Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
File: Or-t4neb0SyuiYiSakZi11cIawE.mft (raw, json)
Hash identifier: UxF2rO4BYivoxcFpIuY76ltPfUkN0LNMKcsvbS/INLM=
Subject key identifier: 5A:9C:C8:36:45:3A:43:81:64:0B:FC:39:D5:4E:D2:18:33:BA:4D:6B
Authority key identifier: 3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01
Certificate issuer: /CN=3abfade2779bd12cae8988926a4662d757086b01
Certificate serial: 0194BC72FBAC727762777A71884A164B727D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
Manifest number: 094E
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: Or-t4neb0SyuiYiSakZi11cIawE.crl (hash: pJ0gQKXr9qGykjnnHb7PWIEFMkg/kMEYaUpw7Qxb32k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fb:ac:72:77:62:77:7a:71:88:4a:16:4b:72:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3abfade2779bd12cae8988926a4662d757086b01
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=5a9cc836453a4381640bfc39d54ed21833ba4d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:c3:44:00:8a:a0:68:3a:b7:9c:cd:09:d6:
46:ac:ed:08:0d:44:78:18:0c:3d:d4:f8:90:d5:de:
0f:06:ae:ec:54:28:e5:ca:5b:7d:a7:d1:d1:fa:54:
46:67:5e:08:4a:82:22:d5:7e:6a:67:6f:74:27:35:
9f:27:1e:6f:47:de:15:43:5b:82:87:0f:ab:b9:64:
85:60:bb:08:94:7c:a3:e8:b9:64:87:34:53:3d:35:
dc:76:de:33:4b:41:2c:04:92:3b:86:c6:ca:33:3a:
82:33:c1:30:65:50:ae:db:07:f5:df:f3:38:09:7e:
ce:38:82:f1:b6:76:6c:4a:58:ba:9d:fa:ae:28:a5:
2c:8f:45:a2:12:8d:81:47:3f:02:e8:58:aa:c3:79:
91:e5:8d:cd:84:22:d8:ed:14:63:90:9f:53:ef:6f:
ae:38:1c:cb:c1:30:6a:0e:e1:fa:c9:bf:0f:f8:50:
c0:c3:66:20:d8:82:27:9e:f6:b0:e8:50:3b:46:a8:
04:42:d4:53:58:d4:49:fb:3d:85:19:2f:56:43:bb:
f5:cb:84:25:87:9a:e5:a0:38:75:65:a8:2c:e5:b1:
a2:be:98:b7:c9:9e:55:30:75:81:73:ea:a9:6d:4c:
bd:23:78:4b:8d:31:84:1b:47:21:25:e6:30:80:a7:
73:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9C:C8:36:45:3A:43:81:64:0B:FC:39:D5:4E:D2:18:33:BA:4D:6B
X509v3 Authority Key Identifier:
keyid:3A:BF:AD:E2:77:9B:D1:2C:AE:89:88:92:6A:46:62:D7:57:08:6B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Or-t4neb0SyuiYiSakZi11cIawE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9270b0-8608-4149-a052-099fde63bbf2/1/Or-t4neb0SyuiYiSakZi11cIawE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8e:d8:16:31:cf:c4:aa:ce:44:54:20:d7:99:a8:d6:0c:8b:
eb:57:d9:11:43:8f:05:3f:72:2e:72:a7:60:2e:6e:0f:92:bc:
98:61:b0:b2:2a:f2:e3:3d:f6:f1:5e:5a:f8:e6:46:a1:d4:05:
c1:04:5e:45:99:f0:74:58:49:5f:58:69:91:0d:64:6e:6d:23:
0b:49:26:9f:4e:d9:f1:9a:b0:d5:9e:f4:9c:d9:f1:62:7a:2e:
1b:e8:b1:af:40:1d:43:ee:df:43:e9:bb:57:07:96:fb:a5:76:
c4:84:48:bb:bb:a7:e8:95:0c:20:c6:4e:18:af:fb:25:4b:54:
db:cd:37:18:74:0c:1a:e6:d5:5c:01:26:57:5b:98:69:d4:b1:
a5:c4:72:b2:c8:6f:95:04:74:f1:b2:3f:1e:75:3d:da:99:38:
c4:b5:82:39:1b:4c:06:50:4e:87:68:39:70:6a:2a:c1:3c:83:
c5:92:8e:80:9f:2b:b8:72:d3:4c:ec:95:90:14:fd:91:ad:2b:
f8:6b:a5:c7:b5:d6:34:07:07:2b:4b:94:dc:75:e1:b6:92:f5:
dd:25:4c:7c:3d:de:d0:97:70:54:2e:52:85:05:b3:b0:2c:ec:
40:d5:94:37:92:26:34:40:12:20:d4:a5:9f:94:f3:f1:67:0b:
0a:48:c8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:03 2025 by rpki-client