Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
File: OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft (raw, json)
Hash identifier: BcbcdxIf9Liv1ab+wzAHtA8Q9X2xWAeWGsrpwRKKIQE=
Subject key identifier: CB:EE:CA:E0:4D:95:FE:26:81:65:F1:B4:72:00:55:8F:1B:3A:90:8D
Authority key identifier: 3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
Certificate issuer: /CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
Certificate serial: 01967B32BB0C31BD223558202E5D93AED6BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
Manifest number: 066B
Signing time: Mon 28 Apr 2025 07:00:44 +0000
Manifest this update: Mon 28 Apr 2025 07:00:44 +0000
Manifest next update: Tue 29 Apr 2025 07:00:44 +0000
Files and hashes: 1: OzCOm-OoWw9JAfNefPH7dZtJ_uc.crl (hash: 1CHyjmZ1e3pLNsfB1wf8c/dD99cWIWRJ5G+yMfB6UrI=)
2: wWxNrzf0bGINPQsafMeSGo5rzC4.roa (hash: q18JpXRnjqqiRh7u6sYb0jCTwYi6/zUTClZxBEPPQE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:bb:0c:31:bd:22:35:58:20:2e:5d:93:ae:d6:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
Validity
Not Before: Apr 28 07:00:44 2025 GMT
Not After : Apr 29 07:00:44 2025 GMT
Subject: CN=cbeecae04d95fe268165f1b47200558f1b3a908d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c0:d5:c6:7b:e1:22:70:2b:94:f6:26:b7:97:
ea:09:ec:bc:1f:b4:44:bf:e2:b9:c9:75:4e:ba:d1:
ad:36:e3:b3:38:b6:2a:8f:ca:4f:fb:46:9a:1a:56:
48:7d:7e:4f:55:53:48:ac:da:e8:73:fb:b8:4c:33:
94:fc:73:bb:cc:a8:40:7e:98:8d:b7:76:2c:e8:e8:
35:1f:53:6e:c1:cf:0c:8a:6f:6c:59:f4:e9:c6:b8:
6d:bb:ea:55:ef:15:3d:b4:ad:3f:04:66:01:f6:28:
2a:f0:01:73:54:3f:20:5e:73:b1:3f:21:9b:18:80:
17:56:4b:60:62:81:6a:1f:65:f2:6c:72:c4:ba:1d:
76:47:32:f5:d7:00:01:3f:cf:f9:a1:5e:32:08:ae:
11:c6:15:bd:01:fe:a5:23:84:7c:06:89:e8:e7:84:
62:38:20:b3:b6:91:43:dc:08:d3:0c:47:f1:e9:d1:
1f:7e:54:30:11:84:ba:ce:8b:f3:ac:ef:4a:35:ed:
93:c1:ac:e0:42:e5:aa:af:45:fc:0f:33:c9:1d:4e:
25:9d:4d:22:56:d5:64:cd:0c:11:cd:d3:87:23:31:
4d:fb:fb:83:57:6e:72:87:f7:af:0c:96:b6:3c:b9:
7f:70:05:53:c8:6e:88:9f:4c:ed:c2:c1:ad:0f:0c:
71:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:EE:CA:E0:4D:95:FE:26:81:65:F1:B4:72:00:55:8F:1B:3A:90:8D
X509v3 Authority Key Identifier:
keyid:3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:90:d4:ca:d1:9b:7f:bf:f8:f5:80:da:b1:b7:fe:fc:47:21:
db:db:ef:43:4c:bb:47:d3:4c:df:02:15:20:fb:c3:11:b1:17:
f3:be:68:09:55:fa:c9:77:6a:bf:ae:e9:66:5b:d6:91:59:69:
ef:e1:3b:6a:ee:38:cf:61:d6:bf:28:77:36:30:bb:36:b3:0e:
f8:0a:5b:9c:7e:f2:b0:6d:7e:66:72:33:ea:ea:cb:8e:6d:9b:
00:19:3f:14:0a:59:08:79:3b:fd:14:c1:7f:cd:ec:38:69:0f:
25:64:77:f6:25:d9:6d:b7:b2:67:cb:5c:e1:47:53:32:ff:b0:
5c:7b:af:20:bc:c4:f5:36:60:32:aa:44:19:1b:fe:92:1a:ab:
13:95:67:1f:f8:d5:0a:c7:d0:a5:70:12:8e:32:ab:9f:2d:3f:
22:61:e3:22:e8:9c:54:37:c2:ac:68:6c:33:ca:36:60:fc:27:
52:fb:c6:b8:ee:40:67:d1:cf:fd:b6:22:f4:9c:b4:00:9d:72:
46:b2:ff:59:98:2f:28:a4:5b:23:a8:00:80:71:03:84:d1:6e:
7f:e0:98:70:62:3a:16:ae:1a:f1:8a:04:6d:65:c4:8f:44:76:
4b:3b:4e:12:6b:cc:59:18:65:08:b7:3f:fd:56:da:79:55:1f:
15:12:a0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:58:15 2025 by rpki-client