Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
File: dlOpinSeVpdEoe3iyUDy5DPEQIo.mft (raw, json)
Hash identifier: ZATNKwk6bmq/zVV/5I98Evx88JiXjb8ldLuL/QhhGb4=
Subject key identifier: EF:79:3C:E5:42:0A:F5:07:E4:6B:CC:9D:3C:3D:17:DA:45:BD:30:FB
Authority key identifier: 76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A
Certificate issuer: /CN=7653a98a749e569744a1ede2c940f2e433c4408a
Certificate serial: 0194BBCE6450FC3589132E7A2D5347CFE9C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
Manifest number: 07BA
Signing time: Fri 31 Jan 2025 10:00:52 +0000
Manifest this update: Fri 31 Jan 2025 10:00:52 +0000
Manifest next update: Sat 01 Feb 2025 10:00:52 +0000
Files and hashes: 1: dlOpinSeVpdEoe3iyUDy5DPEQIo.crl (hash: T9gWNzbcrRmSSjUu29FWZt8vxS8/rRydXL/fWO+sLP4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:64:50:fc:35:89:13:2e:7a:2d:53:47:cf:e9:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7653a98a749e569744a1ede2c940f2e433c4408a
Validity
Not Before: Jan 31 10:00:52 2025 GMT
Not After : Feb 1 10:00:52 2025 GMT
Subject: CN=ef793ce5420af507e46bcc9d3c3d17da45bd30fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:17:56:37:04:d8:b8:7c:7f:c0:53:91:5d:
78:8c:c3:2d:0c:a9:5c:b1:e0:72:a8:87:95:07:99:
cf:1e:bb:2c:db:2c:d8:15:80:bc:ea:8b:d8:4f:79:
a3:7b:f4:77:f2:a9:1d:37:9c:19:28:e6:cd:a5:98:
d2:b0:e0:30:2b:26:13:e7:ef:29:28:c7:48:c8:43:
c0:a8:24:91:fa:57:f6:85:d9:9f:85:04:3f:7a:f8:
17:bd:16:4a:c3:89:93:2a:76:96:27:fe:0f:5c:2e:
42:84:6f:63:37:7f:05:37:ca:0d:c7:c0:b8:f8:ef:
ad:38:03:3e:91:9a:74:41:48:40:7c:d4:fc:91:11:
ee:0e:f8:26:8e:17:01:5d:47:7b:01:ab:a0:fc:a6:
7e:a4:2a:9f:90:1e:39:b8:64:09:8e:61:b1:68:03:
e8:12:43:ab:37:7d:d2:ae:9c:8b:e4:a7:af:f9:39:
a4:37:6f:c9:24:11:f0:51:09:6d:35:cf:7c:b3:92:
10:fc:c0:28:42:54:71:0d:12:1e:e0:ae:a7:0c:26:
ab:5a:1b:89:74:a2:dd:0e:17:de:5b:b7:6f:4a:96:
6f:be:77:41:d8:77:ff:7b:b4:1f:5c:a5:b7:85:d7:
f4:4f:19:a2:c8:da:36:6a:f1:1c:cc:e4:e0:c8:0b:
1a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:79:3C:E5:42:0A:F5:07:E4:6B:CC:9D:3C:3D:17:DA:45:BD:30:FB
X509v3 Authority Key Identifier:
keyid:76:53:A9:8A:74:9E:56:97:44:A1:ED:E2:C9:40:F2:E4:33:C4:40:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlOpinSeVpdEoe3iyUDy5DPEQIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/861592-b1c2-495f-b5a1-b9dc2f2b002c/1/dlOpinSeVpdEoe3iyUDy5DPEQIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d5:14:73:cb:aa:47:99:d0:94:0c:bf:a7:57:bc:06:52:5d:
fc:58:ea:46:ec:ea:34:da:1d:15:a3:43:4e:c9:f2:a3:21:a5:
a8:52:e2:6c:5e:7b:aa:5f:3e:67:2c:e4:c7:56:84:0e:58:37:
63:c5:07:e7:27:b0:3e:39:12:5e:a8:14:05:30:62:9c:eb:72:
01:b2:8b:bc:e6:79:e9:ba:3d:04:fa:4a:8b:34:4a:52:ab:4d:
a8:33:5e:fc:d7:ae:b1:e9:96:b6:1d:8c:94:27:05:f4:f3:39:
4b:49:d5:2e:38:8e:12:9e:ec:f7:61:57:57:ae:f1:af:23:30:
49:69:7c:5a:bb:e4:2c:e3:dc:92:ae:c4:6d:64:cb:7e:b5:a2:
98:7c:a6:fd:a4:03:8d:7a:35:23:2a:38:c5:25:a2:d8:83:db:
8c:7e:78:e9:11:d7:f5:3e:16:d5:af:ff:ab:47:b8:0d:9a:f3:
f8:05:88:a6:2b:c0:2a:75:82:ac:71:72:45:38:32:51:9d:59:
a9:91:43:11:f8:ff:03:76:f0:37:78:fd:2f:7e:ca:aa:56:8b:
d7:ce:dd:4f:1b:05:e9:4c:1f:37:ef:61:90:92:7e:e6:de:2a:
36:ef:3d:c8:96:10:78:33:11:b9:de:69:ce:6b:fc:cb:1d:60:
eb:a1:df:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:41 2025 by rpki-client