Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/3fe413-bd51-4765-bd86-b7441032e59f/1/OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.mft
File: OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.mft (raw, json)
Hash identifier: 2V87BiD6PIJuNfkLmbDOBCJdR2t3X/MM8J5L6cgBVGE=
Subject key identifier: 34:5D:27:DA:81:BD:4E:FB:B4:54:64:66:12:13:42:2F:2D:40:36:04
Authority key identifier: 38:A1:9E:64:0D:E1:F4:52:A7:DC:4A:BE:78:6A:A5:81:34:29:27:B1
Certificate issuer: /CN=38a19e640de1f452a7dc4abe786aa581342927b1
Certificate serial: 0194BBCEAF8C4337EC209CD7758B213417A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3fe413-bd51-4765-bd86-b7441032e59f/1/OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.mft
Manifest number: 036A
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.crl (hash: h1weqcYpaho0fLXpC+1n9OwrnKqyfISK3TQqF9/nxdY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:af:8c:43:37:ec:20:9c:d7:75:8b:21:34:17:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38a19e640de1f452a7dc4abe786aa581342927b1
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=345d27da81bd4efbb45464661213422f2d403604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ab:dd:74:7c:2e:5b:96:97:81:a8:84:13:3a:
c9:46:f2:fd:8c:63:0c:d3:6e:09:95:ea:59:38:ba:
14:06:2a:25:31:25:57:03:4d:b4:37:24:d9:b8:d1:
be:79:96:a6:f8:26:e0:0b:b5:c5:25:1a:86:18:2e:
60:7b:4c:df:c9:09:91:0b:ea:78:8e:00:01:57:26:
f0:72:66:29:44:c5:6f:5a:cf:e1:73:ba:1c:e7:3c:
ba:86:c8:45:be:40:af:d0:e3:3c:48:3b:10:8c:91:
f1:d8:2c:e7:4f:35:e1:8f:42:84:94:2a:6a:b6:0c:
b2:80:02:8f:23:96:49:ac:b6:ba:69:1a:12:79:eb:
3b:f1:26:2b:e6:0b:a7:f5:97:15:8f:97:2e:b2:25:
9b:b6:b7:ed:e8:0d:8e:25:b9:1d:6e:b6:21:16:46:
ee:f3:2e:06:a7:2c:be:e8:40:bf:23:69:ee:93:ce:
5b:a8:db:52:01:35:f7:c2:1b:dd:ff:91:0b:2e:d2:
ed:c5:b2:b3:03:8f:7f:20:d9:1b:1e:4f:99:e0:56:
7f:21:58:80:9b:55:f0:fd:02:50:23:38:3d:2a:68:
4c:9a:53:02:b2:25:9d:40:11:e7:65:ed:85:3b:cb:
1d:ea:da:e6:11:4f:a8:af:ad:e7:c5:7b:f2:12:e6:
f6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5D:27:DA:81:BD:4E:FB:B4:54:64:66:12:13:42:2F:2D:40:36:04
X509v3 Authority Key Identifier:
keyid:38:A1:9E:64:0D:E1:F4:52:A7:DC:4A:BE:78:6A:A5:81:34:29:27:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fe413-bd51-4765-bd86-b7441032e59f/1/OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3fe413-bd51-4765-bd86-b7441032e59f/1/OKGeZA3h9FKn3Eq-eGqlgTQpJ7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:bd:29:40:1e:7e:c5:68:7e:81:82:33:be:d7:61:5c:7b:ff:
66:6e:17:d7:aa:da:28:30:8b:fa:c8:cb:f3:6a:2b:13:40:db:
1b:ac:ff:cc:a7:5b:5e:bd:4f:fa:ec:03:a8:3c:f5:d8:c1:6a:
d0:e9:0a:82:85:b8:3a:83:d5:51:69:48:79:8a:d2:86:fd:8f:
25:b7:95:9d:44:d2:e1:19:90:72:13:48:2b:e0:cb:2e:ee:36:
d7:4e:d1:37:ea:00:3a:0e:ee:80:dd:c5:54:d8:9d:a7:a3:a6:
31:da:b1:a7:4b:22:a7:40:88:bf:06:f1:e7:03:cb:86:b5:18:
76:d7:3d:7f:e2:9e:06:d6:3b:a4:7a:29:fb:0e:5c:83:e2:0c:
32:dc:65:31:2b:24:e0:35:d7:47:d9:ce:5c:47:e1:d2:42:44:
88:4d:16:0c:b3:7b:18:41:81:12:b9:30:88:9a:5d:b8:06:97:
ad:38:91:6a:8f:aa:88:03:26:a5:57:3a:52:6e:7e:00:33:53:
76:86:60:9b:99:95:b0:2c:88:64:ab:5c:31:70:4c:04:07:2a:
07:2c:d0:fe:4b:3c:6a:86:9e:7b:01:0d:40:7d:3e:83:30:49:
17:50:eb:9a:61:c9:c9:db:c2:f6:ee:97:1a:a7:d7:50:42:b6:
42:4a:50:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:40 2025 by rpki-client