Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/532747-30eb-44c2-84e1-20ddee5fa3b9/1/O2zWG8gjrh8ol5A817eJWEe3Jsg.mft
File: O2zWG8gjrh8ol5A817eJWEe3Jsg.mft (raw, json)
Hash identifier: 3LJQxFhpKTRsU/t1veaRZJZ2sKyoBhCBRXYNjeRl0J0=
Subject key identifier: 91:EA:E3:56:C4:75:09:A3:F0:4E:C8:53:7C:C4:FB:FA:DF:96:E0:5B
Authority key identifier: 3B:6C:D6:1B:C8:23:AE:1F:28:97:90:3C:D7:B7:89:58:47:B7:26:C8
Certificate issuer: /CN=3b6cd61bc823ae1f2897903cd7b7895847b726c8
Certificate serial: 0194BD8588D03DBF30E87A4A4A58431407D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2zWG8gjrh8ol5A817eJWEe3Jsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/532747-30eb-44c2-84e1-20ddee5fa3b9/1/O2zWG8gjrh8ol5A817eJWEe3Jsg.mft
Manifest number: 0212
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: O2zWG8gjrh8ol5A817eJWEe3Jsg.crl (hash: Fl5ONIDPyerV77xcMC+OwpKNSXPWMhhRjEsYA3V0GmQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:88:d0:3d:bf:30:e8:7a:4a:4a:58:43:14:07:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b6cd61bc823ae1f2897903cd7b7895847b726c8
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=91eae356c47509a3f04ec8537cc4fbfadf96e05b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:3b:88:1c:55:47:32:a7:97:e4:ff:e9:0a:
fd:86:b1:47:78:ee:e7:ba:ee:7a:af:7d:7b:07:be:
82:65:71:4d:7c:cf:c7:71:3b:fa:33:04:49:d0:e8:
4d:70:d3:4b:7a:71:34:a4:ad:68:16:a8:9a:43:65:
d1:a5:74:18:88:1b:e4:97:c4:26:ba:8a:31:c7:d8:
48:4c:92:86:a7:2d:13:bc:7d:38:94:7f:95:2a:df:
43:7e:ea:09:5f:f2:0e:16:5a:38:2d:bd:7e:b0:38:
d4:32:e6:5f:18:3e:44:52:cb:d2:4c:82:77:f3:fa:
07:8b:23:1f:fd:1f:30:67:e0:5e:60:99:3b:e8:08:
78:73:06:4d:33:87:9a:67:aa:28:9e:a7:5f:a4:b4:
93:64:f7:6b:06:26:90:96:54:6f:a4:93:27:3c:df:
02:a9:de:50:e1:00:a5:58:81:d4:4b:82:66:d5:eb:
5a:83:3e:9c:34:87:b6:a0:81:e0:4a:f8:25:47:35:
88:b1:2b:48:25:9d:9b:cf:d0:75:0c:fb:75:5c:96:
31:96:b3:b7:e2:f0:5c:d8:86:90:64:31:c1:f5:da:
a0:93:97:43:3a:dd:f8:71:08:73:0c:81:43:2f:a9:
d7:17:6a:b0:b7:81:02:2c:dd:7d:30:55:56:67:18:
63:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EA:E3:56:C4:75:09:A3:F0:4E:C8:53:7C:C4:FB:FA:DF:96:E0:5B
X509v3 Authority Key Identifier:
keyid:3B:6C:D6:1B:C8:23:AE:1F:28:97:90:3C:D7:B7:89:58:47:B7:26:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2zWG8gjrh8ol5A817eJWEe3Jsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/532747-30eb-44c2-84e1-20ddee5fa3b9/1/O2zWG8gjrh8ol5A817eJWEe3Jsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/532747-30eb-44c2-84e1-20ddee5fa3b9/1/O2zWG8gjrh8ol5A817eJWEe3Jsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:95:e7:85:67:43:e6:55:3a:52:c8:45:30:37:eb:7d:d1:cc:
38:a6:10:f9:e3:4b:1e:e3:36:64:00:f1:07:2f:cc:0b:43:e6:
e2:9d:ce:c0:03:1b:0a:e4:7a:9b:34:91:bd:c3:13:c5:3e:e3:
7b:e8:11:e4:7a:e8:58:94:83:0a:00:00:a3:13:07:7f:7e:aa:
e4:79:ff:89:42:86:88:41:82:4b:ba:b3:33:92:d6:24:8e:63:
7b:88:85:94:02:16:a4:d4:1d:48:07:56:f3:31:7b:8f:83:b8:
8c:b0:ca:75:d7:a4:a9:7d:8b:d0:7b:2d:be:10:c2:14:8a:04:
fd:99:f7:52:fb:43:b6:cd:46:3b:38:21:39:3c:41:4e:c6:bd:
04:56:7e:83:a1:f1:4e:82:1c:c2:59:9e:6d:a6:01:fd:25:1a:
6a:2e:cc:b3:1c:ea:b4:54:2b:64:49:32:be:1b:2b:1c:f3:ad:
0d:57:ec:6d:4e:ac:e6:bd:e2:46:cc:56:dc:10:da:43:f3:ed:
3b:d0:df:5d:d7:75:92:43:93:8d:2c:6b:5a:3f:31:41:d5:5d:
d7:17:86:ec:58:af:8f:b2:c4:d3:3b:41:97:d3:dd:4b:ab:0b:
74:d1:07:7c:73:36:9d:1f:20:56:b1:82:0a:2c:25:86:e1:e2:
48:85:6d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:18:40 2025 by rpki-client