Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
File: OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft (raw, json)
Hash identifier: 38WNxgoVmpmoZ3bxldcBF3IRh/IZBRmeq/iOT4wOjqU=
Subject key identifier: EB:D8:AC:D0:09:A6:EC:D6:4E:46:39:FD:46:0C:88:F3:70:1C:E5:AF
Authority key identifier: 3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
Certificate issuer: /CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
Certificate serial: 0195DFD97F3E6F39D49682F812F50B0BD921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
Manifest number: 061A
Signing time: Sat 29 Mar 2025 03:02:07 +0000
Manifest this update: Sat 29 Mar 2025 03:02:07 +0000
Manifest next update: Sun 30 Mar 2025 03:02:07 +0000
Files and hashes: 1: OzCOm-OoWw9JAfNefPH7dZtJ_uc.crl (hash: TssFuE5yiVGSFSYnK2PCI8lcJpKCPY08tsC+wW4GVFY=)
2: rjNkcaWpx4NgEp7EebCLdM3ILZM.roa (hash: gP4yiejn3v7lSwj9QDjHhQARpfcTwm6Zlm/8oXwlSSc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:7f:3e:6f:39:d4:96:82:f8:12:f5:0b:0b:d9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
Validity
Not Before: Mar 29 03:02:07 2025 GMT
Not After : Mar 30 03:02:07 2025 GMT
Subject: CN=ebd8acd009a6ecd64e4639fd460c88f3701ce5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:37:b4:f1:d5:06:74:14:6b:a8:8f:b8:5d:24:
37:94:f5:81:74:de:1a:07:91:1b:c1:8f:4e:32:51:
82:bd:2d:83:bc:c6:1f:78:12:6e:fc:f5:8d:6d:f8:
cb:b5:f3:7e:bf:43:db:e8:32:b1:58:74:29:11:96:
21:32:65:72:39:83:72:26:e3:9b:55:f1:1a:b5:87:
b0:79:a7:d2:0a:bc:d1:3b:71:1d:ec:b5:8b:f2:88:
62:92:37:7b:01:7d:e1:66:e1:f9:36:3d:bf:1f:0e:
b8:0b:87:7b:70:99:9e:74:fb:cf:2f:9a:53:46:c9:
34:fc:9c:9b:d3:46:5d:3f:93:a9:6e:ba:f1:ae:59:
d6:9d:8f:fd:de:0a:07:b1:15:8d:a0:85:ea:16:aa:
71:76:a7:d5:74:0b:e5:10:65:15:ee:45:04:2b:52:
86:d8:75:46:a5:04:80:2a:b9:8c:36:e7:f5:5e:71:
9d:97:8c:79:98:31:2b:4c:00:0d:87:1d:fd:34:e3:
00:71:15:1a:cd:ca:4b:b2:16:8b:44:84:6a:23:1d:
7d:08:82:07:7b:51:f7:42:c7:23:54:49:b8:90:b8:
9a:4c:80:1d:76:69:f1:55:4c:2f:90:cd:e4:d8:df:
04:3d:74:f9:07:22:db:0e:93:5e:82:5e:80:d1:fb:
12:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D8:AC:D0:09:A6:EC:D6:4E:46:39:FD:46:0C:88:F3:70:1C:E5:AF
X509v3 Authority Key Identifier:
keyid:3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:82:02:9c:35:6a:14:17:14:03:77:b4:e2:8b:09:c0:01:db:
1b:47:1c:10:ae:aa:22:76:f4:bd:0e:df:56:a8:d9:c1:c3:77:
06:41:28:c8:67:df:69:1e:a5:94:62:9c:46:02:44:c9:f9:2e:
02:59:df:ff:f0:a4:e2:19:9b:50:f0:64:cd:f5:21:8c:4d:cc:
0a:da:f8:5a:e8:2e:45:c5:ed:72:81:cc:16:0c:99:57:80:01:
a2:5e:cb:77:c8:fa:24:8f:ed:67:95:d9:e1:21:28:b3:46:61:
2d:19:ee:0a:59:6a:f0:0c:75:66:bd:a0:ff:41:41:41:28:1f:
0c:59:29:2c:df:64:2f:b9:69:20:32:ab:fc:2a:ec:f9:a0:18:
d2:e7:0e:32:cc:4a:e3:b4:e1:e0:f2:b8:23:12:1c:62:b6:84:
f6:3c:92:91:86:0f:d6:96:65:9b:63:a4:a4:6e:41:6a:a5:a6:
f6:b0:8f:20:8c:90:19:5f:27:59:73:31:91:50:c9:84:54:ad:
a6:14:f7:21:29:51:0e:f7:6c:11:eb:39:44:9b:d0:f8:70:16:
95:6b:4d:eb:c9:83:71:2e:36:10:20:31:5d:0e:26:7e:23:41:
10:bc:90:2d:83:58:7e:0c:73:58:ff:ef:fc:b1:3a:26:a9:69:
ec:b5:52:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:53:08 2025 by rpki-client