Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
File: orO6gtodtcGUN6wzeDhG8vK_9GI.mft (raw, json)
Hash identifier: NN3Uy/l/yJOugHJskKgzhWsSUbu4TfGrveDuOvBuBmE=
Subject key identifier: 5A:3F:B3:E2:83:29:BE:83:17:F4:C9:76:05:09:D9:1A:B3:13:19:7F
Authority key identifier: A2:B3:BA:82:DA:1D:B5:C1:94:37:AC:33:78:38:46:F2:F2:BF:F4:62
Certificate issuer: /CN=a2b3ba82da1db5c19437ac33783846f2f2bff462
Certificate serial: 0194BBCE88610D11E09C6D6250A00F7E63D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
Manifest number: 01CA
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: orO6gtodtcGUN6wzeDhG8vK_9GI.crl (hash: 5iBodchrdDShqcMqgQAOrG7mn7X3cWp1Q63B3DcOVx4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:88:61:0d:11:e0:9c:6d:62:50:a0:0f:7e:63:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2b3ba82da1db5c19437ac33783846f2f2bff462
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=5a3fb3e28329be8317f4c9760509d91ab313197f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:3d:1b:d9:88:27:56:29:7d:c6:97:ff:ff:
03:2e:1e:52:96:fc:09:55:3d:8e:c4:24:e1:49:75:
0a:3d:76:99:db:85:62:bd:5f:44:b0:24:9a:5f:14:
ad:1f:41:f5:64:86:fb:93:7d:fa:f6:e5:31:cc:d2:
48:13:12:87:e5:ac:8f:70:e8:a8:95:69:1f:a2:d8:
71:a7:ff:38:c7:36:77:ed:68:60:a1:1c:8f:20:26:
57:8d:8f:18:86:fd:7e:7d:91:d6:f0:36:9f:c5:5d:
00:8b:8a:e3:ee:8e:6c:c6:a7:d5:52:5e:34:d9:7f:
90:c3:d9:dc:d1:89:a8:1d:08:7f:ed:53:31:b5:00:
9f:dd:42:a6:1e:30:ab:9e:98:4c:e8:6f:36:fe:d1:
2b:d4:f7:8f:29:e5:74:2f:c5:17:32:e1:66:37:6f:
b9:af:ed:d9:24:88:0d:74:fe:fc:45:6a:05:7c:4a:
86:c3:9d:3a:0e:5d:dc:26:a9:a1:83:76:c9:58:68:
cc:49:18:dd:da:c1:0f:51:00:da:17:4b:06:86:b6:
31:3b:78:b6:8c:57:df:d7:62:bb:3c:f2:a5:ff:eb:
a1:6c:6b:5a:e6:ee:d1:d3:01:a8:22:2e:7d:03:6e:
7d:21:00:f6:4e:b3:70:cf:4c:e6:bf:6e:4a:a5:e8:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3F:B3:E2:83:29:BE:83:17:F4:C9:76:05:09:D9:1A:B3:13:19:7F
X509v3 Authority Key Identifier:
keyid:A2:B3:BA:82:DA:1D:B5:C1:94:37:AC:33:78:38:46:F2:F2:BF:F4:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/orO6gtodtcGUN6wzeDhG8vK_9GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/44981c-96f8-4866-b7fe-f898d204eb4e/1/orO6gtodtcGUN6wzeDhG8vK_9GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:e3:dc:4d:8c:5a:16:1b:51:1d:96:00:d1:bf:ee:3e:3b:05:
d1:59:22:07:87:89:dc:cc:b5:d1:2e:b2:dc:65:86:7c:af:3f:
6e:8f:ba:e9:37:81:b5:23:e3:95:34:31:d2:95:5d:f0:fb:13:
08:74:2a:2e:8b:a3:cf:0b:f8:46:61:1b:d3:1a:51:53:91:b5:
d2:ab:f1:d4:7e:c5:cb:6b:2e:b0:7c:5b:8b:53:b9:fe:2d:7e:
7c:0b:40:f8:9b:ad:6e:ba:07:87:71:36:65:7b:e1:8c:3e:e2:
2d:d2:6f:ef:ad:9a:9d:3f:db:cd:05:21:4e:16:35:34:6d:47:
e7:a0:d5:34:87:3d:c4:bd:ba:b3:7c:57:e4:96:47:76:0c:29:
12:bf:dd:68:5b:2f:14:0f:4b:74:81:c0:5e:72:c3:fc:60:5a:
c5:67:4f:72:3b:00:b3:49:93:71:13:21:e7:c4:24:b7:1f:be:
37:88:83:f6:ec:0e:80:99:9b:ea:c8:8f:82:57:af:95:a3:9d:
5d:fb:66:a3:94:fb:a9:72:3e:e9:22:b1:17:af:8f:50:b0:98:
0b:f1:74:75:a2:6f:5a:66:76:cd:2f:73:c1:55:f8:a5:f3:72:
9b:4f:44:30:83:f0:d8:17:ae:67:90:16:c8:45:19:42:79:7c:
69:10:e0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:23:07 2025 by rpki-client