Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/22eb53-4f60-411b-8409-d4c97ff6e11e/1/oUx52o8IwpnEYya3m55CTkmmh1s.mft
File: oUx52o8IwpnEYya3m55CTkmmh1s.mft (raw, json)
Hash identifier: 06xJp8V2EPCKF7t87XFAqC6rqEZgGrDfeQV4m2XTyFE=
Subject key identifier: 21:9D:0A:DB:B7:0A:C1:F5:B7:ED:09:16:DB:F0:FD:F3:40:F7:7A:2B
Authority key identifier: A1:4C:79:DA:8F:08:C2:99:C4:63:26:B7:9B:9E:42:4E:49:A6:87:5B
Certificate issuer: /CN=a14c79da8f08c299c46326b79b9e424e49a6875b
Certificate serial: 0194BBCE93ED5956C0A3231CFB3ECDB85E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUx52o8IwpnEYya3m55CTkmmh1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/22eb53-4f60-411b-8409-d4c97ff6e11e/1/oUx52o8IwpnEYya3m55CTkmmh1s.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: oUx52o8IwpnEYya3m55CTkmmh1s.crl (hash: tNRjFJLDbCdauQXROCgWGmFIWExjAnnlVtnHqia8lZk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:93:ed:59:56:c0:a3:23:1c:fb:3e:cd:b8:5e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a14c79da8f08c299c46326b79b9e424e49a6875b
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=219d0adbb70ac1f5b7ed0916dbf0fdf340f77a2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:51:e4:05:6e:5b:0e:bc:bd:bb:0d:95:50:5d:
da:38:fe:35:ed:da:aa:da:77:14:2d:5a:d5:03:de:
a9:a8:2c:50:98:be:8f:45:fb:ba:8a:f9:c9:7e:0e:
e3:66:db:b6:58:55:e0:cd:7a:5a:60:ff:51:e1:48:
5f:24:98:d3:55:95:78:68:d6:e2:8f:7b:5b:d0:05:
bf:99:6b:04:db:00:6b:80:10:16:ac:a2:79:db:a9:
c4:22:8f:db:35:f6:fb:cb:14:31:a9:94:62:10:2f:
8f:c0:d4:bf:30:bb:b8:47:89:e5:38:8b:b2:86:b0:
5f:e0:75:65:5d:a4:e7:6b:af:da:66:f7:cb:cf:e9:
b4:ef:3c:67:48:5b:e1:95:c6:ca:41:ae:ee:be:4c:
40:32:96:bc:70:05:cf:58:83:29:1f:f8:1e:48:2f:
1c:70:a0:8b:12:3e:c3:1a:01:55:6d:8a:39:eb:79:
5f:30:20:65:89:c3:94:da:50:fb:ed:73:73:d7:94:
0f:cd:e1:98:fe:2f:f3:cd:f4:44:8b:e5:43:53:b2:
37:3b:45:2f:1f:5c:b9:e2:3e:27:71:e6:2c:f2:0c:
c0:5b:1b:97:a8:d4:b6:87:48:56:7c:80:39:79:4a:
df:bf:46:a7:24:d2:f4:e2:d9:2b:94:d0:a7:3a:9c:
99:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:9D:0A:DB:B7:0A:C1:F5:B7:ED:09:16:DB:F0:FD:F3:40:F7:7A:2B
X509v3 Authority Key Identifier:
keyid:A1:4C:79:DA:8F:08:C2:99:C4:63:26:B7:9B:9E:42:4E:49:A6:87:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUx52o8IwpnEYya3m55CTkmmh1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/22eb53-4f60-411b-8409-d4c97ff6e11e/1/oUx52o8IwpnEYya3m55CTkmmh1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/22eb53-4f60-411b-8409-d4c97ff6e11e/1/oUx52o8IwpnEYya3m55CTkmmh1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:83:ba:6f:2a:da:e9:f5:a5:2d:b2:91:b8:2b:e4:d9:ed:36:
2d:bf:6f:af:ad:5c:24:55:e9:bb:22:61:bc:6a:85:cc:56:a4:
ae:61:be:49:4e:80:ce:68:77:fc:da:83:86:b1:6b:f9:6a:31:
76:34:c7:a2:c2:d5:ec:c7:d7:3e:79:e6:7d:16:86:7d:b6:2a:
4b:7f:e1:4b:54:5a:c2:11:13:a0:87:78:e0:6a:44:c2:ca:20:
f2:96:14:d0:d7:07:c6:34:74:c5:e8:fc:31:bc:33:ea:61:d7:
57:7c:c3:b2:14:85:ab:d1:79:02:de:d4:e6:86:cf:4f:08:d8:
b1:f5:12:a1:44:a7:ab:c5:aa:4e:c0:97:6b:d5:79:78:39:0b:
e3:06:3b:73:57:90:da:1d:77:51:e5:23:ef:9a:5d:78:5c:72:
18:49:70:fd:f5:3a:5d:06:49:20:49:1d:89:40:80:76:d4:03:
b3:a1:13:a6:64:be:41:dc:ff:22:ba:90:56:83:54:31:ce:c0:
6d:59:b0:1c:db:cf:75:b9:24:c4:fa:2f:84:a1:80:a1:69:fe:
ad:e2:de:33:98:d9:53:30:32:de:d0:94:94:23:5e:d4:62:42:
2d:a5:9e:3a:16:b1:de:7a:e3:ff:b9:63:97:0a:4f:bc:8f:eb:
49:17:59:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:29 2025 by rpki-client