Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
File: oyHD8vYVgRDoDpLioyIdaVwnp9g.mft (raw, json)
Hash identifier: HODTKTUCBkEa++uS+mz37CMRASEnC87uFY3XzwNsKEw=
Subject key identifier: 1C:8F:66:18:23:DE:C8:97:8B:7F:DB:3F:57:02:EF:0B:58:FA:13:FF
Authority key identifier: A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8
Certificate issuer: /CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8
Certificate serial: 0194BBCE0F4895DE9EAA85A7995A2FA0661E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
Manifest number: 0CCE
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: oyHD8vYVgRDoDpLioyIdaVwnp9g.crl (hash: 3mqu08+VRNDPw0A1d5BwXBnJUdt3aQOSip2Sf0LYiOQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0f:48:95:de:9e:aa:85:a7:99:5a:2f:a0:66:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a321c3f2f6158110e80e92e2a3221d695c27a7d8
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=1c8f661823dec8978b7fdb3f5702ef0b58fa13ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:5e:e9:c2:54:2a:b6:6b:46:12:89:fc:c7:
cf:86:d1:c7:ad:6e:4c:59:05:7f:d7:7e:9d:94:e3:
c1:e5:84:9e:e8:6e:3c:af:ba:78:60:03:a1:3c:98:
e7:be:06:79:0d:76:39:c0:b3:ea:2c:03:69:ac:ab:
2f:f4:36:70:d5:2c:a6:e3:a0:1f:2a:3a:4b:9a:aa:
68:53:40:59:05:00:4a:f6:c0:56:eb:e2:54:74:9b:
99:a4:9d:65:98:c5:6a:be:cc:7a:af:66:5f:55:ac:
b4:b2:ad:db:d0:f7:51:9a:fb:2b:e7:d3:46:f8:67:
ca:5a:cd:47:07:bb:a3:cb:f2:1a:90:e2:fd:7e:5b:
6d:09:c0:20:29:70:25:3d:ba:31:b7:86:05:d5:39:
db:58:9a:2b:ad:b0:de:bb:4a:3e:1f:ba:80:f6:43:
b3:c0:92:ee:de:3c:b4:4c:9d:8d:3e:0f:cb:b9:2a:
42:75:06:04:25:f7:74:30:69:34:93:dd:0c:93:21:
ba:3c:2a:2f:55:ef:b9:ae:5e:40:e1:a7:fc:2a:00:
07:08:f7:ad:ff:9c:97:50:e4:eb:d9:ae:7e:21:a8:
6c:a1:16:a5:0b:02:0a:36:c5:ff:ca:1e:75:0e:3a:
41:13:d6:9c:90:5e:25:2e:6d:e7:3c:c5:b0:33:3f:
ae:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8F:66:18:23:DE:C8:97:8B:7F:DB:3F:57:02:EF:0B:58:FA:13:FF
X509v3 Authority Key Identifier:
keyid:A3:21:C3:F2:F6:15:81:10:E8:0E:92:E2:A3:22:1D:69:5C:27:A7:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyHD8vYVgRDoDpLioyIdaVwnp9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/7d3a55-ccb7-4d0c-bd26-cff461e0df34/1/oyHD8vYVgRDoDpLioyIdaVwnp9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b1:ec:9e:f4:05:12:a9:75:ce:c1:50:02:e6:f7:7e:8a:ee:
a1:04:97:3f:f9:ff:a7:ac:f7:f4:ea:a2:6b:67:d0:a0:3c:bd:
59:39:a4:16:3e:97:49:8b:f0:36:81:79:c6:24:e6:91:84:21:
31:9e:c4:0b:1c:32:08:d4:be:ea:50:1a:c9:d6:02:49:61:3a:
74:61:84:bb:3c:e2:73:28:e5:ab:cf:22:2f:ef:25:dd:f8:9b:
f3:d4:24:9e:ce:82:cd:6e:e9:6c:12:a7:14:89:54:67:a2:11:
1b:fc:50:da:e5:47:e9:fc:83:f8:0b:74:fd:54:10:8b:18:d1:
a7:ee:78:05:3b:29:17:ce:6d:57:ed:e3:d0:e9:6d:cd:a4:73:
9c:0e:7e:44:11:c6:51:96:95:13:ec:cc:0c:1f:88:3d:52:f0:
4b:89:58:25:b6:83:bd:88:ae:36:fc:dc:02:e5:6a:cf:d9:a7:
f3:52:05:47:5f:61:21:df:02:1f:b2:18:72:78:55:85:51:db:
ba:c0:cb:a4:5c:1b:54:77:82:ef:d6:3f:19:51:39:b3:e8:5e:
9f:3c:01:84:ce:0d:79:e3:30:a4:87:ab:73:23:09:40:9e:7d:
60:19:aa:ad:5c:fe:10:6e:f9:23:89:ca:98:95:f3:e9:c3:b9:
e1:20:61:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:42 2025 by rpki-client