Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
File: obfHtAmGdKBPsXeELOxO65v4nh4.mft (raw, json)
Hash identifier: /rLPk0X21e80l25JesUSSNXfDVVqK7wrDlkQZFKQhyY=
Subject key identifier: A0:61:99:8A:98:A5:61:16:FD:A0:12:92:3F:73:B7:20:78:6F:EE:30
Authority key identifier: A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E
Certificate issuer: /CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e
Certificate serial: 0194BBCDB9AA6BF254A5B6E5850CC5FFB644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:09 +0000
Manifest this update: Fri 31 Jan 2025 10:00:09 +0000
Manifest next update: Sat 01 Feb 2025 10:00:09 +0000
Files and hashes: 1: obfHtAmGdKBPsXeELOxO65v4nh4.crl (hash: DHM/uKcF6NzK20YJUDUdUYTsKl966Ze1R3EBd5RaSho=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b9:aa:6b:f2:54:a5:b6:e5:85:0c:c5:ff:b6:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b7c7b4098674a04fb177842cec4eeb9bf89e1e
Validity
Not Before: Jan 31 10:00:09 2025 GMT
Not After : Feb 1 10:00:09 2025 GMT
Subject: CN=a061998a98a56116fda012923f73b720786fee30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:54:48:11:aa:b7:74:30:fe:4c:1a:06:88:a3:
60:f5:8f:b8:7a:dd:1f:ea:98:65:cc:9e:a3:33:45:
ee:37:b1:4b:da:ba:83:e4:90:98:ee:ea:18:a5:e1:
ad:ec:a8:51:ce:69:09:31:ac:39:b5:68:ac:49:5e:
67:50:de:64:14:11:e2:7d:d0:90:5f:cb:4c:1f:cc:
88:00:fa:a2:c9:e4:c9:b8:d8:dc:64:a7:11:7b:1b:
73:bc:62:e8:94:49:a5:49:4a:38:8b:a1:b1:53:d8:
5a:bc:4f:1f:e8:2b:01:fa:7f:54:d2:cd:95:9b:21:
c8:de:66:d1:be:c2:ae:95:aa:26:74:c7:55:e8:76:
c4:bf:8b:5a:ba:38:81:78:c5:23:68:82:fd:52:26:
03:05:86:a9:5e:4e:8a:22:8a:df:8b:d3:d0:5c:99:
8b:ca:2e:0f:3b:47:68:e4:a4:2d:c2:d2:1d:50:c0:
1b:46:78:12:7f:7c:7f:75:33:c0:b5:85:7d:e6:6e:
20:3a:4d:0e:1f:d9:11:32:6a:81:da:e5:bc:07:2f:
c8:80:72:5f:2c:6e:7a:d8:e1:8b:d3:5f:c9:9d:57:
20:90:34:3e:47:38:d6:c8:9e:0d:f4:29:d3:02:63:
20:5f:ba:68:8e:6e:40:fd:75:20:c7:4b:09:a2:1e:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:61:99:8A:98:A5:61:16:FD:A0:12:92:3F:73:B7:20:78:6F:EE:30
X509v3 Authority Key Identifier:
keyid:A1:B7:C7:B4:09:86:74:A0:4F:B1:77:84:2C:EC:4E:EB:9B:F8:9E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obfHtAmGdKBPsXeELOxO65v4nh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/85ae1b-b077-448e-a328-7c05a1ff549b/1/obfHtAmGdKBPsXeELOxO65v4nh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:20:3d:0a:b6:16:99:c1:d5:9c:5b:dd:db:17:a2:d2:04:16:
e6:80:14:d4:fe:ec:07:29:cb:d7:fa:28:11:1e:81:26:70:93:
cf:29:58:62:b2:06:0f:d0:d2:85:56:2b:3e:5c:e8:0a:0f:76:
39:fd:c2:f9:60:ef:33:08:88:00:85:69:4d:af:16:a8:fa:3a:
b5:d2:08:40:66:dc:53:a5:da:17:c5:a4:bc:3b:fc:a7:52:f2:
87:ae:3e:60:3e:0f:ac:b5:dd:c8:16:26:d1:f0:72:d9:f1:27:
79:83:15:d5:6a:98:9d:8e:d2:7b:92:12:d4:ae:43:94:4b:9d:
ea:5e:a6:14:e7:9e:ac:69:d1:cd:ce:74:5c:ba:89:f4:7c:6d:
3e:fa:c6:f8:bd:ce:e9:01:f7:d5:36:20:0c:24:54:cb:0e:1b:
54:2b:66:17:e4:d6:94:c3:0f:d2:02:c4:fd:e6:0f:c5:d2:a3:
e6:d7:bb:9e:97:a8:bf:42:1d:c6:e4:cd:5b:36:da:a9:01:d5:
1d:99:6c:37:bb:30:d2:d8:eb:57:55:c9:2f:86:32:60:7f:84:
9d:b3:df:c4:9d:8c:36:2b:12:f3:9d:6b:cc:b0:bb:31:84:f6:
a8:1d:9f:b8:0e:e9:94:9e:b1:f6:e2:84:f8:67:f7:28:f4:76:
d3:77:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:00 2025 by rpki-client