Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
File: 0OhNbWqe7eaC7xtcePGz8KMxORE.mft (raw, json)
Hash identifier: oeWTgZcm7yIwu2eJTXiWw0KjfnrR+yKWpmqAv7m2IPg=
Subject key identifier: 76:34:73:46:AD:54:78:3E:3A:CC:3A:7C:D5:17:70:F0:CA:A1:15:1E
Authority key identifier: D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
Certificate issuer: /CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Certificate serial: 0195E00F998CE5B6E6BF0CB8B8E467846856
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
Manifest number: 0695
Signing time: Sat 29 Mar 2025 04:01:13 +0000
Manifest this update: Sat 29 Mar 2025 04:01:13 +0000
Manifest next update: Sun 30 Mar 2025 04:01:13 +0000
Files and hashes: 1: 0OhNbWqe7eaC7xtcePGz8KMxORE.crl (hash: sXkoB01wzKmc3UvJwAp1LpYSdaUeklVZTd9nBfcWiJk=)
2: eEAcVM4h3e_6uLTwXzH2smck964.roa (hash: 2dyqSC4Nr999y8UdL9+8BtI2W3QPoxUvEaAKvO9sMtg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:99:8c:e5:b6:e6:bf:0c:b8:b8:e4:67:84:68:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Validity
Not Before: Mar 29 04:01:13 2025 GMT
Not After : Mar 30 04:01:13 2025 GMT
Subject: CN=76347346ad54783e3acc3a7cd51770f0caa1151e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:33:dd:59:da:a1:a5:aa:5b:2a:11:88:d1:ca:
77:54:73:56:cc:82:6a:03:68:5d:a3:d4:2f:1b:c7:
7c:22:3f:61:99:a6:4a:ab:33:58:ab:7e:9b:48:78:
3c:c2:ef:39:16:5d:14:f8:99:4c:c2:7a:ce:f8:90:
44:13:52:1e:48:b6:97:f7:fe:86:be:80:40:80:83:
1d:66:56:f7:fb:e8:6c:d4:2d:db:04:73:d8:24:5f:
62:d9:da:22:d9:4a:57:26:2a:7d:e6:bb:96:a1:8f:
87:78:8e:5f:b8:08:14:48:81:28:cc:0c:0f:ac:65:
56:f2:ce:15:21:b2:a3:d2:6d:5e:2f:5c:3a:d9:07:
73:10:e6:76:d2:f3:84:57:92:b8:11:c9:b2:a6:9c:
c9:9a:29:cf:cb:be:44:d7:fd:48:47:21:b8:af:8d:
8d:1b:5d:a6:9f:72:03:3a:5e:31:aa:59:80:09:05:
f9:12:2a:4d:dc:da:14:cf:b7:e1:75:8e:f5:93:7a:
09:90:8f:00:19:1f:26:ef:40:38:3c:42:25:27:ac:
8e:b5:5d:f7:8b:9c:f2:3b:4e:47:16:30:9a:2b:b2:
80:06:01:d7:fe:dc:0e:e9:f2:45:83:e2:b0:79:19:
2f:ad:43:42:91:35:05:6f:2e:39:1c:f8:9a:21:29:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:34:73:46:AD:54:78:3E:3A:CC:3A:7C:D5:17:70:F0:CA:A1:15:1E
X509v3 Authority Key Identifier:
keyid:D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:6b:b4:d0:cd:b7:de:cd:2a:0b:36:0b:dc:ae:d6:71:20:c1:
38:c6:7e:73:b9:6c:c8:dc:79:ec:b6:01:00:81:db:3c:a9:6f:
d8:bb:0e:8e:65:e5:c0:bf:4e:73:5f:38:ad:e5:be:40:c4:2b:
34:ac:5f:86:32:20:80:5e:ff:47:a6:fc:46:39:09:7d:00:e7:
ca:a4:0a:7a:58:3a:7e:6b:44:8a:b7:de:fe:1a:49:11:bb:43:
e5:28:01:fd:3a:d8:56:b1:bb:44:03:38:8f:6e:ff:64:e6:9f:
3e:cd:35:3c:30:ed:f1:71:fc:2e:c8:83:d9:d0:a1:da:30:52:
54:f3:25:da:15:42:fe:c9:5d:3d:47:24:cc:d9:8f:ad:82:a7:
1d:2a:5e:12:fe:79:f5:62:60:36:e6:56:5f:bb:36:de:ec:49:
09:f5:1a:f5:9d:c8:37:6e:ba:06:ed:78:5b:56:ed:ef:81:f5:
65:d3:bd:f3:39:f3:a8:64:65:9b:a0:67:7e:a8:0d:5f:b4:9b:
4b:f1:e5:57:2f:88:c9:c5:c1:cf:73:d5:cb:fe:46:3c:58:1a:
29:36:ed:b6:fa:0f:09:46:bb:93:8c:5c:46:aa:a2:03:04:41:
e9:4f:14:9e:1d:47:e5:91:c0:f3:10:58:1c:2c:50:5d:44:54:
87:a0:18:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:32:53 2025 by rpki-client