Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
File: cOKzQXw5wP47u7xNUj7UN7KcWhw.mft (raw, json)
Hash identifier: 7w89fc/TxkK6Zx/z37jLfKq28xcsmYLwNEul4hK4QYo=
Subject key identifier: D4:7E:D1:54:FA:F3:80:3C:41:02:A4:4C:E1:11:0D:DE:6A:47:D0:16
Authority key identifier: 70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
Certificate issuer: /CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Certificate serial: 0195E15A2532012827B3601D30AC536E9AE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
Manifest number: 1454
Signing time: Sat 29 Mar 2025 10:02:16 +0000
Manifest this update: Sat 29 Mar 2025 10:02:16 +0000
Manifest next update: Sun 30 Mar 2025 10:02:16 +0000
Files and hashes: 1: cOKzQXw5wP47u7xNUj7UN7KcWhw.crl (hash: sBvsCea7CFGuM/IbYPrQ/ErMzct1/+Ds5WVSdxvS9/U=)
2: wZl766gEgIlD1PBWErT8JXtbQ6E.roa (hash: GJKy6CeHDJyN+o1oRpRHchOhI0KPIFrY454WKeTW5CM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:25:32:01:28:27:b3:60:1d:30:ac:53:6e:9a:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e2b3417c39c0fe3bbbbc4d523ed437b29c5a1c
Validity
Not Before: Mar 29 10:02:16 2025 GMT
Not After : Mar 30 10:02:16 2025 GMT
Subject: CN=d47ed154faf3803c4102a44ce1110dde6a47d016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f8:0b:28:33:86:b4:f5:c5:2e:e3:97:f1:4f:
44:e6:93:3e:4d:d8:b3:66:83:4a:6f:78:97:80:15:
85:34:26:9f:33:73:30:ca:40:eb:94:df:f8:63:02:
5b:9f:4f:33:24:b8:31:e0:82:25:c4:3b:dd:02:a2:
e4:fd:6d:95:8a:4b:a9:5d:13:01:f8:43:93:d2:f1:
d1:42:aa:66:a5:60:55:0d:73:3e:10:71:c9:ab:7a:
e0:06:cd:e9:54:16:ec:e8:05:29:5b:c4:8a:49:79:
99:96:cf:7a:fc:0f:64:3f:2f:22:64:ae:9a:55:7e:
b1:50:0c:5d:b6:b5:5c:15:8a:b9:fc:63:97:7a:e6:
44:fe:11:c2:4d:2e:d8:87:03:89:07:24:dd:57:da:
54:2c:64:30:67:eb:57:f9:fc:23:1b:82:66:22:42:
17:be:09:4a:e1:48:3c:b7:50:3b:89:2c:25:74:6e:
7f:4e:63:8f:78:7e:f4:d1:4b:4d:09:60:58:a6:e5:
72:85:ba:54:88:e8:c3:9e:f1:5e:25:96:b5:51:d2:
41:36:86:28:e7:99:9d:02:53:50:6b:a1:8f:47:77:
97:36:63:e3:eb:c6:de:c3:d2:34:dc:9e:78:8a:c8:
10:d5:9a:a7:86:cd:11:f4:cd:e9:fb:c1:64:f2:7f:
d2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7E:D1:54:FA:F3:80:3C:41:02:A4:4C:E1:11:0D:DE:6A:47:D0:16
X509v3 Authority Key Identifier:
keyid:70:E2:B3:41:7C:39:C0:FE:3B:BB:BC:4D:52:3E:D4:37:B2:9C:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOKzQXw5wP47u7xNUj7UN7KcWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/8760ad-62c9-483f-bd2f-dc3b632e9e2b/1/cOKzQXw5wP47u7xNUj7UN7KcWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9b:4e:66:a8:dc:90:39:e4:c6:ee:b4:bb:13:6b:ee:0b:d6:
d3:de:50:e5:b1:91:2d:49:3f:7d:a6:95:37:f9:3c:20:75:8a:
f5:d0:ab:08:de:6f:f8:72:f1:5b:24:8b:df:97:e2:6b:26:8d:
b5:3f:9b:02:a9:d7:43:21:d6:ac:8c:38:73:3b:d7:40:4d:82:
cc:4d:a4:56:12:4e:84:3c:6a:3b:64:49:46:3e:f7:30:ee:62:
40:6a:78:6f:fe:59:03:e3:5f:08:b0:fa:6b:63:de:15:18:ce:
63:a9:64:db:2d:2c:7a:57:ae:de:73:2d:9d:ac:59:ad:d0:68:
9f:d9:3e:0d:9c:74:10:1b:da:7f:af:9d:6c:f2:d1:af:6f:64:
92:e2:ea:2a:f6:63:e7:9f:e5:4d:73:36:56:d1:33:80:1e:ff:
65:7f:44:2d:0b:cb:3d:cb:ae:b5:47:2b:67:19:91:26:97:3c:
b0:f6:f1:cb:a2:aa:85:31:6b:8c:9f:e8:b7:28:a5:d3:19:d0:
f0:a1:10:91:58:3a:53:1c:87:b2:c0:fb:d9:4e:51:27:d1:6e:
65:93:fd:1b:5a:51:20:e9:7a:02:b3:10:22:b6:2b:e6:3f:95:
f6:37:c8:de:9f:24:92:02:f8:58:d6:9e:b3:2d:9f:37:0f:ec:
29:d6:a0:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:23:55 2025 by rpki-client