Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
File: o8B3uDdyoALVxPi5IY7A3H8EDL8.mft (raw, json)
Hash identifier: ce64I41fmz3MdH2o4bKtDsep9bq82Dw2E4epwyTjMPw=
Subject key identifier: C8:07:F8:37:C5:F1:4F:2D:B2:99:9A:B5:3F:E3:AF:3D:CB:88:91:85
Authority key identifier: A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
Certificate issuer: /CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Certificate serial: 0194BCA96A56BE056D15C4EF40EEBFCADB1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:06 +0000
Manifest this update: Fri 31 Jan 2025 14:00:06 +0000
Manifest next update: Sat 01 Feb 2025 14:00:06 +0000
Files and hashes: 1: o8B3uDdyoALVxPi5IY7A3H8EDL8.crl (hash: Lzw/hdu8w5jFOcZQSi8WgO/lY1wWLLXT4amnv0eOAuw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6a:56:be:05:6d:15:c4:ef:40:ee:bf:ca:db:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c077b83772a002d5c4f8b9218ec0dc7f040cbf
Validity
Not Before: Jan 31 14:00:06 2025 GMT
Not After : Feb 1 14:00:06 2025 GMT
Subject: CN=c807f837c5f14f2db2999ab53fe3af3dcb889185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:69:43:08:42:60:a6:6e:dc:84:60:26:cb:
fd:64:64:82:6c:ca:69:4c:a5:45:aa:ad:85:5e:1c:
ac:72:3f:62:88:52:da:69:6b:7f:7d:d3:17:7a:bd:
a8:4c:ed:e6:91:c1:2d:5d:ea:f9:94:f3:15:c6:2c:
8c:d6:c5:87:ee:60:d3:3f:e3:61:37:4b:8f:1a:1b:
2d:f2:74:50:f0:07:9c:54:42:81:4b:26:8c:bd:8b:
2c:2d:2d:5e:bc:12:ea:fd:89:42:3e:c2:db:01:21:
88:c3:4a:c7:a4:47:95:2f:32:02:02:d1:f8:c7:37:
17:a1:43:8c:01:f1:a4:5f:3c:d8:41:66:b8:0a:47:
47:24:43:3f:fa:11:fc:c1:ff:e5:02:3b:c5:69:ec:
92:66:f5:a8:90:bf:16:7b:e3:4d:3a:b4:14:e3:0c:
03:67:a8:ff:08:cb:5f:70:45:c9:d0:ff:91:f7:0b:
82:26:95:5e:b6:a8:76:49:db:d6:c5:c2:c4:ff:51:
b3:49:00:03:46:37:b4:f9:64:5c:d4:49:4a:7e:77:
3e:cf:d1:4f:81:8f:17:f2:45:5d:20:2e:76:f5:38:
b3:1d:de:2d:38:d6:5c:86:88:cf:59:bf:a1:a5:32:
bf:57:40:21:02:92:55:d9:c0:a3:fe:2c:c7:11:e2:
5d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:07:F8:37:C5:F1:4F:2D:B2:99:9A:B5:3F:E3:AF:3D:CB:88:91:85
X509v3 Authority Key Identifier:
keyid:A3:C0:77:B8:37:72:A0:02:D5:C4:F8:B9:21:8E:C0:DC:7F:04:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8B3uDdyoALVxPi5IY7A3H8EDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fceb02-b0f1-4917-85c2-706ab3e83d1d/1/o8B3uDdyoALVxPi5IY7A3H8EDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:87:b5:e8:96:9f:b7:43:53:27:3e:1a:be:51:e3:ef:44:a9:
62:d3:86:64:e4:cf:5a:58:4b:0d:a6:6c:0e:5e:66:63:86:34:
cd:06:8b:27:43:65:6d:96:21:0d:c0:28:41:8b:b7:e0:db:70:
a3:84:89:04:67:38:3c:46:ab:bb:e1:71:f7:2f:3b:16:2d:d7:
5c:a8:a2:a3:4b:df:a4:34:7b:5b:4e:34:ad:c9:9d:7a:40:6b:
1b:c9:25:e2:b2:4a:27:d0:28:66:4d:f8:69:d9:0f:71:54:31:
0b:d9:2b:b4:bc:f2:d3:e4:45:b2:d5:ce:ea:e7:2b:b5:73:56:
3d:c9:a9:ff:66:43:c1:65:53:64:08:7d:2a:14:fd:2d:4e:54:
fa:49:ad:b1:5c:f3:d7:9e:7e:be:92:cc:aa:64:15:8c:4d:7a:
b6:05:5d:51:d0:1a:24:55:64:9b:81:9a:05:ac:e3:64:6c:3d:
bf:b8:05:2f:8d:2b:f7:1d:22:50:ee:03:f0:c1:48:27:31:6a:
bf:e9:a4:9d:2a:70:70:13:94:3d:58:d9:f1:b1:be:1b:db:2f:
4b:3d:fb:69:f9:fe:40:a6:fd:96:60:c4:a3:6a:d2:f6:13:ff:
18:98:4f:5e:a3:b3:f5:25:33:25:2b:5a:56:2f:1a:69:0d:88:
b8:74:bf:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:11 2025 by rpki-client