Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
File: oE_JgO38R54EauArEOVyRbuSyLc.mft (raw, json)
Hash identifier: qiN6tMn8cIy++POeHFcWKaDBfykClPWmewTqtQV4tO8=
Subject key identifier: 21:3C:B8:E2:96:24:1F:E2:4E:AE:3F:FF:EF:16:68:C2:31:4D:6C:3B
Authority key identifier: A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
Certificate issuer: /CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Certificate serial: 0194BC72E09F9CF37FDB30FE5F7FA8BAD884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
Manifest number: 042B
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: oE_JgO38R54EauArEOVyRbuSyLc.crl (hash: dzEu+YA2tinEFwTeUQ95yffyTMoidMVJ/ThALxANGf4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e0:9f:9c:f3:7f:db:30:fe:5f:7f:a8:ba:d8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04fc980edfc479e046ae02b10e57245bb92c8b7
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=213cb8e296241fe24eae3fffef1668c2314d6c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7c:be:83:90:cf:d3:67:ee:4d:2e:cd:89:2f:
a1:ea:bc:37:c8:79:3e:f8:a4:9f:f0:ff:6e:9f:75:
1e:9a:c3:6b:52:e9:41:07:64:8b:36:c3:5b:1f:58:
6c:2a:82:2a:1d:ba:d3:ca:55:dc:bb:80:91:4e:5c:
b1:f4:f6:1a:2a:6c:1b:3a:c5:3e:96:b6:35:db:e1:
43:10:1c:40:c1:91:e8:f4:26:9d:43:c4:17:da:6e:
06:fd:5a:38:b7:5d:0c:88:28:1f:d0:1f:67:27:f2:
c9:d1:8a:87:01:85:93:2d:3f:be:5b:da:6f:d4:6b:
d7:94:26:2d:0d:e2:19:c6:d0:4a:7a:fc:02:94:0b:
3d:04:91:1a:cc:26:1c:76:f1:72:24:8b:90:bf:ae:
ef:cc:c4:e1:e1:e6:31:84:90:b7:91:ad:10:81:a0:
ef:8a:34:de:36:da:86:7e:0d:3b:db:23:cd:47:bf:
82:03:c9:ec:1e:75:92:6c:c7:19:09:ce:01:b7:88:
ac:32:f7:74:e9:f8:b0:94:fd:d5:99:fd:4a:bc:2b:
ef:4b:1a:81:b6:90:37:72:c9:18:61:70:4b:32:73:
b7:e3:7b:47:47:4e:d1:b6:d4:16:04:a2:17:03:e8:
41:c1:db:2e:71:64:41:99:75:38:5e:6b:9d:c1:89:
ed:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3C:B8:E2:96:24:1F:E2:4E:AE:3F:FF:EF:16:68:C2:31:4D:6C:3B
X509v3 Authority Key Identifier:
keyid:A0:4F:C9:80:ED:FC:47:9E:04:6A:E0:2B:10:E5:72:45:BB:92:C8:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE_JgO38R54EauArEOVyRbuSyLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f55df1-0ba6-430f-809d-6b035cee1981/1/oE_JgO38R54EauArEOVyRbuSyLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bc:6a:cf:b7:d9:a2:e2:4f:ab:b3:13:db:ce:44:14:00:65:
30:75:65:dd:7e:49:d0:fd:48:52:73:b8:ea:2b:e2:18:34:41:
a3:f2:38:47:17:bf:d5:ad:f3:52:7d:e3:8e:ac:1d:b9:20:1f:
32:92:aa:52:02:49:4d:b2:59:ee:3f:ee:1a:71:b5:e6:34:e4:
ed:25:61:7c:93:b2:f1:7d:ea:86:c9:ff:70:2a:a7:d4:51:bc:
8e:c9:b8:95:fd:19:34:a8:cc:ac:b0:d5:7e:4b:b6:11:44:f0:
b0:e5:61:03:76:31:f8:96:9a:60:4a:eb:22:5e:8b:13:33:66:
d5:05:41:d9:3f:b7:3e:cc:f1:18:87:be:e5:77:58:72:5d:fd:
f0:c5:b7:0b:2d:0f:9c:9f:a7:e8:12:dc:67:ef:f1:4d:cb:f4:
26:38:18:b6:d8:ca:63:9a:d9:9c:99:a0:ab:69:57:6c:0e:f0:
36:bf:0c:aa:f8:1b:1d:0d:86:6c:05:9f:5d:58:14:73:12:55:
3f:70:ed:ad:8c:2c:26:fc:37:49:70:c0:49:1e:e7:3b:9a:bd:
a1:3f:e7:7b:08:ff:b7:17:2c:e5:28:4e:43:1a:61:f7:8f:38:
26:1c:4b:be:75:6d:48:ae:b6:b2:cb:05:58:aa:73:d9:cc:76:
b3:8e:80:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:46:33 2025 by rpki-client