Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
File: OFYFj7mk9--XizgCGuFSwk6_zkA.mft (raw, json)
Hash identifier: iLQIZ4CrctAVb8xHwZ5AX36+iYEdxU2EX7ZhPXQhEvA=
Subject key identifier: D3:B8:3B:F8:4E:8A:21:C7:D7:B0:7E:79:AF:86:BD:94:77:3C:AA:CC
Authority key identifier: 38:56:05:8F:B9:A4:F7:EF:97:8B:38:02:1A:E1:52:C2:4E:BF:CE:40
Certificate issuer: /CN=3856058fb9a4f7ef978b38021ae152c24ebfce40
Certificate serial: 0194BC049F437EB1357B355D614D8C1838AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFYFj7mk9--XizgCGuFSwk6_zkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
Manifest number: 0130
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: OFYFj7mk9--XizgCGuFSwk6_zkA.crl (hash: fUEDzWb9868V4prULZ4BxHct27yvjqoohyJp4+m6sLY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:9f:43:7e:b1:35:7b:35:5d:61:4d:8c:18:38:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3856058fb9a4f7ef978b38021ae152c24ebfce40
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=d3b83bf84e8a21c7d7b07e79af86bd94773caacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:53:c8:59:bf:23:fc:3c:81:88:5a:63:3d:
dc:2e:8b:89:ea:02:39:fd:ea:1c:f9:86:f6:7f:9a:
a5:ce:a4:c5:9c:3f:20:37:e6:b0:22:da:da:75:e3:
3b:e6:0e:f5:0c:9a:6c:61:84:b6:58:af:a5:a8:4d:
24:ee:ff:8a:5a:6a:eb:b9:4b:e3:c1:06:08:c1:ed:
97:d2:07:4b:89:9d:9e:04:05:a6:03:da:63:5b:d2:
a5:de:86:87:1d:e9:26:50:3b:89:d1:4d:22:e6:54:
a2:06:fd:af:72:8b:27:d2:74:35:ef:f9:21:a3:12:
86:84:85:5f:a0:36:cc:88:2f:41:d9:fb:58:16:bb:
5a:73:08:ba:c3:16:72:0f:60:77:40:fb:fb:7e:83:
bb:9d:03:bd:25:1e:a1:ef:c7:68:b0:43:d6:d7:17:
47:b0:fb:cf:18:70:47:f1:1e:c8:dc:41:e0:0c:96:
33:a8:42:4b:73:92:8c:fc:8d:28:97:df:1d:39:cb:
8a:f1:f9:20:ce:9a:21:ec:d5:4d:af:d0:24:73:9a:
4a:e5:ac:1c:b1:dd:de:d2:d5:e0:0d:b8:e0:11:a9:
d3:2a:e4:68:dc:29:c4:4d:13:63:a9:9e:92:94:d8:
0a:2f:e8:66:5f:d0:57:e7:34:d0:c6:98:2b:e0:f5:
6a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B8:3B:F8:4E:8A:21:C7:D7:B0:7E:79:AF:86:BD:94:77:3C:AA:CC
X509v3 Authority Key Identifier:
keyid:38:56:05:8F:B9:A4:F7:EF:97:8B:38:02:1A:E1:52:C2:4E:BF:CE:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFYFj7mk9--XizgCGuFSwk6_zkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2094b0-5a57-4a36-b5fb-a5ff176d61d0/1/OFYFj7mk9--XizgCGuFSwk6_zkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ed:d1:d3:14:06:99:d7:18:c1:58:f8:34:51:9b:7a:64:18:
f1:fd:c7:67:ff:f9:92:9f:82:90:c8:85:e3:44:a7:8f:a9:46:
36:19:61:4f:fc:2e:1d:ce:27:9a:0c:2d:b1:f3:8e:a3:ce:47:
9c:73:38:4f:14:b9:7d:c4:8a:4f:5d:f3:c0:44:9b:74:88:d8:
da:73:8e:80:3f:03:e3:c7:12:f7:19:37:a4:19:f1:b0:5a:f3:
23:a8:46:ce:38:5a:7a:22:60:1b:cf:5a:dc:73:a4:b2:99:3c:
e7:02:ab:00:4f:a9:84:29:7c:a8:31:45:f3:de:e7:fd:f8:31:
55:a4:99:e5:a0:1f:e6:de:1c:9d:a4:ee:ca:63:bd:64:8f:be:
fc:7c:22:7c:e4:2d:05:47:26:4e:b5:f1:3c:b8:a1:e2:77:64:
4d:66:9a:8f:d3:4b:61:4c:d5:36:d4:5b:7b:37:c9:31:06:4f:
70:a2:5e:50:f4:77:ae:58:38:d4:58:05:e8:8c:ea:58:25:6e:
da:15:99:61:87:38:d2:e8:24:ef:2d:2f:62:5a:31:a8:20:78:
36:48:96:87:ae:6e:f1:ff:0f:80:bd:8e:ac:61:08:98:f8:1b:
68:5a:e6:67:ad:ff:d6:c7:b0:df:15:4e:4b:69:4d:b9:76:c3:
79:1a:f7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:45 2025 by rpki-client