Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
File: O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft (raw, json)
Hash identifier: r5KqWexRR1Ia4byU8QZLW6qmRQ3pyAZP8o63wvN5q3k=
Subject key identifier: 75:83:7D:FA:BF:3C:1A:7D:6D:EA:A1:57:F9:30:E3:EF:22:BD:43:78
Authority key identifier: 3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3
Certificate issuer: /CN=3bee6066bb652c648c7a87099d0d9354546060d3
Certificate serial: 0194BBCDF94911A918E7483C00185DF9A817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:25 +0000
Manifest this update: Fri 31 Jan 2025 10:00:25 +0000
Manifest next update: Sat 01 Feb 2025 10:00:25 +0000
Files and hashes: 1: O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl (hash: ksnT/dMnjzlQTjTozWt4UOjt8etS6yVA4Yj6q6Ij180=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f9:49:11:a9:18:e7:48:3c:00:18:5d:f9:a8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bee6066bb652c648c7a87099d0d9354546060d3
Validity
Not Before: Jan 31 10:00:25 2025 GMT
Not After : Feb 1 10:00:25 2025 GMT
Subject: CN=75837dfabf3c1a7d6deaa157f930e3ef22bd4378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:49:14:2c:71:98:6a:cf:10:da:ad:52:cd:d5:
f7:fe:85:fa:b5:ec:12:93:e6:2f:64:62:39:c5:9e:
18:c7:95:b4:3f:33:de:a4:14:af:d3:82:f3:e7:7e:
1e:1b:ed:74:e7:db:dc:25:64:59:72:bc:38:89:40:
cc:c7:4e:df:f2:ec:39:2d:48:60:af:04:f5:92:7c:
dd:eb:50:19:1b:d4:d9:4d:2d:6c:c6:86:2a:88:16:
a9:c2:7d:b7:f2:37:e7:28:55:dd:67:97:04:c3:2a:
7b:46:e1:e6:32:d5:f2:ab:16:f3:3c:d5:f5:77:33:
98:0e:6f:1c:82:1c:79:8a:c5:5f:c2:70:23:b8:d2:
81:e8:82:d8:a2:e7:7f:54:fa:30:01:bb:d9:ee:03:
6c:61:58:0e:1e:80:28:63:88:a8:1b:2b:ef:77:72:
3c:46:bd:f4:14:0f:df:3e:fb:7e:5d:5b:e2:78:c6:
5f:29:20:0e:4b:2e:c0:87:a2:25:17:cc:64:c4:8d:
f5:94:7e:d6:6f:4f:34:29:fa:03:af:1a:e2:54:43:
47:55:d5:bd:4f:0b:9e:49:23:32:34:db:9e:a7:8b:
77:7c:e0:fe:77:df:90:27:40:97:2a:81:17:ce:cb:
31:56:91:08:4e:fa:e6:be:d4:da:fe:97:ef:56:6a:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:83:7D:FA:BF:3C:1A:7D:6D:EA:A1:57:F9:30:E3:EF:22:BD:43:78
X509v3 Authority Key Identifier:
keyid:3B:EE:60:66:BB:65:2C:64:8C:7A:87:09:9D:0D:93:54:54:60:60:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-5gZrtlLGSMeocJnQ2TVFRgYNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d29cf0-4064-498a-8de3-11646be16723/1/O-5gZrtlLGSMeocJnQ2TVFRgYNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fe:db:53:93:3b:7d:04:75:85:56:58:6f:97:b0:69:59:48:
7e:04:68:75:4b:77:5b:4b:13:2e:09:a7:73:a3:66:50:bd:c6:
d0:63:15:03:5a:ae:b7:f4:4e:4b:4f:3f:bf:39:bd:b8:ba:79:
9a:b2:69:36:54:ae:47:a9:77:28:c7:90:70:41:bd:cb:c0:8b:
9e:0a:cc:32:be:8c:07:f5:48:3a:9d:9c:c3:ea:33:80:f7:73:
97:c2:5a:0b:ee:51:bc:84:7e:9f:24:d9:33:ca:ed:d2:5b:41:
d9:5e:31:bc:b2:46:87:90:1a:38:64:b0:f3:7e:1d:4f:a3:b4:
34:a8:21:8e:3a:f5:2b:20:bd:95:81:73:0c:d6:95:65:25:48:
00:27:a2:99:94:c1:e3:41:c6:9e:f1:be:32:ad:04:58:f7:ea:
41:13:76:2f:0d:f6:0b:04:04:0c:76:76:ad:e4:63:22:62:f0:
62:c9:13:75:6f:fc:86:45:43:ad:0e:9e:36:45:95:6a:af:f4:
6a:3b:f8:9e:13:d4:e9:2c:78:86:e0:c4:88:e7:70:d1:12:ff:
4f:2d:b5:98:24:fa:77:92:82:99:4c:08:b8:87:4b:fc:05:49:
79:a1:1e:1e:ca:7e:0b:10:39:7a:47:de:7d:a8:2c:7b:3b:51:
b6:b8:19:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:47 2025 by rpki-client