Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
File: OFt-lPpg22hRcc8TabHO-24g8zQ.mft (raw, json)
Hash identifier: TnYZrdxZ+W4dRHXg+fqoNHHrr9yrcdp9uIDReA+7nAc=
Subject key identifier: 3C:F9:CA:11:DD:FB:D2:A5:52:55:DD:DD:11:17:63:5B:62:88:6C:03
Authority key identifier: 38:5B:7E:94:FA:60:DB:68:51:71:CF:13:69:B1:CE:FB:6E:20:F3:34
Certificate issuer: /CN=385b7e94fa60db685171cf1369b1cefb6e20f334
Certificate serial: 0194BBCEE74A24192614316C9FBE83D60AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFt-lPpg22hRcc8TabHO-24g8zQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
Manifest number: 037D
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: OFt-lPpg22hRcc8TabHO-24g8zQ.crl (hash: fE+1m00uPk9f5PARPSqM5gtE7uJ6XALyWLBkX6Qalf8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e7:4a:24:19:26:14:31:6c:9f:be:83:d6:0a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385b7e94fa60db685171cf1369b1cefb6e20f334
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=3cf9ca11ddfbd2a55255dddd1117635b62886c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a6:23:99:b2:4d:d0:96:34:df:c0:78:64:1d:
2f:c0:07:14:b2:bb:eb:de:86:7c:8b:50:d7:31:94:
54:49:36:eb:dc:80:51:94:fa:7e:e9:08:42:85:15:
91:66:41:42:b2:23:2f:c4:6d:1c:77:b6:01:f7:ec:
0f:1f:64:74:59:95:10:26:4e:8b:c7:ca:b7:d2:60:
79:32:8e:41:f2:89:07:b5:1e:49:bf:69:c7:8c:ce:
1b:ac:d6:da:57:a8:1f:30:cf:18:32:33:28:d7:ce:
73:07:a4:31:9e:c4:c7:22:3d:fd:c3:f9:af:8b:f4:
34:0a:15:11:5a:e6:c7:21:69:8c:38:de:31:40:cb:
3f:08:10:ca:72:c1:1b:a2:f0:e6:12:61:99:1f:19:
c5:74:4d:f5:90:d0:7f:d3:55:b7:c5:ee:b2:e7:93:
67:b7:d2:f6:18:f4:9b:fd:a4:2c:fe:6b:82:d8:30:
ef:d1:bc:0e:c3:8b:d9:90:4b:2e:03:b6:eb:72:ce:
29:cc:c4:10:35:62:f6:1d:45:bc:13:34:bc:fe:3c:
82:aa:a2:31:d5:b5:b6:cf:ce:8b:f3:67:b1:26:11:
b3:7a:50:5b:03:4b:8d:c4:0a:87:37:fe:d9:2d:3f:
18:ad:85:9e:ed:f3:91:d8:13:16:4c:c9:02:6f:a8:
30:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F9:CA:11:DD:FB:D2:A5:52:55:DD:DD:11:17:63:5B:62:88:6C:03
X509v3 Authority Key Identifier:
keyid:38:5B:7E:94:FA:60:DB:68:51:71:CF:13:69:B1:CE:FB:6E:20:F3:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFt-lPpg22hRcc8TabHO-24g8zQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/19a307-ecba-4158-a2d1-c3b46ac9f26d/1/OFt-lPpg22hRcc8TabHO-24g8zQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:be:11:fa:58:4e:6d:00:78:fd:f7:67:4f:f5:ec:b8:ba:94:
cc:79:b5:db:8b:69:ae:12:87:d0:2f:5a:98:60:fb:92:16:86:
f1:06:b3:84:fc:7e:29:61:a7:f1:3e:2c:15:8c:a3:b2:a6:70:
d4:1a:51:7b:14:8d:42:60:f6:ab:5f:6d:f0:dc:96:24:81:ad:
45:b1:38:8f:f9:f5:f1:d0:dd:c0:79:18:68:5f:18:88:7e:35:
f5:8c:33:42:4e:6a:ea:53:13:22:59:f3:99:72:35:7b:d8:0f:
74:a4:b9:b9:7c:0c:3a:57:c0:84:cb:c3:95:32:b3:16:54:4f:
fc:cb:58:ea:8f:80:29:9f:7a:19:fb:e7:94:fb:db:e5:23:20:
98:76:f7:d9:32:e4:1d:06:24:ea:9e:da:e0:81:1d:85:ca:da:
9d:89:5f:d9:2a:cc:e3:65:66:0a:ee:45:50:e3:16:3d:d6:4c:
9e:78:53:f3:1f:4b:f6:e5:1e:6f:6c:b2:ef:e9:11:bf:d5:63:
21:a4:60:04:53:f4:41:d6:6c:ae:92:3a:08:d9:9a:54:85:ad:
1a:39:9b:79:6b:c0:5c:19:a6:71:58:5e:b6:4d:6a:f2:51:c8:
15:bf:4d:07:49:d1:fc:dd:32:97:61:02:1c:9d:fb:2b:35:8d:
76:31:69:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:00 2025 by rpki-client