Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
File: o9KLNY1BezfsyLKRv5nBUVvOj3I.mft (raw, json)
Hash identifier: M89rgUFeQkoglgTTLS4grTB0Jb56PwrrYdW6c0ID2fg=
Subject key identifier: B1:36:13:FF:89:55:91:56:75:30:60:AA:25:2C:79:E8:30:DB:5D:E8
Authority key identifier: A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
Certificate issuer: /CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Certificate serial: 0194BBCDF5AA74FEA08DB0CDE8371AD34735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
Manifest number: 0FA8
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: o9KLNY1BezfsyLKRv5nBUVvOj3I.crl (hash: MJqQte6JB374f6apvR2lBhG4KemEQqlFeMpdEwOzHsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f5:aa:74:fe:a0:8d:b0:cd:e8:37:1a:d3:47:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=b13613ff89559156753060aa252c79e830db5de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d1:2c:5d:e1:5a:f5:b8:76:3f:a0:bc:33:c1:
56:1a:10:d8:59:78:b0:df:2d:97:52:25:82:ab:c4:
0e:5c:0c:c8:c5:bc:89:19:1c:c4:94:d2:aa:c2:6d:
1e:cf:fe:11:f1:fe:fc:74:91:c7:36:3b:9d:65:6d:
6b:54:5f:48:a5:ca:99:68:29:b5:02:c0:b7:fc:69:
49:aa:dc:c8:10:8b:23:95:f8:e1:fc:e2:4a:8a:80:
0c:a5:f9:f0:ca:9e:fb:8a:d9:f0:c8:fb:c8:e3:3e:
cf:8f:12:48:78:22:99:01:80:d0:ac:8e:f1:1f:02:
61:41:47:55:ce:78:9e:c8:3b:06:35:bb:17:90:24:
98:62:14:8d:89:fc:43:74:9a:67:45:0d:d1:30:09:
73:10:0b:75:73:77:82:6c:b1:71:ad:79:d0:70:5f:
6c:6e:29:b4:ac:54:59:c4:fc:6e:3a:c9:56:08:60:
6a:70:d0:cb:8f:8f:20:69:2d:4b:f3:75:49:8f:a0:
68:cc:c1:1e:7b:7a:f7:8c:66:22:23:c7:c7:cb:6e:
45:6f:4e:cb:7b:ec:95:6f:e0:d5:20:cc:3b:ae:3b:
91:cc:90:6b:cf:47:f8:42:fc:73:9a:a8:76:12:93:
e0:c1:0d:b4:37:07:8c:f0:b9:e6:8c:b9:bd:49:b7:
cf:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:36:13:FF:89:55:91:56:75:30:60:AA:25:2C:79:E8:30:DB:5D:E8
X509v3 Authority Key Identifier:
keyid:A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f0:54:70:1e:8b:93:e0:30:07:82:47:f0:da:5d:e9:c4:71:
e8:e0:e1:31:e8:5c:3f:97:34:38:e1:e9:cf:25:75:dd:97:4d:
96:f1:29:f5:68:3c:66:0e:40:76:7a:53:5d:52:8b:8a:ee:df:
b6:38:51:6c:2d:06:cd:00:a6:4d:b3:41:11:36:43:2b:e7:27:
68:38:af:3b:83:d5:fb:af:51:da:a7:23:33:dd:0f:b7:3a:fb:
87:5a:07:29:af:45:87:87:c6:e2:52:63:cc:fd:f8:4d:1d:0e:
28:53:2d:85:ae:de:8d:12:eb:38:6c:a1:7c:ca:6b:b7:a1:d1:
a8:f7:6d:04:14:19:2f:ea:41:69:ef:9d:a7:e1:7d:16:bb:f0:
76:4c:68:a9:a7:37:34:a8:da:40:17:f3:88:2e:24:ac:c2:ef:
a1:59:3c:c7:36:11:ce:50:13:64:44:a6:6d:47:b7:e8:60:6e:
03:81:58:f5:00:14:64:14:64:26:a3:45:de:50:fd:2b:9a:77:
81:c4:3c:2c:f7:4d:a9:6e:ff:a1:2c:ca:04:4d:0c:b1:4e:0d:
32:7c:08:ff:bd:77:88:d1:17:d6:c6:a4:8f:ca:bb:0a:44:89:
bf:15:fa:f0:2f:d2:8a:da:fb:b6:77:13:fa:8c:fe:6a:19:fc:
24:36:a2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:01 2025 by rpki-client