CF:C4:A2:0F:04:33:8B:EE:54:64:42:B6:2E:5E:4A:4A:83
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 0195DFD8E682747CFFF39550A697ED453C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
Manifest number: 0A1F
Signing time: Sat 29 Mar 2025 03:01:28 +0000
Manifest this update: Sat 29 Mar 2025 03:01:28 +0000
Manifest next update: Sun 30 Mar 2025 03:01:28 +0000
Files and hashes: 1: oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl (hash: 4bg3rlbTtEmNpCQPhVASMxqYqAp13h4PuHligZxheCQ=)
2: tD78yaOKHxAMN54cZ_UiavO4CHA.roa (hash: jAbvoTBMupwzsMRTiVDhIW4eUBQnYA3NsicKftAzOOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:e6:82:74:7c:ff:f3:95:50:a6:97:ed:45:3c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Mar 29 03:01:28 2025 GMT
Not After : Mar 30 03:01:28 2025 GMT
Subject: CN=a12cbecfc4a20f04338bee546442b62e5e4a4a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6b:5e:bf:f7:60:72:04:12:b3:2c:6c:95:86:
88:a7:6a:d0:54:78:2c:21:52:a7:e9:dc:90:b5:58:
a2:02:c0:c3:45:03:1a:64:ee:0b:4a:f4:26:eb:bb:
93:0f:8b:74:c7:cb:44:f4:7b:1f:99:1d:eb:7e:03:
d9:45:44:cc:91:75:ff:83:28:5d:d1:55:31:2e:fc:
83:93:87:9f:8e:b1:41:7d:19:2e:4d:a7:20:19:73:
a1:41:5f:6a:08:b7:91:fa:35:9d:5c:fc:3a:a6:92:
44:cc:2c:3b:73:a8:5c:d3:27:1e:d6:2a:6d:18:e4:
e3:ca:8d:3b:5d:03:e7:6b:e7:79:05:73:ed:f0:fc:
ca:be:39:01:c4:10:5a:fc:13:05:fd:9a:f1:d9:68:
35:db:d5:a8:67:9b:4e:9c:c4:e3:e8:92:15:51:c9:
6e:96:0a:32:98:4b:25:70:c0:ad:f8:91:ed:0b:29:
f3:10:2e:85:13:34:5c:76:8c:bb:10:86:5c:b6:6c:
d6:7e:ac:cb:1b:25:63:5d:2b:a5:3d:54:1f:b3:ab:
c9:b3:db:08:94:76:7d:e0:53:1f:2c:58:91:b0:88:
64:9d:88:05:ee:05:b7:ee:63:30:81:3b:a9:22:4b:
6a:ec:4d:e4:41:d4:6f:da:f5:4f:bd:ef:f6:d2:91:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2C:BE:CF:C4:A2:0F:04:33:8B:EE:54:64:42:B6:2E:5E:4A:4A:83
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cf:2f:07:1c:fa:da:ae:f4:b3:79:7e:80:2c:e8:2b:a9:7d:
28:cf:a3:d1:9a:73:85:d4:cc:59:5c:5e:f3:26:e6:b2:de:58:
1f:3d:e4:ed:4e:50:6c:0d:9f:72:f6:cf:e2:b4:07:3e:c0:fd:
1d:bc:5d:07:6e:02:91:bb:50:65:e9:ba:23:5b:17:f2:40:ec:
00:5c:97:69:f0:43:41:ab:6e:43:bc:e8:34:22:9e:ff:4d:89:
16:48:62:54:14:4c:f6:71:c0:52:7a:49:ce:89:ee:9d:bf:ba:
c9:81:47:60:b2:fd:39:0e:97:93:75:d0:97:5e:87:01:e2:e8:
9b:d6:65:d8:40:11:a8:47:3a:e9:2b:e6:97:5e:25:7d:d1:f7:
24:5f:6d:c7:65:79:92:c9:f3:ca:2b:69:28:08:10:97:1d:13:
9f:1e:49:e3:23:f1:7f:4d:30:5f:0f:e0:fc:2b:25:e2:ea:74:
e4:20:19:85:90:b0:d0:6b:24:4d:b7:23:28:4a:20:68:1e:27:
dc:0d:77:c3:80:9f:ef:e6:cd:21:1f:72:2f:20:0d:28:8f:a2:
4c:fe:5f:d2:4d:e6:eb:6b:3c:e5:dd:14:08:c4:1f:ce:22:fc:
9a:2a:38:42:8d:01:49:c7:b3:fc:34:78:65:2e:7b:3d:b8:b7:
68:fc:6a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:41:34 2025 by rpki-client