Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.mft
File: OQlq7uS6fDS4EkCtSRrEba90wx0.mft (raw, json)
Hash identifier: Voul4oDUNV21aFrGPQHcAugz75lo9G295z3ViiMXMZE=
Subject key identifier: 51:EF:9A:74:69:C7:A4:A7:6E:CB:AD:4D:81:EC:5F:32:2C:B0:A1:50
Authority key identifier: 39:09:6A:EE:E4:BA:7C:34:B8:12:40:AD:49:1A:C4:6D:AF:74:C3:1D
Certificate issuer: /CN=39096aeee4ba7c34b81240ad491ac46daf74c31d
Certificate serial: 0194BC72C4D16884BC38148B422A7FB76123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQlq7uS6fDS4EkCtSRrEba90wx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:25 +0000
Manifest this update: Fri 31 Jan 2025 13:00:25 +0000
Manifest next update: Sat 01 Feb 2025 13:00:25 +0000
Files and hashes: 1: OQlq7uS6fDS4EkCtSRrEba90wx0.crl (hash: cWsVM0B3CnWOEOIUA69ki99SUjB5yfZmM025cWH6RQ0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c4:d1:68:84:bc:38:14:8b:42:2a:7f:b7:61:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39096aeee4ba7c34b81240ad491ac46daf74c31d
Validity
Not Before: Jan 31 13:00:25 2025 GMT
Not After : Feb 1 13:00:25 2025 GMT
Subject: CN=51ef9a7469c7a4a76ecbad4d81ec5f322cb0a150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:67:d2:87:50:35:83:c6:ec:a3:d9:36:8d:9b:
1e:e3:c4:8a:26:cf:be:62:4e:ac:e8:83:d0:9c:d0:
76:44:9e:de:e8:88:2d:69:88:ba:f2:eb:14:34:8f:
28:b8:2d:a4:14:da:89:83:9c:f0:79:6a:72:48:02:
4e:ce:b8:72:91:b8:ac:ef:44:d3:1b:9d:0d:7b:fc:
9b:f1:48:4d:4e:ce:0c:4c:31:12:47:63:5f:b3:1b:
7a:33:2e:38:2f:4f:28:be:4e:f6:9f:46:4a:6c:83:
90:37:d9:6b:44:60:0e:71:db:2c:28:3d:5e:2e:78:
14:08:62:b3:b8:d7:bd:f1:6f:37:3b:f3:44:b5:b9:
f2:97:df:e8:30:6c:a7:f7:f4:50:77:59:83:cf:8b:
f1:70:5d:00:6e:3b:05:97:73:f7:0f:0f:18:f7:b6:
09:02:fa:ec:b4:12:d4:dc:3b:f0:f7:de:82:92:3e:
f7:5a:56:83:2e:68:25:2f:c8:31:28:b3:2e:b8:33:
7f:8a:19:ed:fc:bd:48:b2:e3:da:ff:36:fa:91:8a:
35:d3:af:46:0f:8d:b1:73:6c:04:f7:82:1d:6e:fa:
6d:7e:d9:b9:82:93:cb:b3:bf:77:d1:1a:46:b6:b2:
36:3a:f2:5b:c3:ce:a3:bd:c1:b2:70:aa:86:63:dc:
19:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:EF:9A:74:69:C7:A4:A7:6E:CB:AD:4D:81:EC:5F:32:2C:B0:A1:50
X509v3 Authority Key Identifier:
keyid:39:09:6A:EE:E4:BA:7C:34:B8:12:40:AD:49:1A:C4:6D:AF:74:C3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQlq7uS6fDS4EkCtSRrEba90wx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bb1aa7-7455-4d2d-82da-105617638726/1/OQlq7uS6fDS4EkCtSRrEba90wx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e7:3a:d5:c5:0e:03:36:06:95:d6:0b:16:a8:b7:e6:87:a0:
40:24:6c:13:fd:10:9d:c5:1e:d6:c7:29:b4:93:16:8c:fa:36:
1e:e7:30:e7:05:b1:03:de:bd:78:2d:f8:b9:5a:4f:20:f5:40:
96:31:0a:d6:57:d9:9c:01:0e:35:64:bb:f1:fe:d1:90:88:ff:
39:3a:de:e2:55:e7:92:16:d1:a2:b1:de:0a:6b:73:0e:7b:c8:
05:08:55:34:c7:9d:d9:41:4d:0f:0f:55:a0:78:8d:95:46:e9:
70:b0:f1:b0:da:13:53:4f:7a:69:09:5c:9b:8c:57:bb:a9:6c:
0d:9e:5c:42:5c:28:15:a6:9f:3f:e2:9e:b8:f6:cf:28:94:02:
9d:df:cd:c6:f0:0e:92:12:0e:a8:0c:7a:75:74:8c:67:c4:78:
e0:8f:7d:c3:5d:ac:89:f1:97:fd:a1:36:50:38:d0:2b:48:42:
9a:d5:53:44:6f:30:9e:97:9a:fd:1a:c4:2f:37:d5:6f:c3:62:
65:88:13:0e:aa:22:72:24:fc:82:36:53:e5:94:d1:39:03:7e:
43:7e:ee:4b:43:9e:6e:19:01:15:d0:96:19:4d:d6:53:70:97:
e9:1b:04:50:fd:66:83:75:c2:f4:e6:f1:70:f8:b9:a7:48:97:
89:d1:33:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:08 2025 by rpki-client