Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
File: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft (raw, json)
Hash identifier: Vn0QBVIOlF1oW+hpOt0u3cBjl2xtPsuGjkeYgbZNy9E=
Subject key identifier: AA:A6:51:27:2A:DE:33:22:3F:65:85:DC:5E:57:86:04:ED:7E:E0:81
Authority key identifier: D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
Certificate issuer: /CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Certificate serial: 0194BCA97F2C6BF02BDD29D35328D2F7CA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
Manifest number: 09AD
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: 0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl (hash: S5CbNvcxKEgq/IvtTzpRqyKGK11xQID4Ie3RxgjdDCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7f:2c:6b:f0:2b:dd:29:d3:53:28:d2:f7:ca:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3098e5e20d78f94e696c1372b5623ffa71d94d0
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=aaa651272ade33223f6585dc5e578604ed7ee081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:40:fb:d7:b2:51:6e:9e:fb:76:c0:ba:b9:
cf:33:a6:ae:08:ee:38:94:7b:99:e4:8d:87:0f:56:
e6:7e:9b:06:6b:e7:7a:c3:e7:e6:80:40:43:b7:ba:
b1:f5:21:15:36:00:93:65:1e:23:53:09:8f:6a:08:
73:ad:b3:c9:f3:0b:ae:7a:2a:d3:e8:3d:dd:21:c3:
4e:fb:ba:db:a5:fd:76:1a:91:b0:42:3f:9c:eb:25:
39:a8:98:37:09:eb:0e:42:27:8d:52:19:57:fe:f5:
ab:83:1d:c7:a9:c5:6e:3f:f3:c5:2d:5c:06:bc:22:
62:6a:30:7b:26:2f:43:2b:ae:17:57:dc:7c:12:13:
fb:8a:8f:da:2a:69:27:26:b1:aa:36:13:5c:ef:90:
cf:11:1a:f0:7a:cc:4c:59:ac:2b:c5:cb:55:5f:41:
46:02:03:79:ae:bb:34:01:34:04:47:9b:96:37:da:
44:fe:ce:76:93:85:ec:55:0c:b7:60:bc:53:5e:9c:
ad:77:6d:94:2d:5b:f0:4f:55:2c:4f:aa:1f:84:37:
29:11:23:6f:50:2e:a1:1d:d2:e3:47:bb:67:f5:29:
ee:a3:8a:0b:98:6f:e1:92:ab:a7:66:cf:c7:b2:4c:
04:bc:f0:31:73:cd:cd:c5:47:d1:72:12:ed:62:3f:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A6:51:27:2A:DE:33:22:3F:65:85:DC:5E:57:86:04:ED:7E:E0:81
X509v3 Authority Key Identifier:
keyid:D3:09:8E:5E:20:D7:8F:94:E6:96:C1:37:2B:56:23:FF:A7:1D:94:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5361cc-b04d-4465-938d-617a26327e98/1/0wmOXiDXj5TmlsE3K1Yj_6cdlNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5b:53:41:19:47:0b:ce:21:d2:8c:e9:15:19:9f:f3:d5:e9:
f4:33:9d:28:f0:a2:b5:79:b1:88:a4:df:e3:e1:d4:95:dd:00:
1f:32:ca:5f:1a:65:d0:30:77:98:d9:fe:cb:1a:50:7b:6c:01:
38:69:ba:d1:e8:96:35:27:ef:fe:38:63:e7:17:0d:32:12:2b:
b3:06:08:8f:54:b2:c1:fc:3b:c7:39:aa:7c:fb:4a:4d:2e:0f:
ce:33:70:3d:84:c0:11:9b:8c:19:f2:8f:aa:41:e5:f1:9e:a1:
9e:09:98:1a:e4:3b:3f:78:ae:11:df:99:c6:8e:95:b8:c2:f0:
70:93:5b:62:c8:ac:46:24:f4:63:32:c5:98:0c:0d:3b:81:1c:
75:46:b6:4d:3a:4b:bb:d7:17:59:d4:13:ab:de:a0:68:f5:8f:
3b:a9:73:5e:b2:59:b4:9d:c3:b7:1f:24:1c:b7:15:68:c3:94:
0e:d1:60:78:18:ad:26:6f:75:f6:0a:42:af:cf:bc:a9:ca:77:
d2:cb:e5:93:24:38:23:ab:8f:1e:92:a2:d4:60:4a:8c:41:2d:
a4:7a:47:76:44:07:5a:98:c8:ce:84:40:69:ce:38:c3:90:0e:
42:1c:6e:06:33:0e:49:ae:86:59:82:de:3e:c8:5f:9f:f1:ef:
2b:77:fc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:16 2025 by rpki-client