Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/2b2124-8794-4a8b-9930-3323fd060b9b/1/OXqyKGxnhx2rRXpygyl_yMaIpK8.mft
File: OXqyKGxnhx2rRXpygyl_yMaIpK8.mft (raw, json)
Hash identifier: X4LZiIe6Retqo4O43XZBBunzn7+boeWKBgzrORjeO1I=
Subject key identifier: EA:A0:3A:1D:09:A0:D2:E7:63:62:C1:1C:0B:A2:D2:4B:67:F3:53:75
Authority key identifier: 39:7A:B2:28:6C:67:87:1D:AB:45:7A:72:83:29:7F:C8:C6:88:A4:AF
Certificate issuer: /CN=397ab2286c67871dab457a7283297fc8c688a4af
Certificate serial: 0194BC731FD29F25503B3E925A2D0A31A25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXqyKGxnhx2rRXpygyl_yMaIpK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/2b2124-8794-4a8b-9930-3323fd060b9b/1/OXqyKGxnhx2rRXpygyl_yMaIpK8.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: OXqyKGxnhx2rRXpygyl_yMaIpK8.crl (hash: X4TYyK52N7YmRTnGkirjgGoboieGiE20aaonZOIBaXw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1f:d2:9f:25:50:3b:3e:92:5a:2d:0a:31:a2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397ab2286c67871dab457a7283297fc8c688a4af
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=eaa03a1d09a0d2e76362c11c0ba2d24b67f35375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:1f:58:7d:80:a5:cb:2d:f6:8f:19:70:2f:37:
d5:59:46:ed:b0:2e:09:21:00:a6:b6:ea:6a:4a:4a:
c9:2b:a7:ca:af:af:c1:fd:6c:b0:bd:19:21:e8:e0:
2c:67:13:18:26:5c:6e:a7:ab:6a:12:f3:cb:f0:99:
09:9c:a3:12:8d:f6:80:a1:e0:c3:d1:c1:91:54:92:
22:df:4f:d0:d7:e2:d2:8a:eb:2c:ae:33:9b:bb:f4:
e9:26:6b:31:00:47:e7:78:6a:30:7e:27:71:00:17:
ba:d4:8c:f4:9f:2f:4c:e0:02:e3:b5:54:9e:06:21:
ba:75:e0:c2:bb:ac:81:6d:a3:e2:17:c4:da:ac:d0:
b0:18:1c:1d:57:08:52:d8:e3:69:70:7a:ca:fd:fc:
42:bd:90:54:79:d9:e9:95:44:48:67:f3:54:81:c1:
36:72:9a:29:3e:6d:74:ec:e1:57:19:ff:fc:6d:d2:
33:76:21:30:0c:f3:cd:a3:94:91:6c:63:50:b4:7b:
f4:68:22:a7:d9:ec:20:22:c7:ba:be:1b:96:bd:f6:
37:ca:6a:cb:ba:09:f0:71:7f:07:46:2b:8a:b0:bc:
c0:15:ba:ab:05:83:c2:c8:36:56:d6:03:a3:a1:da:
4b:75:2e:20:5c:da:7b:eb:cf:dd:ab:75:77:d0:f0:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A0:3A:1D:09:A0:D2:E7:63:62:C1:1C:0B:A2:D2:4B:67:F3:53:75
X509v3 Authority Key Identifier:
keyid:39:7A:B2:28:6C:67:87:1D:AB:45:7A:72:83:29:7F:C8:C6:88:A4:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXqyKGxnhx2rRXpygyl_yMaIpK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2b2124-8794-4a8b-9930-3323fd060b9b/1/OXqyKGxnhx2rRXpygyl_yMaIpK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2b2124-8794-4a8b-9930-3323fd060b9b/1/OXqyKGxnhx2rRXpygyl_yMaIpK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:0a:ea:04:08:06:c2:56:4c:29:c9:6d:1f:62:66:98:31:56:
2b:0b:7b:69:66:e9:a9:21:b2:7e:15:75:f5:f6:51:fc:f8:e4:
5d:c7:6c:ff:83:ad:44:ae:bb:3e:81:4e:1a:01:1f:a7:de:eb:
91:81:7c:a6:ab:09:d5:cf:8c:bb:d0:32:48:f5:81:c2:dc:54:
4f:ea:4f:44:76:0c:a0:12:21:3e:63:87:30:d6:a0:f6:fb:6c:
2d:e5:ea:1d:82:dc:eb:9c:4c:6b:2d:f2:dd:8b:0a:06:ce:a1:
4e:6d:82:8f:63:64:40:06:df:74:a8:80:07:86:69:c3:74:25:
e5:3a:2f:9b:75:3c:67:2f:b3:30:07:30:52:4b:f7:6e:9a:98:
94:3c:e4:c5:62:bf:5d:f3:e5:b2:14:0b:0e:92:2b:9d:25:d2:
71:43:8e:b5:77:0a:21:55:b1:63:d8:47:5e:1f:82:bd:f0:87:
21:a8:07:33:75:f0:b2:b2:e9:75:95:cc:9a:0e:0e:bc:e4:3e:
64:76:17:c3:0b:b8:ca:5f:03:56:cf:7d:2e:5f:e3:b9:6d:92:
50:2b:40:c6:2b:01:f2:fb:e1:00:4b:e8:04:5d:28:25:05:99:
09:20:d7:70:44:1f:4a:08:1d:47:26:0f:2f:ca:45:fb:4a:50:
21:fa:96:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:48:42 2025 by rpki-client