Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
File: OsVr3pY-73wlC8hDxpXKP-B_usQ.mft (raw, json)
Hash identifier: gGZ94atm7zm2fxu7EeSYJxJv2cyNSmPyB2kVEsX11LM=
Subject key identifier: 08:C1:98:85:95:E6:11:D4:D2:BA:46:7A:FC:A2:96:9A:99:02:AC:64
Authority key identifier: 3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
Certificate issuer: /CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Certificate serial: 0195E190A2196C0ACB1B16A6CE5CE0AE5D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
Manifest number: 05A7
Signing time: Sat 29 Mar 2025 11:01:47 +0000
Manifest this update: Sat 29 Mar 2025 11:01:47 +0000
Manifest next update: Sun 30 Mar 2025 11:01:47 +0000
Files and hashes: 1: 0CQ87gtDkmQ-YdioNl7SCmI2_Jg.roa (hash: vbvFk3kiJv5WUL7DS9QfsY/2+9s/5EIx/LnubRQ+4yA=)
2: OCRKDcURj8xaIImY8cNKFLg3_eE.roa (hash: HUOGD3LHhRpZmpPeYppPKP+b2mI5WdrLoJBrL3wQ2O0=)
3: OsVr3pY-73wlC8hDxpXKP-B_usQ.crl (hash: cBm1c6NWXegnkeoZ6jcE5G4ecXlcwxpe9XcaMiMmSd8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:a2:19:6c:0a:cb:1b:16:a6:ce:5c:e0:ae:5d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac56bde963eef7c250bc843c695ca3fe07fbac4
Validity
Not Before: Mar 29 11:01:47 2025 GMT
Not After : Mar 30 11:01:47 2025 GMT
Subject: CN=08c1988595e611d4d2ba467afca2969a9902ac64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:53:bb:32:5b:dc:a9:ac:ee:6c:3f:5a:f7:77:
08:aa:0c:67:e4:b2:f5:4e:86:d9:69:bc:3a:1b:0f:
2c:9f:89:ec:bf:60:cb:fe:5b:3e:89:df:1b:aa:5c:
2a:3e:7d:ac:e5:92:d3:eb:30:f9:b3:17:43:82:5f:
dc:20:7e:5f:b2:f1:67:50:f7:dd:87:ee:a3:80:9e:
e7:85:66:e7:1d:12:32:24:7b:60:44:4c:70:0d:f5:
78:55:89:f1:d4:e4:c3:9d:18:07:d3:91:7b:8c:a6:
1a:c7:5b:03:c1:8a:65:ee:75:da:fd:cd:b8:b2:d1:
9c:a3:a9:cd:b8:18:1d:89:1e:86:78:49:fa:6e:bf:
d9:e4:d1:bc:9f:6d:70:6a:5d:7b:f7:15:11:bc:1d:
e9:72:69:30:c9:45:7b:db:d0:4f:50:70:55:f7:66:
21:7e:a9:fe:7b:bc:41:f1:0e:fe:3e:c2:e2:bd:87:
0f:26:5f:63:c4:91:fe:c4:ba:3c:7b:84:3a:a3:d0:
87:64:47:7e:0e:41:a4:78:3c:c0:7b:43:b2:f5:e9:
00:40:a3:59:91:cb:40:60:21:a8:e0:90:c0:40:8a:
4f:b5:41:13:76:ed:f0:6e:6a:3e:17:fb:c8:0e:f0:
6d:7f:0b:a3:e1:2f:12:65:be:5b:bc:cc:43:65:41:
d5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C1:98:85:95:E6:11:D4:D2:BA:46:7A:FC:A2:96:9A:99:02:AC:64
X509v3 Authority Key Identifier:
keyid:3A:C5:6B:DE:96:3E:EF:7C:25:0B:C8:43:C6:95:CA:3F:E0:7F:BA:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsVr3pY-73wlC8hDxpXKP-B_usQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0dcf98-a8d2-46c0-b7cb-ce9c9f3aa855/1/OsVr3pY-73wlC8hDxpXKP-B_usQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:a2:45:3c:fb:67:6f:31:e7:02:7c:6b:25:e4:7b:33:d1:24:
df:2a:c7:69:a7:dd:5d:e2:4f:16:4a:1b:ab:d9:74:a2:ea:b7:
a7:8a:17:e6:3b:42:77:cb:0c:ce:ff:95:3c:71:a7:71:af:eb:
e4:26:62:17:53:93:ac:e3:f9:33:b6:5a:d5:0d:ba:68:b6:16:
33:21:c6:08:e5:e8:e6:98:2a:66:aa:16:a5:4a:2d:f2:73:eb:
6c:5d:93:d8:fc:7b:3e:69:77:07:1f:b6:74:33:76:80:69:b9:
ca:78:f7:c1:44:af:72:31:fd:f4:9d:20:79:0d:70:67:54:fb:
a0:f1:c7:0d:bb:7d:69:14:9c:db:b4:97:c5:93:4c:87:00:39:
85:89:36:db:fa:e3:ab:da:7b:bb:1e:fb:98:f1:e8:17:b3:a1:
02:27:ad:30:ea:cc:e3:01:8e:db:82:59:07:e2:bc:71:d6:f0:
af:e9:e8:13:83:ec:e4:e7:d6:f4:be:9c:9f:a1:31:1b:88:f1:
f6:9b:e7:d2:1b:ea:da:69:e1:48:5b:ff:55:8d:90:59:79:4e:
dd:20:40:86:49:c8:2b:48:70:9c:a3:9a:03:c9:51:d0:40:1b:
7a:4c:17:37:ec:d1:e8:4f:7e:93:9e:c4:ec:8b:47:9a:75:65:
b5:b8:97:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:24 2025 by rpki-client