Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
File: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft (raw, json)
Hash identifier: eclmRM8riWaoPEiEHDvOPOwUuw2XjJ80Es4V6pmd5nA=
Subject key identifier: 84:72:D9:B1:9F:91:E6:2F:CD:39:22:1A:25:69:A0:AE:D8:26:B9:9D
Authority key identifier: 3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
Certificate issuer: /CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Certificate serial: 0194BC3C7369203EBC367EEF82630B102EE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:01:05 +0000
Manifest this update: Fri 31 Jan 2025 12:01:05 +0000
Manifest next update: Sat 01 Feb 2025 12:01:05 +0000
Files and hashes: 1: O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl (hash: pUWSdJlpzEx/29lfagoEpmXq09Dg3e4eet0QZrzWmP8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:73:69:20:3e:bc:36:7e:ef:82:63:0b:10:2e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdcd18f334c87a5b57dd787ec3274355f9d5894
Validity
Not Before: Jan 31 12:01:05 2025 GMT
Not After : Feb 1 12:01:05 2025 GMT
Subject: CN=8472d9b19f91e62fcd39221a2569a0aed826b99d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:10:e4:61:d8:19:62:5e:2f:c3:aa:3e:64:b6:
82:34:ee:66:bb:4c:3e:3b:96:27:c7:1a:7c:08:0f:
62:64:1b:29:5b:87:dd:74:02:82:dc:10:34:91:d0:
c0:2f:77:fa:c9:03:10:37:61:fb:fd:37:3d:f3:16:
b0:c4:9f:7e:e2:18:f8:25:b5:5d:f7:3c:94:ec:ef:
24:b0:a6:bc:2f:97:92:cd:e7:03:54:ca:6d:4c:e8:
f9:8f:00:db:9c:57:51:45:a9:26:5a:13:59:36:5e:
cd:f4:77:8a:2e:9d:b7:5c:5a:f2:63:9f:eb:9c:48:
4b:3a:2f:db:2c:f8:53:c8:f3:eb:c6:f1:72:1a:b0:
4a:20:64:1c:00:9b:16:02:b2:1e:9a:47:29:38:d5:
7a:5b:78:6c:fa:f2:ed:a7:dd:54:71:7a:c6:ce:0c:
85:cd:d4:1a:1e:2b:44:39:f4:1d:f6:e6:38:db:d8:
27:ba:62:0d:a6:75:47:56:f5:67:2b:74:64:3f:6f:
b8:b8:d8:5a:99:4a:40:82:6f:d5:c9:19:4c:22:af:
98:0d:30:6c:8d:7f:34:59:f8:db:c7:a0:84:38:1a:
a6:be:7c:d0:94:ac:df:52:49:d5:45:21:5d:91:98:
72:8a:17:09:12:af:3f:c7:ce:6d:fc:e1:9e:c6:e9:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:72:D9:B1:9F:91:E6:2F:CD:39:22:1A:25:69:A0:AE:D8:26:B9:9D
X509v3 Authority Key Identifier:
keyid:3B:DC:D1:8F:33:4C:87:A5:B5:7D:D7:87:EC:32:74:35:5F:9D:58:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/db3ad9-01ee-4a49-b7ea-79c41ac9b6f8/1/O9zRjzNMh6W1fdeH7DJ0NV-dWJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e6:97:cc:c7:8c:0c:75:a1:c1:86:c3:c3:14:54:3f:62:a3:
7d:48:ab:51:37:6f:d6:8b:b5:f4:e2:10:16:a1:b0:7b:b5:58:
c6:91:76:7e:54:7e:0d:56:42:46:fa:01:5a:c1:14:f5:1d:25:
45:7f:66:dc:32:d8:37:b6:c9:a8:9b:8f:c6:55:b8:87:7c:e2:
3d:61:f2:6f:1e:40:ff:95:fb:29:d7:c7:ea:b3:25:ba:5d:6f:
f4:c5:b6:26:39:81:0e:12:81:1b:d0:23:5b:d1:48:d2:9d:c9:
37:d8:36:ce:1a:77:a7:9f:c7:85:4e:14:35:a2:53:96:f9:ae:
a1:35:06:a1:d3:bc:bb:56:85:39:1b:15:de:57:cf:ce:f5:37:
5e:c4:1a:5a:5d:9d:74:0d:72:0b:dc:45:21:1a:4f:71:c9:f9:
0c:36:52:dd:ed:04:b7:b8:12:f2:7b:a7:ee:c2:b5:31:2a:e3:
9b:2f:d0:d1:5e:06:d2:56:f5:c8:4a:8d:5a:87:fb:bd:49:c0:
e9:02:38:5d:86:b9:37:4d:83:9d:77:73:8a:96:ac:02:d0:18:
a8:c0:e4:cd:cb:4a:b4:7e:16:0e:87:7f:00:e4:f2:9c:d8:1c:
8f:84:64:0d:f1:82:29:69:ca:6d:04:6d:ee:02:ac:a9:30:2a:
d6:cb:9a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:09 2025 by rpki-client