Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
File: OAsoOgUTlA1SCmgLiz0U28Nndw0.mft (raw, json)
Hash identifier: 9wGPU2rekH4Z3C9BSYF66kesVUsIL8wGg6/f3MWR2qY=
Subject key identifier: 36:E3:2D:C0:1E:39:87:39:25:0F:5C:63:57:6A:C6:6B:33:A1:EB:FC
Authority key identifier: 38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
Certificate issuer: /CN=380b283a0513940d520a680b8b3d14dbc367770d
Certificate serial: 0195E0B454E7E393CD57655FE62F4A825C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
Manifest number: 14CB
Signing time: Sat 29 Mar 2025 07:01:09 +0000
Manifest this update: Sat 29 Mar 2025 07:01:09 +0000
Manifest next update: Sun 30 Mar 2025 07:01:09 +0000
Files and hashes: 1: 3bo1_VmMil_ykLbPMkJbRag9ebw.roa (hash: 7RqP40Y7gY2KH0eL1Md3M9TCvHi+FVAYp4Z84nyqF5I=)
2: 76T3wUVzKrccOze-NEOdu7-TKxc.roa (hash: 0jI/L5T33OWVMZBqU9OicvpSu2R8kTlL46/YK1PJ/4A=)
3: DistZ3VDkIUvSA_5uNuXIQPOXPQ.roa (hash: kpTlHHw5FsxD4697vv8Q+YHIpuXKVuz/l4Fu6lFpvJY=)
4: OAsoOgUTlA1SCmgLiz0U28Nndw0.crl (hash: rdFvwBS4iTwpiNt06ZBR3aPCngzA/lpDexbAh+4AAck=)
5: SWMQOyTGATFbPpkUlNDEK9R_wf8.roa (hash: 7EyjDFKkXOO8nAJj/SWkoOh1Lc7HdnR9vXAWI1FbOGc=)
6: b5nAqkkbKBuuBF130kEHNP2qdVo.roa (hash: jUduPFl66e708dXNBc3a1/JM6+tcz9eKKz+qAjUZvhI=)
7: f_cRzhAwjQsRWIpABQIN6zrQUL4.roa (hash: zcaLl6mU3qlNMRBKmml1zlcCseGH1tjLvTej/h7Zeow=)
8: lbQJ2rq_BHyJF6s2vYGbT2GOaEI.roa (hash: aJ2Q0VP1V764a0H8xEOx6D+4ZkJqxXjOkmvFmOkcjng=)
9: u5j-w6koTI1w-MwveI_x0rT-ay0.roa (hash: gQTgZPcEOXTFI4ML0tCh67l8MTBl09iBxAa1VarPhx0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:54:e7:e3:93:cd:57:65:5f:e6:2f:4a:82:5c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380b283a0513940d520a680b8b3d14dbc367770d
Validity
Not Before: Mar 29 07:01:09 2025 GMT
Not After : Mar 30 07:01:09 2025 GMT
Subject: CN=36e32dc01e398739250f5c63576ac66b33a1ebfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:3e:77:ba:79:71:89:3b:bd:2f:fe:17:99:
65:1e:6d:92:85:3f:e0:32:cd:85:3a:31:c1:10:59:
de:96:39:55:97:15:c0:54:b0:c2:d3:68:da:6c:cd:
6d:ce:ec:93:de:cf:9f:94:1b:7d:31:cd:c4:a7:e3:
96:44:fd:26:5d:d4:ef:ab:e4:6a:43:20:f2:c1:4c:
78:48:55:f5:b3:aa:c4:7c:18:86:ec:70:79:e9:c2:
90:5d:df:bc:de:36:1e:5f:14:e0:be:47:66:a4:f4:
97:3c:cd:25:51:5d:e7:fb:f8:e2:ee:98:dd:b6:d2:
1f:53:84:91:ed:04:ee:05:26:7d:0a:ec:fd:05:6d:
27:f3:58:e3:8f:98:4c:e8:d9:2c:98:62:b3:f5:9a:
e4:6b:c2:42:25:4d:4d:1f:42:68:1d:21:3c:80:a9:
4b:75:0a:86:d6:61:5d:64:a2:b8:9c:be:b3:dd:a4:
bb:7e:cd:0c:77:70:fe:32:46:0f:9e:d0:25:a5:66:
6b:8b:dc:87:71:e7:85:c0:83:81:2c:aa:72:42:19:
72:30:4e:b9:36:9b:6e:0b:d6:47:87:69:16:e2:e5:
08:44:22:85:f2:c2:8d:19:c6:4c:9d:b5:2f:e7:25:
d7:3b:8a:95:ba:9a:bb:72:bf:33:32:07:75:35:c0:
fb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E3:2D:C0:1E:39:87:39:25:0F:5C:63:57:6A:C6:6B:33:A1:EB:FC
X509v3 Authority Key Identifier:
keyid:38:0B:28:3A:05:13:94:0D:52:0A:68:0B:8B:3D:14:DB:C3:67:77:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAsoOgUTlA1SCmgLiz0U28Nndw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c08e1e-f5bd-4a1a-8aba-ccf6454bb24c/1/OAsoOgUTlA1SCmgLiz0U28Nndw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e8:4b:53:99:4a:ed:6c:94:9b:de:66:9d:7d:2f:3f:72:5d:
0e:e3:d2:5c:12:55:f7:71:98:96:5b:f5:7a:ac:3d:49:3c:43:
0c:e3:cd:c6:bb:b0:69:79:28:f8:95:c8:48:ad:1d:bc:ee:0e:
1a:b8:5e:57:79:11:dc:03:6e:6d:28:35:42:52:c6:60:69:27:
c0:d3:a1:10:61:c2:c8:55:e1:0e:eb:7e:9c:b4:de:0a:f2:6c:
16:85:27:09:5b:30:99:5c:89:0b:a7:65:18:b1:86:de:20:bd:
1a:3f:09:8f:f5:c6:12:89:f3:22:f6:f6:f1:b0:34:05:e8:44:
e9:92:b0:d5:f2:cc:92:fc:64:78:2d:e2:d7:3e:ae:f1:fa:6d:
d6:42:d1:bf:61:22:3b:05:4a:e7:0a:62:8c:35:aa:bb:d9:89:
35:36:6b:78:f5:bc:d8:cd:64:c6:1e:f2:30:f1:b9:ad:de:e9:
18:04:5a:5b:eb:0c:a3:47:77:f9:82:8b:5a:71:81:94:7e:5c:
30:64:7b:fc:5a:9f:fe:58:50:aa:8c:99:a5:8a:92:60:c8:e0:
a0:a7:45:e8:10:f5:dc:cb:a5:65:bc:5c:4c:c2:58:42:b9:40:
73:d3:ee:5e:0e:83:d5:ce:7f:cc:39:1d:ae:f1:86:ef:10:c8:
90:0c:b1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:46 2025 by rpki-client