Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8f5ad0-533e-4155-b6a1-6a9391e39966/1/oR1tW6LV_Qmx3CCAVKRaLNqNLiU.mft
File: oR1tW6LV_Qmx3CCAVKRaLNqNLiU.mft (raw, json)
Hash identifier: GCzbpkEZXOUcAp7rZgiBBQ0W7qWRhbBdBTgfXkRwy9k=
Subject key identifier: C4:F2:1B:A1:5D:2E:5A:36:FF:EA:F1:DA:6D:0A:71:F8:03:82:09:71
Authority key identifier: A1:1D:6D:5B:A2:D5:FD:09:B1:DC:20:80:54:A4:5A:2C:DA:8D:2E:25
Certificate issuer: /CN=a11d6d5ba2d5fd09b1dc208054a45a2cda8d2e25
Certificate serial: 0194BC3C9AD36AFB4EF501FB16F1E79F5C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oR1tW6LV_Qmx3CCAVKRaLNqNLiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8f5ad0-533e-4155-b6a1-6a9391e39966/1/oR1tW6LV_Qmx3CCAVKRaLNqNLiU.mft
Manifest number: 076F
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: oR1tW6LV_Qmx3CCAVKRaLNqNLiU.crl (hash: ZkacSAyMQZBNPvvYJPKtkcFEnqwxqRB+udKgCaQn9S0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9a:d3:6a:fb:4e:f5:01:fb:16:f1:e7:9f:5c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11d6d5ba2d5fd09b1dc208054a45a2cda8d2e25
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=c4f21ba15d2e5a36ffeaf1da6d0a71f803820971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cc:ac:43:c5:95:c7:69:fd:ae:5d:5d:af:f8:
1a:99:c1:5b:a2:14:7e:65:c5:0e:f4:f5:1b:68:80:
7b:5a:d7:a5:b6:31:3c:3c:25:23:fb:28:f9:12:a4:
be:44:f9:dc:fc:c2:a5:d1:1c:1f:80:3f:cb:6f:e9:
ac:1f:89:0c:15:48:24:98:44:5e:b9:b1:32:7a:a9:
95:6f:76:f3:ee:cb:bd:a3:97:cc:0f:d8:9f:62:1a:
b0:56:05:bc:99:ca:d6:fd:fa:05:d0:8d:5f:25:c5:
a8:6a:85:1f:66:47:15:00:8d:a3:64:16:6a:5d:74:
2d:d5:28:b1:d5:31:0f:b5:84:1e:47:0d:6d:4c:f4:
df:41:49:ae:66:df:ff:9b:eb:a6:0f:d0:f9:4e:0c:
cc:7a:71:6c:7e:00:4c:ba:1d:c1:15:28:b5:ec:fe:
12:a3:7b:22:c1:57:af:7a:19:4a:e7:db:f0:b4:41:
2e:b2:e2:71:d6:a6:e3:b0:d0:a8:cf:6b:d2:bf:c0:
7f:9e:9d:73:c4:ed:3e:63:6c:5c:3d:a6:25:ec:ee:
cd:d7:1f:ee:84:35:50:8f:f5:a2:10:41:fb:62:4f:
76:17:1b:9c:a9:af:67:0a:ae:e9:d7:d8:bc:99:09:
5a:73:21:09:02:47:81:71:91:25:e8:87:05:85:91:
5e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F2:1B:A1:5D:2E:5A:36:FF:EA:F1:DA:6D:0A:71:F8:03:82:09:71
X509v3 Authority Key Identifier:
keyid:A1:1D:6D:5B:A2:D5:FD:09:B1:DC:20:80:54:A4:5A:2C:DA:8D:2E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR1tW6LV_Qmx3CCAVKRaLNqNLiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8f5ad0-533e-4155-b6a1-6a9391e39966/1/oR1tW6LV_Qmx3CCAVKRaLNqNLiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8f5ad0-533e-4155-b6a1-6a9391e39966/1/oR1tW6LV_Qmx3CCAVKRaLNqNLiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:39:0c:a6:a9:f9:77:60:64:06:c5:c5:9c:5d:0f:1a:0b:f5:
03:7d:9e:b9:ac:e7:6f:2b:e5:24:ef:a0:2b:19:f6:9b:9b:4c:
56:b0:3c:52:02:c9:84:32:28:a6:f1:19:1c:28:56:49:fa:b2:
fa:19:14:24:86:5b:cc:1d:3f:d8:7c:5f:07:56:8a:fc:d2:70:
93:c8:54:cc:b6:eb:de:56:e3:f4:2c:da:b5:17:64:5c:f3:c0:
65:f8:6d:f7:64:86:5d:60:53:cf:5e:32:56:b9:4f:5b:d1:ea:
58:37:32:35:54:d3:39:b5:ba:f1:96:d3:cd:f9:03:99:7d:ff:
c4:f5:b5:d1:3c:a0:87:14:39:b2:1b:a6:c7:5a:07:35:db:f4:
aa:eb:47:0d:0b:04:dc:cf:ae:58:34:08:e5:01:c5:d3:a7:3d:
c9:77:5c:50:07:10:4d:86:99:01:0b:bc:18:b0:8d:a3:9d:b8:
e2:95:ee:85:ce:84:e0:8c:fe:26:8e:12:e1:4d:3e:ae:61:99:
f2:11:5c:5c:23:b8:ae:92:ce:fa:45:c9:78:99:4a:28:a3:ff:
cc:3a:61:91:96:2e:5c:55:20:bd:60:6f:7c:0c:00:13:36:48:
3b:b8:12:ba:64:db:b7:8f:37:e3:07:3c:17:06:68:4e:0c:d8:
32:c9:68:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:56 2025 by rpki-client