Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
File: _oN5mWfs0ExTYUie5M-gmM5DaHE.mft (raw, json)
Hash identifier: 3Tyqz1gdOkMEGJ8LuafRVsQo2j1dtXTcEB82lrf8+IY=
Subject key identifier: 8F:B2:77:26:63:3E:01:67:70:AA:55:8B:74:C6:0C:CE:2E:C8:E3:42
Authority key identifier: FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71
Certificate issuer: /CN=fe83799967ecd04c5361489ee4cfa098ce436871
Certificate serial: 0194BBCEC93CBB9594D616E2C036A9BB7C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: _oN5mWfs0ExTYUie5M-gmM5DaHE.crl (hash: OyVgbsRQKIsL/xK9MWSsYxeGUxsX6nDOjtT+hqv8p28=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c9:3c:bb:95:94:d6:16:e2:c0:36:a9:bb:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe83799967ecd04c5361489ee4cfa098ce436871
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=8fb27726633e016770aa558b74c60cce2ec8e342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:a9:7e:5e:55:a6:00:bf:81:d0:59:a3:8c:
38:e8:51:ff:a6:7d:07:d6:32:b5:0b:d9:ff:56:51:
9b:5c:59:e0:32:a4:6b:a9:71:1c:79:26:4c:dd:bf:
48:e8:4d:4b:4b:1d:ef:ab:7e:67:1e:64:04:3f:87:
bb:5b:dc:ab:b4:c7:f9:ba:05:82:6c:4a:41:5e:92:
f1:a7:e6:56:b5:b7:6f:bd:9f:a6:fd:b1:1e:bd:00:
08:71:1f:31:7e:7e:5e:72:0b:0e:e8:63:da:8b:af:
bf:d6:9a:4a:ed:5a:bb:e4:97:a3:f4:37:d4:54:d5:
e3:0d:52:e8:ba:bc:69:59:d3:05:34:e3:a4:97:bd:
52:c7:bd:7a:8e:e7:70:7d:c5:2c:ee:f1:63:75:ce:
59:21:da:60:7f:ac:68:81:99:b3:b4:df:2c:f9:1f:
5c:ca:af:6a:7d:0b:b5:c8:08:65:c6:b6:f9:c1:bd:
36:f7:8c:ac:96:2c:ac:52:2b:8f:86:17:77:03:1b:
63:5f:de:1b:93:3d:21:6c:41:5b:35:93:ad:0d:c2:
fc:28:0d:da:08:4b:55:ac:7b:85:98:b6:ab:2e:8c:
7c:e9:c8:20:43:85:ab:b1:10:ab:59:93:f9:84:85:
dd:c7:3c:e3:37:d4:98:fe:c5:e7:b2:90:c0:a2:ef:
bd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B2:77:26:63:3E:01:67:70:AA:55:8B:74:C6:0C:CE:2E:C8:E3:42
X509v3 Authority Key Identifier:
keyid:FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:20:d1:16:f7:3e:2b:fe:57:51:7c:74:10:1b:39:a8:13:a0:
e6:a0:e3:cb:8b:8a:0a:e9:95:62:f5:9e:69:fc:9c:34:7b:fd:
bc:6a:e9:52:b7:a0:b2:ec:75:68:b4:60:2f:ac:fc:73:92:bf:
36:9c:f6:3f:b2:01:b0:7f:57:ec:25:7e:5f:7d:68:a1:65:4e:
a4:c3:e3:35:e2:e6:0c:b0:23:4f:a2:36:8e:03:07:41:d9:97:
78:dc:3a:ab:d1:fa:ca:fb:8d:e4:a8:90:17:77:b9:0a:67:02:
61:f5:d2:e1:f4:e4:5c:4b:d3:21:1e:08:83:21:b9:32:47:12:
6d:4f:e3:d8:4f:c4:e2:10:2f:15:20:1c:0d:76:5a:49:a2:ea:
e1:2b:f7:fa:bb:a1:1c:bf:55:8f:e9:c1:f9:3e:47:45:a7:a6:
71:cf:b4:ca:c2:6d:41:ff:a7:ab:9d:93:ab:7d:9a:cf:a4:ed:
90:91:11:bc:71:7c:e7:12:35:f5:2a:da:f4:77:9d:12:42:bf:
55:26:b6:42:b1:75:93:64:aa:3e:82:f4:aa:bb:c8:f5:fe:93:
b5:35:01:54:a9:99:f7:54:67:0b:c8:e4:56:ab:7d:34:54:26:
79:ce:97:e5:bb:de:3a:41:e2:21:1f:22:e7:c1:3a:be:8d:9e:
5c:9c:51:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:40 2025 by rpki-client