Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/14917a-4911-4c3b-b2a7-27d5ace0307f/1/OBssWXKaU7hBEqryyhIo80JHo5s.mft
File: OBssWXKaU7hBEqryyhIo80JHo5s.mft (raw, json)
Hash identifier: dyF1PrwPoDbMRWDMjhJiIFp23OgEFh4TVQY0GwPHB/g=
Subject key identifier: 56:60:C4:B4:83:F1:F0:22:03:BA:FD:A5:9D:BD:AD:F6:1A:03:54:50
Authority key identifier: 38:1B:2C:59:72:9A:53:B8:41:12:AA:F2:CA:12:28:F3:42:47:A3:9B
Certificate issuer: /CN=381b2c59729a53b84112aaf2ca1228f34247a39b
Certificate serial: 0194BBCEA05944460C2CA8EF924D7F50461B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBssWXKaU7hBEqryyhIo80JHo5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/14917a-4911-4c3b-b2a7-27d5ace0307f/1/OBssWXKaU7hBEqryyhIo80JHo5s.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: OBssWXKaU7hBEqryyhIo80JHo5s.crl (hash: 3Tz/EiJeFpCoYiNuSj7c1qfWhtUv3BzitZCdjIgj/Nc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a0:59:44:46:0c:2c:a8:ef:92:4d:7f:50:46:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=381b2c59729a53b84112aaf2ca1228f34247a39b
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=5660c4b483f1f02203bafda59dbdadf61a035450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fa:f4:dc:a4:4a:c3:1f:96:1f:6a:e0:3e:23:
dd:fd:8c:be:70:5e:45:a0:f9:fd:2d:ad:fd:ab:73:
db:48:0a:db:0d:ea:c4:af:35:f0:f7:3c:ea:b0:80:
1b:15:ee:43:37:99:aa:6b:04:67:0a:86:67:c0:23:
d8:40:bb:32:09:2a:71:37:5a:ad:43:55:be:66:e9:
d7:7e:83:03:e1:0c:63:f0:09:82:09:b4:d5:ab:9b:
f9:06:9e:7d:e1:6e:a1:61:55:c1:68:52:18:33:6a:
bf:bb:f4:f6:75:12:f1:76:71:14:12:c4:b6:ef:e5:
27:b8:4e:05:16:55:93:b8:9a:6e:24:5a:90:af:20:
51:a6:55:13:7d:e0:75:11:fd:b8:b1:e5:f2:bc:63:
d6:8f:22:dd:6e:17:35:42:4c:77:35:5b:dc:fa:56:
fa:35:ec:6b:60:4d:ac:8c:26:2a:5a:c5:ab:76:88:
8b:aa:3d:44:ab:6a:7c:3a:2b:4f:70:4e:84:2a:5e:
ed:bd:ec:76:c4:2d:50:12:11:64:cf:62:a1:ec:06:
62:57:92:32:21:b1:90:3e:65:92:09:a8:05:85:11:
e3:73:71:73:54:48:d6:42:02:69:92:b8:b6:69:62:
13:63:41:60:77:4e:3d:5a:8b:a9:09:77:6f:e0:b6:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:60:C4:B4:83:F1:F0:22:03:BA:FD:A5:9D:BD:AD:F6:1A:03:54:50
X509v3 Authority Key Identifier:
keyid:38:1B:2C:59:72:9A:53:B8:41:12:AA:F2:CA:12:28:F3:42:47:A3:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBssWXKaU7hBEqryyhIo80JHo5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/14917a-4911-4c3b-b2a7-27d5ace0307f/1/OBssWXKaU7hBEqryyhIo80JHo5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/14917a-4911-4c3b-b2a7-27d5ace0307f/1/OBssWXKaU7hBEqryyhIo80JHo5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:97:91:6c:f0:f8:8b:af:e6:32:6f:14:75:ca:20:82:ec:39:
7c:ed:6c:95:c8:17:15:7e:d5:56:83:d4:87:e7:cd:3b:89:64:
d1:3d:48:1a:16:20:2a:f0:1c:ef:f2:78:21:05:b7:60:27:07:
6b:6b:1f:42:45:0d:29:2e:8e:c2:91:75:8a:c4:29:fd:b2:2f:
47:1b:4b:c1:26:52:63:00:2c:e1:10:7d:fa:2f:ea:85:b1:98:
e4:0b:02:2b:1c:fa:87:22:30:23:fa:6f:c2:7e:4e:00:69:f4:
b6:e9:15:a2:3b:4b:2f:4b:79:17:4a:0a:8d:c4:df:d3:ab:a8:
fc:81:01:b6:7c:d1:b0:29:30:be:fd:1d:79:7f:3c:f5:35:19:
a5:79:50:a9:c0:8a:be:21:b0:4d:6c:44:04:74:fb:52:d8:19:
ca:fc:54:25:cb:f8:37:b2:e0:f8:83:f1:6b:91:f6:de:30:6e:
67:cb:24:db:51:20:8a:a7:82:89:c5:80:3d:31:cd:e5:98:1f:
e3:f8:fa:b1:fc:73:4b:ae:40:d6:0e:66:93:cb:24:ae:ce:6e:
4b:e5:61:51:d4:03:63:6c:09:aa:19:bd:6f:51:85:26:5c:75:
f3:49:e0:18:18:35:4b:70:d0:26:6a:e0:9b:07:09:32:2d:b8:
13:3b:1f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:17 2025 by rpki-client