Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
File: oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft (raw, json)
Hash identifier: Lf+yLZfoJwCZxj8vzxQNwRcTFSRGQz9eElyqqIH8u5A=
Subject key identifier: 09:23:4C:69:C8:87:8E:E5:AE:11:F8:3D:F6:FC:D1:FB:DD:CA:FC:4C
Authority key identifier: A0:CA:33:E7:F6:72:5E:B4:EE:87:BA:91:B1:DD:2E:1C:42:16:8C:39
Certificate issuer: /CN=a0ca33e7f6725eb4ee87ba91b1dd2e1c42168c39
Certificate serial: 0194BBCEE444D427D7316FAD686DBD3D5835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
Manifest number: 0FFA
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl (hash: +MqHeOdDxFQ3yDLyaLeeERyM8LLsFGzT0udyO2y1h1E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e4:44:d4:27:d7:31:6f:ad:68:6d:bd:3d:58:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ca33e7f6725eb4ee87ba91b1dd2e1c42168c39
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=09234c69c8878ee5ae11f83df6fcd1fbddcafc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:3e:09:bc:fc:f1:90:44:c2:dc:e8:be:60:
45:37:17:bb:05:c2:db:3d:98:8a:93:b7:cf:f1:be:
09:b6:6c:6a:97:8e:9f:8e:ef:c8:37:a0:fc:95:dc:
c9:ff:a8:30:9d:b6:b7:47:d6:9c:26:8c:31:d9:1e:
99:bb:1c:ad:22:93:bd:56:2d:8e:1c:82:b1:0c:d5:
32:1e:1f:ff:ee:90:db:ff:40:01:64:91:2b:d4:20:
98:22:ed:f5:41:5a:2a:ad:8d:f4:81:97:9b:34:1a:
0c:06:f8:0a:31:c2:f4:7f:88:e8:f4:0a:67:5f:77:
91:a5:b7:34:d2:2c:3b:c5:a1:3e:fe:0c:4a:5c:cc:
09:be:3c:22:d7:df:95:40:6f:80:1c:fa:17:da:da:
94:f3:7e:26:96:b2:90:c4:d2:24:64:4b:28:34:86:
b6:e3:fb:b8:87:02:54:e1:19:34:c7:cf:b2:7b:69:
18:15:19:66:24:98:15:b1:ae:ed:5e:cf:b5:ef:2a:
bd:fa:72:e0:07:8e:45:ae:ca:9a:8a:59:d3:a5:13:
4d:0d:a0:26:2a:30:45:83:94:df:6a:db:07:4f:5c:
d6:1f:12:9b:12:38:63:69:51:55:b3:5f:04:c6:ab:
cd:57:9d:11:5e:a2:e4:a0:d4:84:fa:90:c4:41:98:
fc:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:23:4C:69:C8:87:8E:E5:AE:11:F8:3D:F6:FC:D1:FB:DD:CA:FC:4C
X509v3 Authority Key Identifier:
keyid:A0:CA:33:E7:F6:72:5E:B4:EE:87:BA:91:B1:DD:2E:1C:42:16:8C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c4b401-e595-4a00-9123-f21ab7e9e1f5/1/oMoz5_ZyXrTuh7qRsd0uHEIWjDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:22:ea:e8:a5:51:89:20:f8:f7:d9:44:79:28:7d:51:24:0a:
11:36:35:58:ae:63:a2:de:e7:ad:a2:51:c3:c8:00:52:4f:4c:
2a:33:96:8e:d6:88:32:7d:03:3d:f2:3a:98:3e:55:5f:e2:c4:
7c:91:e8:52:a0:91:bf:2a:6c:b9:87:f1:6c:fb:de:b1:94:c8:
e5:35:e6:88:65:07:c8:04:0c:25:a5:bc:68:2a:a6:28:20:e7:
d6:10:c6:8f:4e:c7:04:45:b6:13:fd:21:0a:79:b0:6e:93:ef:
6f:35:23:92:3c:01:99:35:27:e9:75:65:cc:56:1e:ef:4e:3b:
2b:1a:2e:1b:8a:99:ab:ff:3d:65:bc:4a:93:5f:6c:99:5d:71:
b2:7e:f1:ef:ca:f9:22:91:eb:ad:7b:ba:45:f8:3a:b0:50:2e:
44:c0:39:48:4e:2a:42:04:c3:00:b5:d7:01:10:49:88:e5:55:
bc:47:54:10:75:95:bd:50:6e:f7:29:b1:08:6c:ea:75:eb:a9:
fd:2b:18:6b:b8:ec:00:07:41:e4:09:02:fa:bb:ab:9e:5d:64:
1b:0a:12:f5:60:dd:1a:a7:84:98:c6:cb:38:e9:ea:a7:78:89:
4b:1e:46:33:f7:47:2d:ed:b3:dd:5e:03:9c:83:ef:8b:69:a1:
7c:c9:c6:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:01:09 2025 by rpki-client