Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e8339e-fd6d-404d-a64c-cadc514ace72/1/oyPgQd1FllMz4rFHT8UL4vD6lQ4.mft
File: oyPgQd1FllMz4rFHT8UL4vD6lQ4.mft (raw, json)
Hash identifier: s8mzmn4+K4N2w/ib+x2uJiQ6jTLBqoBHgrbuu3mdYz4=
Subject key identifier: DA:CF:75:83:87:68:30:55:F6:E6:1F:99:01:FA:46:DC:0D:6C:05:8A
Authority key identifier: A3:23:E0:41:DD:45:96:53:33:E2:B1:47:4F:C5:0B:E2:F0:FA:95:0E
Certificate issuer: /CN=a323e041dd45965333e2b1474fc50be2f0fa950e
Certificate serial: 0194BD180F02BF05B777754363576F6472E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oyPgQd1FllMz4rFHT8UL4vD6lQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e8339e-fd6d-404d-a64c-cadc514ace72/1/oyPgQd1FllMz4rFHT8UL4vD6lQ4.mft
Manifest number: 083B
Signing time: Fri 31 Jan 2025 16:00:57 +0000
Manifest this update: Fri 31 Jan 2025 16:00:57 +0000
Manifest next update: Sat 01 Feb 2025 16:00:57 +0000
Files and hashes: 1: oyPgQd1FllMz4rFHT8UL4vD6lQ4.crl (hash: JcY022Emv07n2unRH5Nhm9qzhNSotnAGbFEtF6Q/p9o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:0f:02:bf:05:b7:77:75:43:63:57:6f:64:72:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a323e041dd45965333e2b1474fc50be2f0fa950e
Validity
Not Before: Jan 31 16:00:57 2025 GMT
Not After : Feb 1 16:00:57 2025 GMT
Subject: CN=dacf758387683055f6e61f9901fa46dc0d6c058a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:5e:1d:3c:3b:93:73:56:95:1e:af:63:7e:
7e:1b:dc:58:f6:85:78:44:b1:19:b4:a8:85:ee:4f:
58:5a:57:86:96:16:2c:19:56:69:d6:24:86:75:04:
64:a6:95:ef:54:4e:2e:f0:9d:e3:32:c7:f0:c4:ca:
74:ab:6b:ac:e3:d2:75:ef:38:4e:99:bc:d5:8c:3f:
b4:8e:d9:67:5b:d8:9b:a0:1e:be:10:f1:f7:9d:fa:
02:e6:53:9b:54:4f:60:24:76:64:1c:26:48:48:6e:
47:c9:fb:e7:96:63:7a:35:d1:c5:04:80:2b:0a:a5:
14:2d:8f:57:51:68:9e:bc:d1:11:78:b0:45:7d:bf:
b2:20:a7:10:d7:2b:17:08:9c:38:38:c2:e5:3a:6a:
62:a0:00:8d:29:d7:c0:b7:e4:7b:f7:54:5f:22:39:
f6:7c:29:d4:f2:66:bd:cf:a0:14:ae:0d:d4:aa:a3:
50:b1:fa:31:d6:1b:3e:07:c8:f9:42:d1:6d:9e:ad:
84:e7:15:d0:9d:e7:0d:d2:b8:97:c6:d9:24:45:65:
41:c5:92:81:ab:d9:33:61:36:50:42:64:12:43:fd:
88:f2:12:98:8e:a9:45:04:55:21:be:07:c7:fd:03:
6b:e5:27:dd:30:21:d6:26:d4:af:9f:77:ed:a9:6c:
04:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CF:75:83:87:68:30:55:F6:E6:1F:99:01:FA:46:DC:0D:6C:05:8A
X509v3 Authority Key Identifier:
keyid:A3:23:E0:41:DD:45:96:53:33:E2:B1:47:4F:C5:0B:E2:F0:FA:95:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oyPgQd1FllMz4rFHT8UL4vD6lQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e8339e-fd6d-404d-a64c-cadc514ace72/1/oyPgQd1FllMz4rFHT8UL4vD6lQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e8339e-fd6d-404d-a64c-cadc514ace72/1/oyPgQd1FllMz4rFHT8UL4vD6lQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:7a:55:84:4c:a3:9b:a7:18:f0:05:2c:f0:57:f5:24:e5:b9:
4c:c6:18:66:22:17:fe:92:ee:e9:91:c6:57:49:d5:10:3a:a6:
15:8f:7b:a8:5a:ff:61:c2:60:41:0e:5d:d0:2f:26:e1:7a:24:
08:9f:6d:05:ac:2b:d9:99:c6:c3:ac:39:9e:70:db:22:4d:6e:
18:6e:cd:b0:c9:d9:31:32:a2:dd:e6:04:a5:a3:81:54:0f:c1:
06:62:51:57:6d:c4:1d:65:28:ac:f9:55:45:b7:8a:ae:74:0a:
75:a1:e9:02:61:c0:b1:91:8d:a7:99:5e:d5:59:52:f9:c1:c4:
0b:ea:f5:6d:85:67:f8:e6:aa:80:e5:ee:d3:76:d0:70:0c:cd:
15:bc:1e:03:80:c6:1b:fe:69:92:cc:f5:57:67:16:ee:57:a1:
a8:51:d9:c1:ff:d4:a7:14:17:05:1a:51:a0:f0:44:fa:34:ae:
64:43:31:a3:c6:96:2d:60:a6:a4:36:10:7c:3d:33:f8:c0:39:
6e:0e:db:8a:95:96:c2:26:a4:12:7b:ee:da:d6:e4:d5:fe:e0:
6c:20:fb:01:18:fc:c4:ee:07:33:0c:88:04:71:a1:3d:73:76:
61:e7:be:dc:69:38:db:c0:4c:47:26:2d:91:95:21:c0:ef:eb:
7c:99:1e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:40:03 2025 by rpki-client