Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5704f7-7e49-4701-9ea5-6a806c88f852/1/OuEFRh8GXOSxt7YPYU4-K__j__M.mft
File: OuEFRh8GXOSxt7YPYU4-K__j__M.mft (raw, json)
Hash identifier: ar8Kn0LGNKNKmhRUCmjM0iVsIJoI/EHGU4aex5FMJVY=
Subject key identifier: C6:FB:06:11:29:0E:BC:47:DD:24:5A:19:26:36:B2:8B:75:43:CA:56
Authority key identifier: 3A:E1:05:46:1F:06:5C:E4:B1:B7:B6:0F:61:4E:3E:2B:FF:E3:FF:F3
Certificate issuer: /CN=3ae105461f065ce4b1b7b60f614e3e2bffe3fff3
Certificate serial: 0194BBCEBA551784BD093A6AAA40504243F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuEFRh8GXOSxt7YPYU4-K__j__M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5704f7-7e49-4701-9ea5-6a806c88f852/1/OuEFRh8GXOSxt7YPYU4-K__j__M.mft
Manifest number: 0BAB
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: OuEFRh8GXOSxt7YPYU4-K__j__M.crl (hash: S9LYSDuO+O3Kyz0YFsZwc+qnphI/bcdnpp4X+jXWbYk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ba:55:17:84:bd:09:3a:6a:aa:40:50:42:43:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae105461f065ce4b1b7b60f614e3e2bffe3fff3
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=c6fb0611290ebc47dd245a192636b28b7543ca56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b6:6f:5d:9a:d0:83:3a:5b:52:4b:a7:1a:9a:
d3:62:d9:2f:c2:3c:62:4d:5d:b7:ea:75:ae:52:7b:
68:75:dc:92:02:17:14:38:6a:cb:5c:38:c9:7c:4d:
f7:55:d2:30:66:31:64:27:34:03:2b:be:ab:ce:8b:
85:19:3b:e0:e9:ae:32:ba:96:bc:ef:6a:ac:00:bf:
4e:77:e4:7b:4b:7a:8b:f3:87:00:01:a9:42:f8:ae:
04:30:ad:7f:79:79:9f:90:a5:d9:2b:f6:67:f4:d3:
94:f5:15:4b:71:6b:3d:b1:98:1c:05:15:17:72:dd:
1e:32:d1:b9:c4:7f:34:16:67:88:e2:97:b7:12:a6:
51:4d:ff:dc:e5:db:32:77:79:ad:2c:76:25:3a:ff:
09:aa:68:82:e4:63:34:c9:eb:9a:81:8a:a6:c3:85:
26:27:2b:e5:7a:4d:5d:ab:b8:55:b5:94:bc:40:fd:
20:24:bc:c9:72:e4:4e:84:db:c9:16:d3:ee:44:76:
84:5a:b9:98:c4:78:78:73:d4:1e:10:08:37:62:6d:
76:76:05:42:cd:0e:87:dc:3a:78:8f:80:e4:f4:3b:
5e:ab:29:e6:3e:41:8a:92:fa:17:64:53:1a:cd:21:
58:30:10:06:4c:5a:95:12:6f:f7:2f:ae:85:58:dd:
ac:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:FB:06:11:29:0E:BC:47:DD:24:5A:19:26:36:B2:8B:75:43:CA:56
X509v3 Authority Key Identifier:
keyid:3A:E1:05:46:1F:06:5C:E4:B1:B7:B6:0F:61:4E:3E:2B:FF:E3:FF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuEFRh8GXOSxt7YPYU4-K__j__M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5704f7-7e49-4701-9ea5-6a806c88f852/1/OuEFRh8GXOSxt7YPYU4-K__j__M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5704f7-7e49-4701-9ea5-6a806c88f852/1/OuEFRh8GXOSxt7YPYU4-K__j__M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a5:ed:6f:5d:fc:b0:3f:13:a0:a0:c5:16:ee:87:1a:59:c6:
9a:d4:82:d2:fb:dd:21:6f:24:36:31:03:5d:97:37:db:53:c6:
72:7e:8d:b5:63:c4:b2:a2:68:35:00:bd:99:d9:f7:39:ca:23:
1e:87:62:f2:c1:f8:14:cb:db:f9:29:9c:6a:64:3f:ad:18:77:
dc:08:52:5d:e4:73:33:54:e4:51:23:84:c2:8f:e2:d3:c5:ba:
4f:67:bd:ea:e4:2e:71:d8:37:4c:6d:f4:18:cb:36:9f:c4:49:
94:8e:3e:fd:2b:92:18:b9:fd:9c:e0:bb:5c:e7:77:24:5d:7f:
2d:8d:ea:88:e4:60:81:b8:3c:08:55:43:03:62:2f:9d:96:77:
c1:95:19:58:94:8f:22:40:fa:5e:20:8e:db:8e:5f:09:4b:19:
d9:eb:c0:36:4c:97:6f:bc:32:50:81:5a:2c:4a:d9:98:e8:6b:
26:9e:c8:94:da:34:6d:d4:8f:a6:18:cf:00:e8:ea:5d:8e:a1:
3d:99:ea:82:d1:a8:e5:9e:9f:82:d9:fe:af:0d:5b:94:f8:20:
39:bc:18:e1:14:f6:19:d8:e6:d9:5d:7a:bd:bf:45:70:91:f1:
78:0b:8d:45:cf:6f:1a:b1:53:59:6c:13:85:56:35:9b:c6:6e:
08:0d:f6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:49 2025 by rpki-client