Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9f2497-4064-416a-804e-75c660b0702f/1/aO6OfkIFOVOcTuiTOr04wCTjvVs.mft
File: aO6OfkIFOVOcTuiTOr04wCTjvVs.mft (raw, json)
Hash identifier: cIMPu/xCBl4vkroNSpgNo5fgnB/OXwajeK7c+BktsA0=
Subject key identifier: 34:72:3E:1E:47:F2:23:FF:B1:CF:6F:93:30:A5:79:13:C0:74:3B:50
Authority key identifier: 68:EE:8E:7E:42:05:39:53:9C:4E:E8:93:3A:BD:38:C0:24:E3:BD:5B
Certificate issuer: /CN=68ee8e7e420539539c4ee8933abd38c024e3bd5b
Certificate serial: 0194BBCDCD6664164E2B93E782B540BF1BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aO6OfkIFOVOcTuiTOr04wCTjvVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9f2497-4064-416a-804e-75c660b0702f/1/aO6OfkIFOVOcTuiTOr04wCTjvVs.mft
Manifest number: 0E19
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: aO6OfkIFOVOcTuiTOr04wCTjvVs.crl (hash: bUZ6bUAFmsMJhb+bckOTHsJRbQBGHdtwnqt6FM9zJLQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cd:66:64:16:4e:2b:93:e7:82:b5:40:bf:1b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ee8e7e420539539c4ee8933abd38c024e3bd5b
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=34723e1e47f223ffb1cf6f9330a57913c0743b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:00:f1:a5:fc:3c:58:1f:c2:95:61:f4:12:4f:
aa:0e:c3:7e:0c:a0:3a:2b:93:bc:4a:73:5f:51:73:
a1:d0:76:99:37:c3:2b:d7:27:33:dd:7e:8e:20:0d:
74:5d:70:24:88:f3:fa:29:53:5b:a8:c3:dd:07:36:
d1:61:6f:a7:e7:c6:9c:e3:07:2f:27:52:a8:69:ca:
5e:d0:42:1a:89:d7:3c:75:9c:6f:f0:0d:d0:76:a0:
8a:9e:fb:db:17:91:99:9f:cc:c0:f8:69:45:67:f0:
6c:6f:c3:31:62:0c:2f:00:59:67:90:18:dd:b9:fb:
bf:28:94:d7:be:5e:8e:1b:a5:73:01:1b:fe:71:20:
e5:fd:61:a2:87:54:07:1c:47:41:9b:17:c4:ed:c4:
79:de:15:95:d2:d0:7f:ee:62:41:2b:27:88:6c:8a:
00:b7:f4:30:00:84:e4:7e:66:2f:a9:fb:54:9f:d3:
18:d4:3d:46:61:d5:b0:c0:a1:81:5f:1c:e9:03:c2:
0c:85:db:05:43:2a:64:58:aa:2f:21:a8:ce:48:0e:
0c:23:05:3c:fa:02:53:21:af:86:b4:10:32:e8:91:
da:93:f3:14:7f:90:c9:a0:38:b3:79:fc:69:fa:63:
95:2b:3d:4a:4c:6d:b1:f6:71:af:32:06:83:5b:f9:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:72:3E:1E:47:F2:23:FF:B1:CF:6F:93:30:A5:79:13:C0:74:3B:50
X509v3 Authority Key Identifier:
keyid:68:EE:8E:7E:42:05:39:53:9C:4E:E8:93:3A:BD:38:C0:24:E3:BD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aO6OfkIFOVOcTuiTOr04wCTjvVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9f2497-4064-416a-804e-75c660b0702f/1/aO6OfkIFOVOcTuiTOr04wCTjvVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9f2497-4064-416a-804e-75c660b0702f/1/aO6OfkIFOVOcTuiTOr04wCTjvVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:39:87:11:94:46:07:0b:fe:c3:50:80:3f:67:b6:b6:24:e0:
3c:8c:60:02:2c:d3:1b:fe:5b:80:c9:3a:03:b3:f2:a0:05:56:
22:21:0a:ee:28:c1:a6:69:32:e1:5c:26:fe:f7:16:80:29:29:
a6:fc:74:3b:a6:3b:34:82:25:4f:0a:f9:0a:3f:13:29:60:1b:
a1:84:d1:88:25:3d:46:e5:d7:e4:a5:80:7d:7d:ba:3b:8d:04:
97:70:06:f1:73:3b:ec:89:e6:9a:07:bd:f9:f1:c1:2f:0c:ed:
e1:b4:85:11:f5:e9:01:d9:ad:24:ff:e9:cc:b5:2f:e1:61:30:
13:09:b0:4a:40:78:ca:72:85:34:c9:4e:22:02:53:a2:a6:87:
00:00:6e:34:e5:14:11:0c:7c:d6:0a:58:38:7d:bc:7c:da:91:
60:d1:53:8d:3d:03:e3:92:da:7b:52:d3:18:c6:9c:b3:a7:af:
82:54:b9:c0:71:85:15:c2:79:60:7a:b3:c8:f1:eb:84:fd:89:
6a:5b:d1:04:4e:e9:d2:be:e4:d3:d7:8a:1e:e1:d0:92:d3:0a:
9c:2b:07:69:d5:d4:a6:cc:bb:ff:00:87:94:b6:a8:03:08:67:
ab:e1:f0:7b:80:61:9b:e3:8f:e1:ed:03:30:14:db:4d:bb:81:
90:3d:19:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:14:35 2025 by rpki-client