Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
File: o-VcYHJU0eKwURqFbnADn_r0MDI.mft (raw, json)
Hash identifier: GlPbHMqREg06p/+B1Abq3gbL5H6+N5Z0OKoI86SlLXU=
Subject key identifier: F4:3A:C3:1E:7B:33:20:00:57:45:94:BE:37:31:19:98:DE:48:B5:85
Authority key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
Certificate issuer: /CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Certificate serial: 0194BBCDE27A696C14A06761E50D355E6EC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
Manifest number: 0FA4
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: o-VcYHJU0eKwURqFbnADn_r0MDI.crl (hash: 62HTUBW1dIOVWt2I/08zUCZoZmmii00JltJ8VJWX0wg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e2:7a:69:6c:14:a0:67:61:e5:0d:35:5e:6e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=f43ac31e7b332000574594be37311998de48b585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:47:f6:78:da:45:14:96:d2:57:ee:d0:eb:
77:af:a0:da:07:5c:1a:3e:32:89:28:b4:d3:09:01:
2e:97:49:53:fd:94:58:3b:ea:9e:9a:d0:5e:6c:77:
98:48:43:63:48:0b:2b:f1:b5:e5:d6:ab:d3:e9:69:
69:8f:91:ff:db:57:3d:48:08:e2:01:f6:18:1d:81:
5c:ab:b6:71:19:07:9d:b4:40:40:a6:3e:aa:9c:d9:
a7:ae:61:0c:2f:6d:66:cf:9c:56:60:18:05:26:36:
36:73:c9:6e:40:2e:ec:84:30:59:40:a9:7c:6f:30:
e7:21:8f:3b:0b:c3:e4:d7:ab:19:9b:26:8f:2c:c5:
10:59:d6:54:c4:f9:70:2d:7d:2a:40:be:43:cb:18:
c0:7c:52:d0:69:d6:73:a9:db:33:4b:a5:9a:97:13:
ae:e5:c2:a4:88:af:42:f7:ef:a3:6c:5d:9f:a9:d9:
27:13:15:ea:51:1a:fe:21:4a:a3:4c:97:b8:fb:ec:
dd:57:a5:d4:c8:c1:64:57:78:52:87:24:dc:42:8b:
83:24:38:50:1a:0e:35:36:a8:36:13:33:5a:8f:34:
31:14:e9:dd:3b:ee:c2:f4:ec:2a:3b:a6:4c:df:f8:
42:0b:1e:08:4c:92:4e:9e:74:85:69:22:bc:ef:d2:
5b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3A:C3:1E:7B:33:20:00:57:45:94:BE:37:31:19:98:DE:48:B5:85
X509v3 Authority Key Identifier:
keyid:A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:92:11:ea:1f:5d:44:38:aa:41:12:34:89:7a:d8:de:84:19:
2f:cc:30:c3:3f:9d:41:2d:04:de:74:f1:67:3b:64:73:b5:3f:
be:f8:b3:8d:f0:58:f8:4e:32:d2:59:54:d6:e1:7b:91:b6:25:
e5:b5:24:27:48:69:88:ca:62:cc:74:0e:f1:cd:d3:4d:23:6e:
72:93:11:f1:2d:84:bc:00:ea:a7:9c:25:63:a8:46:f4:b9:ee:
d4:0f:42:4c:1c:29:3b:28:3f:8d:99:11:b8:be:c0:59:4e:a3:
4a:d7:89:7e:92:9c:8a:12:33:a7:eb:89:7b:7a:8b:e9:91:bc:
50:3d:42:ba:f6:ba:20:83:a5:70:a5:a7:9f:00:9c:0f:43:a3:
b7:f4:28:73:7b:48:43:a9:32:64:91:73:dc:27:d4:5c:a1:ac:
e0:33:4d:f5:47:02:fb:00:41:a3:49:75:0a:b1:e4:8a:aa:77:
83:f1:d0:31:a1:a5:7c:c8:97:10:cd:d3:57:aa:43:a2:14:6b:
ae:30:ec:7c:4f:08:ba:c4:e9:49:49:35:22:52:9b:3d:60:64:
8a:bc:97:8e:bc:64:bf:3e:a5:ed:21:cd:68:27:19:38:2b:8d:
b2:71:21:28:74:3f:de:60:06:bb:9d:f9:25:9b:29:83:37:23:
85:65:50:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:06 2025 by rpki-client