Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.mft
File: OZ17KbLru-43WSMgfh2FZU8LV7o.mft (raw, json)
Hash identifier: 5+LWGFFeourtziI+ozXCx9HbCRjPDOFsuXROLseaynA=
Subject key identifier: 61:1F:10:DE:B5:55:39:34:6F:CB:A9:71:6B:7E:FD:24:5B:94:AC:E9
Authority key identifier: 39:9D:7B:29:B2:EB:BB:EE:37:59:23:20:7E:1D:85:65:4F:0B:57:BA
Certificate issuer: /CN=399d7b29b2ebbbee375923207e1d85654f0b57ba
Certificate serial: 0194BC72C553CD9EBFCDB517C08A07908378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OZ17KbLru-43WSMgfh2FZU8LV7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.mft
Manifest number: 74
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: OZ17KbLru-43WSMgfh2FZU8LV7o.crl (hash: EUfqC1njeJdtsSLUwOTTB5lMH3WK/25CicSeaZrEyGI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c5:53:cd:9e:bf:cd:b5:17:c0:8a:07:90:83:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=399d7b29b2ebbbee375923207e1d85654f0b57ba
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=611f10deb55539346fcba9716b7efd245b94ace9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e5:2b:90:ef:0a:1a:d6:6d:21:3f:48:e0:87:
56:7b:f9:35:ad:28:6b:2f:e0:0d:62:a8:7b:d4:a8:
41:64:74:ae:41:fa:ae:78:3f:f3:36:52:cc:d0:82:
97:61:f4:e7:05:5e:78:06:d0:5f:3b:07:82:8b:f3:
58:fa:b7:ae:cc:1b:59:cf:59:0d:50:85:2e:f0:b3:
7a:72:cc:0d:bc:c0:9f:13:37:33:0e:09:b6:29:12:
12:04:dc:13:2a:8f:a5:4f:4d:02:d9:2f:f2:f8:19:
86:91:85:56:06:37:ba:27:57:07:1a:f4:1d:2a:69:
9c:e2:0a:8c:7a:1c:96:cf:8a:4f:e9:53:e9:e8:fd:
ce:0c:4e:45:0c:e6:bf:51:93:ed:cc:97:67:fd:1b:
dd:be:f0:9c:e8:6f:4c:a9:39:73:32:19:d8:2a:45:
42:d4:eb:de:2f:d3:2e:8f:73:c5:d5:22:ed:46:fa:
34:c7:0b:83:82:86:e1:3e:72:40:6d:06:4b:c0:61:
41:6e:d2:5b:76:ca:a7:8d:b8:7e:29:f1:6b:27:36:
9f:27:e9:b9:5b:b0:0b:df:28:05:55:7b:c4:c2:4a:
e2:0b:c7:f8:e1:53:50:c2:88:f9:48:5d:41:58:ee:
63:41:0d:db:0c:98:8e:25:53:05:63:ab:fe:4f:26:
e6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1F:10:DE:B5:55:39:34:6F:CB:A9:71:6B:7E:FD:24:5B:94:AC:E9
X509v3 Authority Key Identifier:
keyid:39:9D:7B:29:B2:EB:BB:EE:37:59:23:20:7E:1D:85:65:4F:0B:57:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OZ17KbLru-43WSMgfh2FZU8LV7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/391c8d-6ac6-4c06-9a40-a6b5a8be1113/1/OZ17KbLru-43WSMgfh2FZU8LV7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:cf:ea:fe:cc:5f:d9:dd:9a:ff:d3:41:b8:49:81:fd:33:72:
d1:35:47:7a:d9:63:60:f4:2b:0e:0b:f5:60:ed:99:ea:73:e8:
18:04:2f:be:20:06:d5:18:19:06:f9:46:16:47:29:82:03:d3:
df:6f:48:10:86:35:b0:03:72:bf:31:ec:fb:fa:61:18:17:4d:
1d:70:08:05:c0:e3:08:9a:2c:c3:a5:67:0d:4a:cb:84:51:99:
f6:b3:2c:ca:f3:67:c3:3e:10:a4:c3:79:88:3f:2c:ae:47:9a:
12:3d:b8:1c:2b:c9:49:92:1a:1c:05:52:2e:ac:1c:cc:e3:21:
3d:f9:87:63:2b:94:c2:41:41:ab:3f:eb:b8:61:18:b0:39:fd:
68:66:c8:7f:cb:2b:a7:c1:b6:c1:66:6f:85:77:71:74:6d:37:
22:8e:d6:d8:57:e8:22:76:b7:c1:37:d0:d7:b4:aa:c3:d4:8f:
35:49:de:d8:ce:e1:03:26:9e:03:a0:5b:cc:2d:48:f5:c1:51:
ef:bb:c8:01:04:e9:80:4d:ac:25:98:27:a5:fa:99:d5:c1:ae:
ca:98:34:07:d2:90:59:ca:81:3d:36:92:33:55:c2:48:fb:91:
56:dc:27:92:d7:10:c8:03:e9:27:be:12:b7:2f:16:00:ee:0d:
52:ec:10:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:56 2025 by rpki-client