Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
File: O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft (raw, json)
Hash identifier: EMoIOcrJpphQZjbswuCbN2LYaw9kQBhoozAYPY2c9KU=
Subject key identifier: D5:E9:9C:CA:F2:26:0A:AD:13:38:B4:6B:A8:39:C5:4C:02:93:CB:90
Authority key identifier: 3B:77:8C:7E:0E:59:83:25:27:34:7C:2E:21:1F:C4:8C:54:71:08:CF
Certificate issuer: /CN=3b778c7e0e59832527347c2e211fc48c547108cf
Certificate serial: 0195E00FBC05B1CADB917B6A6B31A7C88D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
Manifest number: 04A3
Signing time: Sat 29 Mar 2025 04:01:22 +0000
Manifest this update: Sat 29 Mar 2025 04:01:22 +0000
Manifest next update: Sun 30 Mar 2025 04:01:22 +0000
Files and hashes: 1: O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl (hash: YHuaAXhz/SBqF3RBTAA+T8KG+k8F2JYyCQlAECGhpaw=)
2: o2x3XOFjpyXp0a8ZF3YUMEZhNmk.roa (hash: EInA3F+cdzhiSEh4Cbcxk6l2zqAf00tJgnQUKeSBqLU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:bc:05:b1:ca:db:91:7b:6a:6b:31:a7:c8:8d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b778c7e0e59832527347c2e211fc48c547108cf
Validity
Not Before: Mar 29 04:01:22 2025 GMT
Not After : Mar 30 04:01:22 2025 GMT
Subject: CN=d5e99ccaf2260aad1338b46ba839c54c0293cb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:e8:70:5d:88:ea:f2:e4:75:fe:43:ab:ed:
b7:f2:c1:9f:5b:71:75:90:cc:21:65:2c:24:a7:64:
c9:2b:4a:57:b1:1b:c5:62:02:5f:52:b2:9b:22:54:
91:aa:36:06:1e:41:78:6a:9c:3d:db:e0:ff:9f:7a:
3e:ec:ac:54:23:90:2f:66:55:9e:35:c3:8d:2f:1f:
46:06:b1:dd:d8:ca:06:ca:78:16:ac:7e:c9:e0:fd:
06:73:39:54:6f:b9:49:bb:44:17:14:a2:03:1a:9f:
c9:aa:4e:54:f9:01:1f:8b:9c:7e:c3:72:a4:1b:28:
98:8f:21:c4:cc:b4:78:e6:b7:c1:57:4a:ed:8f:dd:
dc:17:19:0c:b1:96:3c:c2:fa:92:86:b3:bd:d9:04:
d4:9a:0a:c9:5f:80:30:01:07:5b:44:24:d2:c4:9c:
e5:39:be:da:ae:f5:23:af:d2:8a:85:10:42:90:fb:
0c:08:2d:de:89:fa:3b:84:05:28:c3:4e:32:50:23:
93:b0:b3:c8:00:1d:21:83:a7:72:25:99:1d:9c:19:
f1:db:7b:a3:a3:b1:d6:da:21:28:47:70:f1:0f:e5:
e4:13:67:3e:51:0e:c2:11:c6:31:96:9c:fd:8a:62:
1a:41:7a:8f:83:72:24:ac:80:83:73:1d:c6:e0:f3:
da:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E9:9C:CA:F2:26:0A:AD:13:38:B4:6B:A8:39:C5:4C:02:93:CB:90
X509v3 Authority Key Identifier:
keyid:3B:77:8C:7E:0E:59:83:25:27:34:7C:2E:21:1F:C4:8C:54:71:08:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/085155-34f8-4162-ad64-0db7c3f2faa9/1/O3eMfg5ZgyUnNHwuIR_EjFRxCM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:69:1a:f0:e9:89:19:27:c6:ba:38:c6:77:5e:33:85:76:1e:
5d:0c:9c:3c:1b:59:5b:be:91:6a:5c:36:c3:45:e7:4c:85:25:
30:85:d0:fe:2e:3f:68:0d:22:ff:28:10:65:18:cf:80:1c:fe:
86:af:65:a4:fb:75:13:c9:85:24:dc:66:11:00:e3:08:95:c5:
93:83:dd:cb:25:3b:db:70:d7:bc:43:65:8c:df:01:cb:e6:84:
10:9d:f6:e9:3c:b0:aa:a4:2b:d5:c8:71:29:43:d7:d5:0a:e6:
04:31:33:65:a4:c5:f4:22:57:d6:a1:c8:b1:96:c9:7d:4a:8b:
6f:6c:6c:6e:e8:fa:8a:5c:1a:5b:cb:48:93:b9:92:b8:17:66:
af:16:8e:4d:99:b7:21:8e:89:75:b3:d5:7d:4f:aa:ff:ab:14:
0b:b1:64:e1:15:66:9a:bc:6d:17:a8:3c:f8:22:a2:70:4a:14:
be:22:26:6b:5a:0f:a9:09:d2:e5:1a:2e:44:a5:a0:53:51:ae:
4c:e5:f6:e7:23:82:4a:26:1f:25:a8:a3:b7:53:cd:b4:d9:f2:
ed:5f:38:5b:2f:ab:65:1d:a3:67:63:47:33:d4:4c:0b:87:0a:
7c:c7:5b:7e:84:38:bc:33:74:c5:31:ab:83:54:b9:13:33:77:
17:96:51:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:51:59 2025 by rpki-client