Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.mft
File: oYhrwvjZOpz8WoN-LydS7knyJHQ.mft (raw, json)
Hash identifier: HN3FV2Py5MdF8mMavhlQJGonPr/qoYhySZOW1BtACR4=
Subject key identifier: F9:7B:D2:B3:2F:AB:6A:F5:E3:37:60:17:97:C1:4B:01:88:C6:56:AC
Authority key identifier: A1:88:6B:C2:F8:D9:3A:9C:FC:5A:83:7E:2F:27:52:EE:49:F2:24:74
Certificate issuer: /CN=a1886bc2f8d93a9cfc5a837e2f2752ee49f22474
Certificate serial: 0194BC3BCFAA9400C6B30CAD9E17DDB54B88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYhrwvjZOpz8WoN-LydS7knyJHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: oYhrwvjZOpz8WoN-LydS7knyJHQ.crl (hash: Ij4mWGN29m0/6Ag0XhE8/C9/4FrmDL/SWROEro3eOS4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cf:aa:94:00:c6:b3:0c:ad:9e:17:dd:b5:4b:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1886bc2f8d93a9cfc5a837e2f2752ee49f22474
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=f97bd2b32fab6af5e337601797c14b0188c656ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f8:f8:25:0c:b1:17:25:cb:a6:30:cb:76:78:
f8:7e:b0:8b:26:b5:e0:ab:2d:14:b9:76:25:72:85:
5d:a5:b0:bb:84:08:d4:4e:e6:fe:38:23:12:7d:c8:
70:7f:c2:7b:56:07:c9:8b:d3:ae:79:b1:be:be:f4:
c1:77:e3:59:7e:29:b4:a4:f2:b0:10:a4:8b:2d:45:
c5:a0:b0:06:6a:09:b1:af:8e:93:ba:b6:c7:24:04:
5d:0b:1d:57:83:b7:4a:2d:b7:89:83:78:c5:4a:22:
ee:59:6a:09:c8:dd:a2:c6:e2:47:7e:61:66:c4:a1:
b0:29:30:fb:73:36:d3:ef:ca:11:6c:8b:c4:6d:fb:
7d:b7:bf:56:f1:1d:8d:98:07:cc:fe:73:7f:90:51:
e1:36:9d:3f:30:d2:dd:0b:c4:c4:02:19:f4:4a:9d:
ee:19:da:d2:53:3e:83:13:a2:74:fc:fa:62:a9:fd:
72:d1:fd:7f:c1:ca:42:40:bf:6c:75:cd:22:47:07:
b6:6c:cc:a6:02:74:d9:63:f8:7e:86:60:06:73:ab:
a9:c4:da:52:a0:fe:d8:06:15:3f:c1:38:52:93:06:
fc:57:89:16:9a:03:3a:34:a2:40:8e:34:c1:e2:f4:
17:3f:5e:da:ce:34:aa:8f:a4:52:b1:84:ff:4f:d5:
ea:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7B:D2:B3:2F:AB:6A:F5:E3:37:60:17:97:C1:4B:01:88:C6:56:AC
X509v3 Authority Key Identifier:
keyid:A1:88:6B:C2:F8:D9:3A:9C:FC:5A:83:7E:2F:27:52:EE:49:F2:24:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYhrwvjZOpz8WoN-LydS7knyJHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7cb76e-957b-4311-89c9-995d11a86015/1/oYhrwvjZOpz8WoN-LydS7knyJHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:bf:61:bb:76:1f:04:3c:60:4f:37:f9:80:1c:e1:ac:79:64:
1a:36:80:d3:a6:d9:1d:16:05:64:9a:42:c6:c9:7e:5a:d1:79:
1c:67:12:83:7c:5b:2b:96:27:e4:09:89:cb:1a:a2:13:4e:bc:
50:2c:36:ba:aa:28:bc:8c:9b:b3:43:b9:a3:38:d9:49:d7:af:
0a:5e:2f:30:7b:9a:3a:4d:d5:15:a7:44:ca:2a:d2:8d:fd:05:
f2:3e:0d:ba:a2:b3:74:a2:d8:5e:86:50:25:25:a5:bc:a3:34:
57:fb:22:6f:56:65:db:1d:e5:00:8a:a2:e8:1f:6a:45:1f:be:
ef:16:fd:65:b7:f2:9b:85:12:b7:bf:ba:74:b0:c6:be:2f:92:
00:30:a9:44:fa:74:29:b3:e4:fc:8f:7c:19:62:d9:89:80:d0:
f0:3c:48:b0:51:a8:7a:9d:47:cf:0b:7b:1e:5e:10:7b:9e:0e:
3a:42:8e:51:e7:0c:0f:0c:1f:4f:b8:72:dc:1f:d2:ff:cb:c0:
81:81:f1:14:8f:5e:44:26:c6:f9:13:14:14:6d:78:32:ef:65:
00:6f:96:48:d9:cd:c1:69:15:7d:0b:b9:a1:fb:b2:18:41:4d:
51:96:f8:25:34:f1:36:a0:ee:ae:ba:a7:d0:45:e3:ef:82:1c:
74:54:e3:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:10:45 2025 by rpki-client