Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/620577-dfd8-4f23-a650-83be418aa7f4/1/OExBksVwSp65aPXPUzuaH3pmYa0.mft
File: OExBksVwSp65aPXPUzuaH3pmYa0.mft (raw, json)
Hash identifier: ufXGCpv5sy4cfWk/gWV1X0nZnKM0vGttH2Zmyr3F+lU=
Subject key identifier: 53:1A:81:7E:45:F2:8F:EC:66:D8:7D:6A:C8:E1:D2:8B:E4:18:E2:A5
Authority key identifier: 38:4C:41:92:C5:70:4A:9E:B9:68:F5:CF:53:3B:9A:1F:7A:66:61:AD
Certificate issuer: /CN=384c4192c5704a9eb968f5cf533b9a1f7a6661ad
Certificate serial: 0194BD4E856B1758455C866252280FA0CEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OExBksVwSp65aPXPUzuaH3pmYa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/620577-dfd8-4f23-a650-83be418aa7f4/1/OExBksVwSp65aPXPUzuaH3pmYa0.mft
Manifest number: 04
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: OExBksVwSp65aPXPUzuaH3pmYa0.crl (hash: 2lpNFGxab8uw/hudy+EoFgs+OAYGn/Z+dpqXSrs9tSk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:85:6b:17:58:45:5c:86:62:52:28:0f:a0:ce:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384c4192c5704a9eb968f5cf533b9a1f7a6661ad
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=531a817e45f28fec66d87d6ac8e1d28be418e2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:87:58:13:6d:bf:75:d4:24:0b:76:75:f2:
1d:dc:5f:b3:34:b8:24:8d:e5:e4:69:03:a5:1f:fa:
3e:f0:ae:0c:66:e2:83:45:3a:df:8b:ed:96:78:37:
39:13:c5:01:63:a5:bb:f7:ea:e1:f6:fb:08:8c:62:
6b:12:60:30:31:3a:17:da:0a:f0:7e:d4:9d:bf:3f:
8a:c4:47:3c:c0:7f:77:1f:ec:1d:f2:3d:08:40:b1:
2f:e6:77:c3:c0:d8:90:a9:64:97:43:37:c8:4f:80:
fd:9b:8e:13:07:85:ad:37:70:73:0b:7a:01:dd:ad:
34:ed:e6:22:7d:bd:76:28:9a:8f:0f:3a:3c:b2:b8:
df:55:ee:5d:9f:f2:01:83:8e:90:b5:3d:bf:d6:07:
75:34:d9:dc:b8:3d:20:43:98:97:48:2a:ec:20:4a:
86:a8:91:24:50:1e:6f:56:e5:e5:71:8c:fc:89:cc:
b4:d7:ae:de:7c:7c:69:d0:14:cd:94:06:c9:8e:a9:
99:d4:ae:fd:6f:13:5e:7c:da:56:64:cc:df:a0:24:
3e:c7:c7:46:b6:2e:4f:29:b8:b3:b7:90:19:a3:dc:
5c:de:4a:c9:7d:bd:05:81:ed:ef:c0:b2:dd:7f:31:
74:e0:68:3c:d4:02:8c:49:13:45:8c:f8:d0:24:c1:
6b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1A:81:7E:45:F2:8F:EC:66:D8:7D:6A:C8:E1:D2:8B:E4:18:E2:A5
X509v3 Authority Key Identifier:
keyid:38:4C:41:92:C5:70:4A:9E:B9:68:F5:CF:53:3B:9A:1F:7A:66:61:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OExBksVwSp65aPXPUzuaH3pmYa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/620577-dfd8-4f23-a650-83be418aa7f4/1/OExBksVwSp65aPXPUzuaH3pmYa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/620577-dfd8-4f23-a650-83be418aa7f4/1/OExBksVwSp65aPXPUzuaH3pmYa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:9a:9a:70:30:1d:44:ca:57:1f:a0:61:0e:4f:b0:9d:fc:ed:
b2:05:1d:3f:b9:6f:84:84:e8:b8:af:14:1a:6b:6a:98:9c:a3:
99:b8:9c:3e:ec:5e:05:a2:07:f7:7d:00:3b:08:7e:32:96:d8:
34:db:6a:24:44:b0:b4:09:fc:cf:d2:de:cd:d9:31:c1:ec:45:
f5:5d:a8:8a:4d:f3:af:37:95:ef:fc:78:a7:a4:88:98:5f:6a:
9b:f8:f3:93:3f:56:b2:bc:90:ec:6a:4d:a1:e3:88:de:32:e7:
ae:a7:c8:33:46:cd:bb:bd:cc:87:2e:7e:57:2a:85:db:d9:35:
7c:da:b6:2f:7e:c2:08:80:df:f6:89:fe:31:52:82:63:68:5b:
a7:35:df:30:c0:e7:22:38:05:5b:21:29:5c:df:1b:e9:f3:7e:
c0:3d:22:48:56:7b:43:ab:9c:7b:68:e4:cc:bd:7b:4b:67:55:
ad:14:88:36:4c:e2:ff:12:d9:dd:78:b3:6b:56:be:d7:ec:72:
cd:ad:3c:86:c6:08:0f:22:53:4e:38:3b:84:f6:7d:51:ef:02:
f4:86:f6:e4:c1:07:58:fa:85:aa:e3:3e:a3:ee:d4:f5:ba:b3:
99:bf:fb:a1:38:26:5b:80:63:07:61:18:0a:aa:a2:0d:c2:93:
d1:ef:1a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:12 2025 by rpki-client