Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
File: OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft (raw, json)
Hash identifier: y3Y9GKnNxYt7LylTVGmp7q/ucWb7Go0YU8iijAU2jUc=
Subject key identifier: 1B:F2:88:83:40:77:C3:52:1B:E4:5B:E3:EC:C3:9D:8B:3E:A2:BA:64
Authority key identifier: 39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
Certificate issuer: /CN=39d43c26468819c07b1925115fe4921f84203d16
Certificate serial: 0194BBCDF5849007F6E9F1691C70F6A907B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: HJiUdFRcnCCA97tz7GIyzHp366Y.roa (hash: yKaY+45Vcb3qR17Dz+EuLvkK0krevHkZZEA1gt2KjQg=)
2: OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl (hash: jxWpPAQVYvjv7o3ZDppMJbV8yND43kn7GD/fHDKgrhE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f5:84:90:07:f6:e9:f1:69:1c:70:f6:a9:07:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39d43c26468819c07b1925115fe4921f84203d16
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=1bf288834077c3521be45be3ecc39d8b3ea2ba64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:3d:b9:df:76:81:74:3b:1e:ac:14:35:96:
63:6d:5b:bf:fe:cb:a2:2c:32:04:1b:95:00:fb:57:
8f:ed:16:e3:ff:75:6c:1f:52:ef:c3:99:8f:4e:5c:
df:ae:a4:03:62:96:7a:1d:62:ee:64:ff:85:4b:d1:
86:eb:45:6d:4c:b8:c5:cc:63:7c:7c:16:bb:d7:13:
af:e8:5b:28:05:0a:c7:e4:40:37:77:fc:56:2b:6d:
4f:58:c0:c0:7a:5b:9c:6b:ba:ac:ca:0e:3d:7e:26:
8c:42:91:af:e8:15:ad:63:b0:c4:e6:a8:65:bc:15:
c6:4e:15:90:75:65:c3:e2:1d:73:f3:77:5b:4b:92:
ec:58:8c:e1:87:1b:c5:6f:ca:17:cb:f1:54:ec:3e:
67:3d:3f:1c:f6:45:ad:24:72:48:3d:39:68:da:9d:
55:28:0e:ea:db:e2:c4:57:78:3f:e9:4b:72:59:42:
8f:6d:bc:9e:43:d9:05:f9:0d:85:92:56:52:a5:7f:
4b:8b:c4:74:ce:f6:d7:2f:2f:94:5e:13:d5:50:34:
2e:99:fe:19:79:86:bb:ee:6c:61:aa:7d:ab:38:a0:
ab:54:8a:ed:a4:1b:c3:c2:49:02:75:cc:d4:2a:ca:
d7:88:44:76:53:ab:1c:81:9d:ce:50:df:00:68:82:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F2:88:83:40:77:C3:52:1B:E4:5B:E3:EC:C3:9D:8B:3E:A2:BA:64
X509v3 Authority Key Identifier:
keyid:39:D4:3C:26:46:88:19:C0:7B:19:25:11:5F:E4:92:1F:84:20:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OdQ8JkaIGcB7GSURX-SSH4QgPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/affc01-a58f-4f70-a404-abf0ea07efaf/1/OdQ8JkaIGcB7GSURX-SSH4QgPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8a:c8:ec:ee:1f:7b:10:21:33:81:12:25:2c:03:b1:45:d5:
b8:22:a3:02:50:32:f6:6b:1c:30:df:11:16:e9:98:cd:d7:2d:
6f:4d:59:e4:77:a6:14:6b:67:79:75:e9:3c:03:65:cb:f5:f3:
22:2b:7a:59:d9:28:09:e6:5e:9a:7c:2a:1f:07:99:26:61:92:
44:ce:2e:ad:ae:b3:b8:9f:b8:e0:ab:7b:f0:39:6c:f0:81:47:
41:e8:42:6e:30:18:70:ef:a3:f1:52:03:98:c5:95:62:4b:94:
aa:9d:5b:aa:54:06:11:11:5a:26:47:e6:18:d8:02:ea:07:f8:
e1:eb:40:0a:46:73:2f:cf:e1:de:d2:3b:ba:29:58:2f:ca:03:
b5:73:ca:5e:67:b8:c7:dc:75:7d:17:ee:7c:65:48:cd:66:14:
c6:b1:ca:53:60:7e:41:15:70:32:49:c4:94:87:df:db:cf:9b:
99:6d:98:0a:77:e3:0a:8b:9a:52:c7:b2:5e:2a:79:ff:89:e9:
50:c5:d2:5b:a8:d3:32:ea:7c:e5:93:b4:28:32:b3:c2:c5:c4:
6c:da:05:f3:0c:fc:62:d3:ce:b0:08:c6:9b:fa:13:47:9b:8e:
8a:bc:68:4d:6a:58:81:12:44:80:ca:95:1b:4f:ac:26:49:4e:
49:f2:a2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:22 2025 by rpki-client