Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.mft
File: ob6Qc3nwa-tMs1EsxKruBIE0o8Y.mft (raw, json)
Hash identifier: gdY6qWas2O1+erQyNxvsqI3ZwZPasJ4SCU4AjA6GOeY=
Subject key identifier: 61:04:33:53:D2:E2:76:89:8F:EB:2B:F9:0D:2D:EC:A9:A5:70:CA:D5
Authority key identifier: A1:BE:90:73:79:F0:6B:EB:4C:B3:51:2C:C4:AA:EE:04:81:34:A3:C6
Certificate issuer: /CN=a1be907379f06beb4cb3512cc4aaee048134a3c6
Certificate serial: 01940645FF1C1E33805E84129EDF8B6872FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.mft
Manifest number: 13CA
Signing time: Fri 27 Dec 2024 04:00:38 +0000
Manifest this update: Fri 27 Dec 2024 04:00:38 +0000
Manifest next update: Sat 28 Dec 2024 04:00:38 +0000
Files and hashes: 1: ob6Qc3nwa-tMs1EsxKruBIE0o8Y.crl (hash: Rtk26cADLSaU6RZM7fgfoRBOtkgKnriW0yc3asQ+xTo=)
2: rWRYxm_G5BxWQ0uGrqil3B1_CeU.roa (hash: tjCSK37uqLsyNibvDIOYmAdzQ6MTUfBHFQH7pog1lPg=)
3: ztMFBySgYeNK1WuO7wte9mx5890.roa (hash: w8LECpTRTUjWqqiHNN9TrgV+zcgO6O2DaAPc6BiPc/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:06:45:ff:1c:1e:33:80:5e:84:12:9e:df:8b:68:72:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1be907379f06beb4cb3512cc4aaee048134a3c6
Validity
Not Before: Dec 27 04:00:38 2024 GMT
Not After : Dec 28 04:00:38 2024 GMT
Subject: CN=61043353d2e276898feb2bf90d2deca9a570cad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:93:75:10:16:5a:39:0c:d1:f8:b5:3c:98:0c:
b8:7c:19:be:d1:60:ad:ce:6a:2a:ed:54:07:5c:da:
5b:83:cc:35:46:10:09:d6:e5:4e:5a:67:ef:69:49:
c4:47:40:be:42:bc:d9:33:13:cb:38:98:c1:be:72:
e0:1e:cc:9e:66:a4:81:2d:7d:67:07:55:58:d4:39:
a5:87:cb:07:c9:f6:42:c1:9b:fa:cc:64:d6:b4:98:
86:58:57:6d:38:8d:4b:68:6d:c2:79:69:39:f8:9a:
02:a6:41:e6:3f:38:33:32:a8:30:a5:1d:07:05:4d:
cd:00:80:dc:1c:fd:9d:6e:14:0a:11:cc:ea:5f:63:
33:bc:12:62:0e:fb:ef:95:71:8e:53:31:08:f3:3d:
de:94:8c:66:a6:27:44:4b:41:78:9e:a6:aa:09:d6:
06:ed:28:4f:47:31:11:2b:10:6a:04:98:6e:a3:28:
e5:f3:a3:55:a5:91:57:e8:66:bd:57:11:3e:ab:06:
8b:77:a5:e1:02:12:a6:4a:c5:aa:55:47:d0:d6:86:
38:cf:4a:03:52:ed:2a:10:12:bf:c9:33:c9:55:f2:
a3:f6:76:af:da:86:57:76:a7:4c:a8:c5:c6:56:0c:
3e:8e:f4:4a:41:30:c8:62:d0:3e:47:67:15:ba:da:
b9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:04:33:53:D2:E2:76:89:8F:EB:2B:F9:0D:2D:EC:A9:A5:70:CA:D5
X509v3 Authority Key Identifier:
keyid:A1:BE:90:73:79:F0:6B:EB:4C:B3:51:2C:C4:AA:EE:04:81:34:A3:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/259ad9-3678-4318-8a09-faaf94fcc834/1/ob6Qc3nwa-tMs1EsxKruBIE0o8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:91:fb:c4:e8:1a:99:df:8b:76:8f:61:dc:0a:c4:97:ff:ef:
31:17:30:04:6a:39:3a:ab:e0:c1:b4:bd:87:66:c3:d5:10:89:
f3:04:da:f5:1f:b7:fb:54:83:f2:c9:06:cf:27:90:29:1c:26:
0f:59:60:96:5d:5a:ed:19:8b:f9:fb:e0:b0:a0:2e:27:b4:71:
ba:13:84:b8:57:4a:cd:72:55:9a:7d:b4:70:96:cf:91:85:15:
c1:c8:45:a6:2a:24:95:c5:a5:50:c1:78:5c:03:17:17:24:6a:
f4:ef:ab:27:64:80:4a:b4:a5:bf:6e:dd:34:1a:72:48:55:9e:
df:16:94:83:ee:af:2e:32:74:b0:88:a4:1c:7b:a2:83:bb:9d:
ed:b0:5e:11:e3:b6:5d:3a:19:d9:43:aa:3d:e5:88:53:5f:71:
ba:a7:93:54:f4:fc:18:78:33:99:01:c9:49:c0:a4:79:60:93:
d9:98:25:f6:b1:2f:4a:38:f0:99:1f:1a:27:88:68:fd:a6:9d:
ec:55:76:bb:1f:08:94:11:c0:88:28:25:96:8f:e1:43:06:c3:
c3:ef:40:88:50:57:4f:2e:f4:b0:be:c3:71:4a:8e:5c:bf:75:
d3:b1:19:4e:5f:f3:f3:75:0b:0d:1e:f5:63:2e:a7:ac:ca:1d:
3a:8b:57:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 03:35:12 2025 by rpki-client