Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/608ede-09ae-4811-b109-e797b2d82b39/1/O5keroXFJmJwwx30GBqgerLge1Q.mft
File: O5keroXFJmJwwx30GBqgerLge1Q.mft (raw, json)
Hash identifier: dN5/3ZC1S7/UviKsGAWHA2rXILnrJojk5lj9HjfYoSc=
Subject key identifier: 33:7A:E8:8B:24:65:7A:40:67:CC:40:F9:14:95:9C:69:CD:AC:37:59
Authority key identifier: 3B:99:1E:AE:85:C5:26:62:70:C3:1D:F4:18:1A:A0:7A:B2:E0:7B:54
Certificate issuer: /CN=3b991eae85c5266270c31df4181aa07ab2e07b54
Certificate serial: 0194BBCE1311AD9E7AF3C813CFDCAFCB6C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5keroXFJmJwwx30GBqgerLge1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/608ede-09ae-4811-b109-e797b2d82b39/1/O5keroXFJmJwwx30GBqgerLge1Q.mft
Manifest number: 05BB
Signing time: Fri 31 Jan 2025 10:00:32 +0000
Manifest this update: Fri 31 Jan 2025 10:00:32 +0000
Manifest next update: Sat 01 Feb 2025 10:00:32 +0000
Files and hashes: 1: O5keroXFJmJwwx30GBqgerLge1Q.crl (hash: b2gxjqpZfwoXNhTVAHe0VMQNFcMlwkUCodc5sAHE6ZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:13:11:ad:9e:7a:f3:c8:13:cf:dc:af:cb:6c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b991eae85c5266270c31df4181aa07ab2e07b54
Validity
Not Before: Jan 31 10:00:32 2025 GMT
Not After : Feb 1 10:00:32 2025 GMT
Subject: CN=337ae88b24657a4067cc40f914959c69cdac3759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:d1:fb:55:a1:dc:7e:36:22:5a:0b:8a:ca:
68:c9:a1:3d:02:f4:a1:42:93:4e:2c:58:82:19:e5:
f6:59:ab:1e:63:8c:78:d1:2a:a8:42:37:97:cb:57:
9b:d2:f5:53:fe:88:30:52:35:f0:7b:1e:9f:38:95:
2b:2c:a3:65:54:9a:0f:b1:c2:f4:96:1d:cb:fb:01:
36:dd:c4:5c:19:84:72:c2:b1:fd:51:af:37:74:55:
93:a1:da:6a:fd:fb:cc:85:29:d9:20:ef:f7:7e:5c:
51:23:71:9f:55:a7:c5:67:38:47:83:9c:f4:3f:0c:
77:29:47:b4:23:86:44:14:aa:4f:8a:cb:fd:fa:b1:
a0:cc:77:2c:3d:69:65:16:e3:2e:16:d9:b5:d5:0f:
e9:93:49:25:e1:25:31:56:43:3f:b1:28:7c:4a:cc:
8d:79:29:c1:74:6a:8d:c8:47:bf:cb:af:4b:aa:84:
96:fa:73:41:3f:45:76:ba:24:c2:87:d4:7f:3b:be:
00:3b:67:8f:e9:eb:16:cc:5c:d4:60:29:dd:46:42:
58:5e:3d:df:97:21:3d:ea:b7:da:57:06:a7:90:3a:
44:db:ae:97:6b:ad:11:77:8e:10:13:a4:2d:74:2b:
97:d5:48:19:93:89:13:4a:1e:48:e9:0f:04:e7:0a:
3f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7A:E8:8B:24:65:7A:40:67:CC:40:F9:14:95:9C:69:CD:AC:37:59
X509v3 Authority Key Identifier:
keyid:3B:99:1E:AE:85:C5:26:62:70:C3:1D:F4:18:1A:A0:7A:B2:E0:7B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5keroXFJmJwwx30GBqgerLge1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/608ede-09ae-4811-b109-e797b2d82b39/1/O5keroXFJmJwwx30GBqgerLge1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/608ede-09ae-4811-b109-e797b2d82b39/1/O5keroXFJmJwwx30GBqgerLge1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b6:ca:0c:38:a7:b1:bb:70:c2:66:cf:09:1d:49:f8:38:42:
2e:9e:bd:77:b1:b7:0f:e6:3b:e1:c2:e2:ce:87:cd:75:e1:ca:
b4:91:1e:42:0b:20:1a:db:e3:4e:5e:47:28:86:fc:62:11:f9:
d1:3b:76:b6:8a:3d:2d:19:15:84:f8:d5:fa:81:ce:40:2e:49:
4d:66:55:7b:fc:95:e5:fa:d3:b7:bc:15:d3:1e:44:37:39:4c:
8c:3c:a9:ec:0d:6f:57:ce:d0:bf:19:f4:f5:90:f7:b6:cf:1f:
89:09:3c:94:a8:e6:84:9e:39:5b:dc:bb:09:25:fd:d5:5a:4c:
7d:71:3f:7c:9c:20:d1:5c:da:2d:db:60:f7:36:1c:82:ad:24:
89:d6:4d:ad:46:4b:44:2a:32:00:9c:ac:86:6d:3a:06:d9:10:
65:d3:e7:b1:4e:23:f0:b4:23:8a:5b:3e:a4:30:4d:87:f2:3d:
b5:bb:08:52:9b:c2:3e:02:ee:c9:37:83:e5:1f:c8:13:b5:0a:
98:95:1e:08:8a:82:e2:c5:7b:90:cc:81:36:70:1f:41:a3:88:
3d:3f:70:05:bb:15:8f:0a:5b:a6:1d:e4:2a:7c:87:03:70:97:
7a:46:89:bd:2f:0b:23:73:c1:48:11:f9:9f:d0:8a:c8:8b:9b:
0d:d1:46:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:39:26 2025 by rpki-client