Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
File: oVJWhcluMm8grjcpwDD0T9FJmwU.mft (raw, json)
Hash identifier: F9nCKQ2lL5inzaRyS5PAmipWsVL/pOmHstbzZAvUs4E=
Subject key identifier: FB:F4:64:2A:60:DE:CF:A0:94:F4:EA:C8:01:26:49:6B:39:FE:52:F3
Authority key identifier: A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
Certificate issuer: /CN=a1525685c96e326f20ae3729c030f44fd1499b05
Certificate serial: 0194BC3BF1221A29AFD323DB6DAB85C1D570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
Manifest number: 0636
Signing time: Fri 31 Jan 2025 12:00:32 +0000
Manifest this update: Fri 31 Jan 2025 12:00:32 +0000
Manifest next update: Sat 01 Feb 2025 12:00:32 +0000
Files and hashes: 1: oVJWhcluMm8grjcpwDD0T9FJmwU.crl (hash: r8HB+Ic88GmVMHivm6SlR3RswOMuz9msgZhUkl4+oVE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f1:22:1a:29:af:d3:23:db:6d:ab:85:c1:d5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1525685c96e326f20ae3729c030f44fd1499b05
Validity
Not Before: Jan 31 12:00:32 2025 GMT
Not After : Feb 1 12:00:32 2025 GMT
Subject: CN=fbf4642a60decfa094f4eac80126496b39fe52f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:2f:c9:86:7f:70:63:b8:cc:be:61:80:78:be:
ec:e6:2c:d0:01:9c:7a:72:97:83:f3:94:06:55:a3:
ac:f2:9e:af:08:4c:c5:ef:96:70:96:ef:28:58:73:
e8:9c:e2:75:68:50:92:53:8c:b2:67:dc:3e:9a:8f:
99:2f:e3:73:13:dd:76:2d:b6:a1:9e:f6:49:d2:e0:
3e:16:db:b1:fc:ab:4a:71:6a:49:79:6b:26:0b:de:
be:10:da:b1:ed:5c:74:0e:4f:d0:0f:eb:40:76:f4:
24:ed:11:bf:cb:23:c9:7a:f2:9d:eb:79:99:21:37:
c5:f8:a9:90:24:29:1d:43:60:b2:94:36:18:0a:19:
28:79:e6:3d:d7:06:cb:6c:f7:3c:1f:f8:af:00:06:
69:2c:ca:64:2d:50:7f:e7:f9:f9:2b:82:c1:f8:60:
7b:40:d5:f1:70:fe:15:8a:37:d7:65:89:5c:d7:ba:
93:9e:e8:66:f2:f9:8b:44:c8:08:20:4e:64:10:f8:
34:50:ae:89:ea:a9:79:6e:9b:47:72:38:6f:d4:3c:
bb:7f:4f:ad:b1:e8:04:b5:52:a5:45:72:02:d0:89:
41:16:86:71:8a:2b:d1:9e:1b:e5:ed:03:a8:c4:98:
2d:30:67:44:a1:f1:b5:66:4a:e6:bc:8c:59:4e:db:
65:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F4:64:2A:60:DE:CF:A0:94:F4:EA:C8:01:26:49:6B:39:FE:52:F3
X509v3 Authority Key Identifier:
keyid:A1:52:56:85:C9:6E:32:6F:20:AE:37:29:C0:30:F4:4F:D1:49:9B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVJWhcluMm8grjcpwDD0T9FJmwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e2cc8b-8606-4f25-92d0-44371b1cc72f/1/oVJWhcluMm8grjcpwDD0T9FJmwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:9d:e3:b9:09:20:95:e5:1c:f6:2f:64:bd:cf:1a:f4:32:e5:
58:6d:86:e0:c0:ae:82:46:40:aa:df:9f:56:fe:8b:86:f9:41:
7b:88:2d:f2:67:dd:e6:e6:05:1b:9a:f7:ec:8f:b8:82:48:13:
7b:95:77:c0:5e:ec:99:0f:0b:03:8e:f2:83:b6:6d:0f:d7:c0:
58:87:ad:ea:d5:93:10:a7:87:97:aa:ea:56:a7:27:ad:4d:fe:
26:77:01:ae:28:76:e9:9a:c1:dc:cc:a5:f3:77:f9:5e:24:8b:
f0:5c:12:d5:d1:d7:47:15:f2:77:21:1c:53:94:b6:ef:fe:a2:
e7:b5:50:ae:b2:12:96:e5:87:4e:ff:16:fd:44:e1:8f:01:c6:
fb:c3:b7:ec:b3:e7:28:71:1e:45:d2:f7:49:af:0c:69:c9:d8:
95:e7:fc:a9:2e:0b:13:aa:c6:9f:2a:e5:f8:f9:0f:67:39:3a:
3a:a8:c7:ff:38:d1:57:55:24:68:0c:b6:95:7f:14:0f:39:82:
ee:02:f5:b8:90:51:b7:9c:9a:f4:c4:da:33:3a:80:71:80:65:
19:d8:a5:c5:77:f4:e3:c5:38:ad:30:cd:18:09:fd:d9:e3:99:
0f:66:8f:73:cf:ab:04:ee:49:5d:4b:0a:57:03:6e:68:93:cc:
52:a6:01:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:04 2025 by rpki-client