Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
File: OJwDADZ1arjNrJIrGvI3vOE2fOA.mft (raw, json)
Hash identifier: OkMn1RSHdb9JkYgz1yhZZp2onFuDA1HQcqXEaMziTiQ=
Subject key identifier: 1A:5D:11:C4:33:5D:AF:6A:5E:F7:B1:6A:EB:3B:1F:18:7D:D3:D6:44
Authority key identifier: 38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0
Certificate issuer: /CN=389c030036756ab8cdac922b1af237bce1367ce0
Certificate serial: 0194BBCE78CCEFD1963B0D4433999138B04E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: OJwDADZ1arjNrJIrGvI3vOE2fOA.crl (hash: Fh96mQb6xLF1INt8YHShRK6cPZYE+jnXoDnN7Tc821Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:78:cc:ef:d1:96:3b:0d:44:33:99:91:38:b0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389c030036756ab8cdac922b1af237bce1367ce0
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=1a5d11c4335daf6a5ef7b16aeb3b1f187dd3d644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:79:d1:00:bc:5f:43:39:b9:65:83:2a:11:dc:
8a:a2:3c:8a:ca:6f:e6:4e:60:04:79:03:c6:c9:04:
11:93:cc:d5:f9:c2:de:ce:c5:5b:c7:bc:14:e1:e3:
d6:b0:17:82:de:02:e9:f0:d0:c1:3c:c0:88:69:60:
f0:23:a5:64:d5:4d:a8:40:36:49:fb:30:a1:11:59:
21:3f:b0:5f:8d:8f:3f:2b:0d:eb:00:47:00:da:da:
97:2c:cd:89:4c:7f:e7:85:dc:9d:b5:97:8c:15:15:
97:d0:07:be:65:20:77:f0:d2:ed:65:8b:28:92:d5:
35:ad:59:31:ee:0b:0c:a2:89:d0:f3:62:31:2b:42:
26:d0:02:ee:25:40:71:bf:33:2e:66:70:d3:75:b6:
27:c7:ab:fa:33:ab:dc:91:05:20:7e:38:05:68:34:
17:66:18:d0:b2:b8:ac:99:fa:54:a9:47:d0:0c:eb:
81:95:7d:00:f8:53:ff:fb:64:b3:89:cb:a1:4a:6b:
df:3f:ab:86:24:78:5f:09:5b:49:10:5c:69:e1:42:
3c:1b:53:d5:d3:d1:49:a1:8f:0f:d4:bf:e9:89:49:
da:6d:1c:a8:06:58:25:dc:4b:41:43:d9:42:3d:dd:
7b:c0:53:3c:0c:80:20:5b:6a:be:81:8b:cc:4d:4b:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5D:11:C4:33:5D:AF:6A:5E:F7:B1:6A:EB:3B:1F:18:7D:D3:D6:44
X509v3 Authority Key Identifier:
keyid:38:9C:03:00:36:75:6A:B8:CD:AC:92:2B:1A:F2:37:BC:E1:36:7C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJwDADZ1arjNrJIrGvI3vOE2fOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/20fca0-04b2-43b0-bd2c-6717b9babb34/1/OJwDADZ1arjNrJIrGvI3vOE2fOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:9e:42:6c:11:18:a0:4a:70:5f:2f:e6:43:7f:2a:41:31:29:
a9:da:a6:a4:18:29:8f:00:cc:4e:36:ce:b5:4e:f7:07:87:aa:
28:fe:af:8c:36:76:7f:9a:b6:f1:8e:65:22:02:f4:da:13:08:
bb:8e:68:8f:e9:c5:f7:80:b7:0c:f7:df:54:53:f2:e4:49:c2:
3e:d0:54:e9:be:f7:d1:76:90:0d:60:2b:eb:b3:a9:b8:9e:5d:
e3:2c:b5:52:12:9a:a4:26:b2:2c:5c:dd:4b:93:b1:82:e6:de:
92:03:1a:7f:bf:d3:3b:9b:a8:64:c5:b0:34:18:ee:77:3a:9a:
1e:17:41:8b:4a:61:4f:14:d9:91:85:ce:12:09:eb:0f:4a:6c:
c9:38:ef:57:68:3d:3c:06:cf:1c:e9:22:cf:21:1d:76:b8:06:
d5:b9:fb:bd:4b:2f:3a:3e:d6:10:9f:d4:7f:24:b1:17:45:c0:
3f:d9:b8:2d:0b:07:97:6e:46:1f:47:1c:c5:55:1e:ca:93:d8:
d1:e1:a1:3f:a6:11:e5:69:76:a0:c5:13:e7:67:93:23:d8:d3:
e5:bb:23:2f:c9:a3:14:83:38:eb:9f:46:f5:7e:b2:b8:80:9c:
68:2b:62:ff:93:d7:dd:84:19:66:10:d4:eb:d8:4b:39:38:19:
cc:d2:8e:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:40 2025 by rpki-client