Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
File: oewv8gIW07xkdbhQpGXjYvTs7s0.mft (raw, json)
Hash identifier: 0HEzfGcfRbHU6ToIikZw+aKG/Xjaijigkh5H1GCCYn8=
Subject key identifier: B5:AA:C3:D0:13:77:74:1C:31:0A:00:A9:10:5F:1B:4A:74:A5:EA:80
Authority key identifier: A1:EC:2F:F2:02:16:D3:BC:64:75:B8:50:A4:65:E3:62:F4:EC:EE:CD
Certificate issuer: /CN=a1ec2ff20216d3bc6475b850a465e362f4eceecd
Certificate serial: 0194BCA96ACCD2B85B65301F202BBAE637ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
Manifest number: AC
Signing time: Fri 31 Jan 2025 14:00:06 +0000
Manifest this update: Fri 31 Jan 2025 14:00:06 +0000
Manifest next update: Sat 01 Feb 2025 14:00:06 +0000
Files and hashes: 1: oewv8gIW07xkdbhQpGXjYvTs7s0.crl (hash: tKboe+vMv5FDf4ydLQztbVOPeDdWoq3ScjBNMZZu0tk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6a:cc:d2:b8:5b:65:30:1f:20:2b:ba:e6:37:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ec2ff20216d3bc6475b850a465e362f4eceecd
Validity
Not Before: Jan 31 14:00:06 2025 GMT
Not After : Feb 1 14:00:06 2025 GMT
Subject: CN=b5aac3d01377741c310a00a9105f1b4a74a5ea80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:44:5d:a7:ae:7b:e5:ac:ec:09:2e:eb:13:
e7:82:43:50:5a:34:c2:11:df:18:bd:36:1a:2d:83:
ed:01:e4:59:98:06:0b:8e:f7:b1:3c:39:96:94:04:
41:dd:0f:03:61:be:30:e1:5b:2b:bf:c2:98:09:e0:
6f:e1:c2:2e:6b:1c:4d:f5:06:1c:85:d9:d6:d3:b6:
87:eb:64:dd:07:92:cb:b4:fd:cc:50:33:cd:a0:7a:
06:ab:3a:9d:8f:6d:71:76:4b:d4:e8:57:dc:23:f9:
e1:7c:b0:ee:dd:a0:d2:55:c3:14:fd:67:32:81:3d:
4c:f0:9b:92:50:e6:a1:16:43:8b:eb:53:1b:2f:5f:
e4:cf:db:b8:5d:b5:db:44:94:fb:48:ca:54:8a:01:
1a:7b:92:41:5e:d3:fe:f6:54:c3:e3:65:15:d6:a8:
34:a5:fe:ff:13:17:f8:40:de:fd:e9:a0:6a:76:0b:
5f:1f:f2:6e:81:d0:37:18:ff:49:21:50:6c:42:6d:
f7:48:6a:ed:42:a3:28:e4:bd:82:a6:9c:60:74:e7:
66:1b:80:07:9f:1f:64:ef:c5:dc:74:41:12:d7:58:
b6:4c:44:4e:62:81:cf:2b:78:ec:c9:6a:83:99:9e:
05:33:f3:f5:d5:d7:83:a6:8c:a5:2c:52:12:49:25:
91:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AA:C3:D0:13:77:74:1C:31:0A:00:A9:10:5F:1B:4A:74:A5:EA:80
X509v3 Authority Key Identifier:
keyid:A1:EC:2F:F2:02:16:D3:BC:64:75:B8:50:A4:65:E3:62:F4:EC:EE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oewv8gIW07xkdbhQpGXjYvTs7s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/23bd5e-f7e4-4d9d-b573-507563885403/1/oewv8gIW07xkdbhQpGXjYvTs7s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:dd:56:83:ba:75:ea:be:58:c0:69:00:be:63:38:2b:92:39:
19:29:e3:1e:79:5c:c6:77:c2:3e:28:7f:ce:13:df:a0:b1:e9:
08:1e:ec:74:29:a7:a1:23:da:5d:c7:c6:6f:a1:40:8c:b0:f5:
0d:93:2a:30:25:7f:e3:41:f4:c5:e2:b9:9d:d4:b8:57:c4:dc:
6b:b5:7e:0c:42:83:e1:cb:d3:6a:24:ff:a0:77:87:8f:2b:85:
aa:e7:7f:a6:34:ff:d9:10:79:b0:40:77:68:72:69:9b:03:9c:
db:d5:40:71:e6:2d:1d:ca:0e:e7:dc:07:35:e0:49:c2:25:80:
cd:06:df:62:e3:be:d1:d5:9f:93:9e:1d:45:62:28:fe:78:42:
a2:9e:85:e2:f2:78:ad:b2:81:ed:66:61:9b:c7:d7:a5:fe:0b:
16:68:da:89:ce:3f:be:f5:51:4a:86:44:ca:dd:1b:b9:65:3c:
25:d2:00:51:bd:3b:ec:ac:86:f3:bf:d1:05:93:7c:c0:6d:5e:
4d:a5:21:1c:e4:40:f6:4a:b9:56:0c:0d:81:b1:66:e0:47:f3:
3a:ad:08:38:01:5f:8e:df:09:42:97:3e:62:72:20:cc:1e:3d:
76:b0:55:64:59:d2:27:95:aa:fa:3b:63:53:94:21:ea:7e:c8:
9a:4f:de:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:45 2025 by rpki-client