Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
File: oy2niZiHqsRJlYu5DrU1lRqXOgA.mft (raw, json)
Hash identifier: BKkbqV/u+1X8MFg7Q5uPcf0z3DWVbH3exUhh5UtbS/I=
Subject key identifier: 80:A5:E0:9B:F8:26:9F:CF:01:03:74:89:42:83:F1:D8:B7:25:05:C3
Authority key identifier: A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
Certificate issuer: /CN=a32da7899887aac449958bb90eb535951a973a00
Certificate serial: 0194BBCDE5E2308C281BF3C7144FAFCBB035
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
Manifest number: 0D29
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: oy2niZiHqsRJlYu5DrU1lRqXOgA.crl (hash: 5xiyYCmCvQYMQnR8Uc1HMWV47vYV/hRY6iMQ/TgcM1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e5:e2:30:8c:28:1b:f3:c7:14:4f:af:cb:b0:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32da7899887aac449958bb90eb535951a973a00
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=80a5e09bf8269fcf010374894283f1d8b72505c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:40:04:6c:e0:e1:9e:62:2c:68:1c:72:c1:
a4:df:70:fe:5d:9d:20:0e:49:61:28:94:08:4c:4d:
2e:80:9e:d8:c9:4c:cc:39:0c:78:15:06:6f:48:4e:
6a:71:be:83:58:ae:2f:cd:9d:d4:26:b6:77:fe:6e:
32:03:b7:5d:8e:9c:c6:e8:72:6c:02:ba:8a:35:29:
3f:ec:b4:9a:f2:f6:77:b4:d1:88:f9:ae:61:3d:91:
7c:4a:e8:60:24:41:66:78:35:b2:db:05:3d:c3:78:
e7:bd:06:09:a2:3a:d3:e7:96:4b:6c:e5:b9:a4:94:
65:8d:21:f5:0d:f8:bc:8a:84:fd:ef:33:6a:b4:25:
04:69:e1:b0:df:7d:75:df:6a:84:19:32:6c:69:15:
6d:96:ad:c8:8f:f3:33:d3:49:a3:53:b1:cc:d5:53:
46:16:93:92:51:14:5a:71:43:25:70:a0:13:05:3d:
18:a6:e0:5c:1b:40:04:eb:b4:d2:c0:8f:45:d4:17:
fa:40:3e:73:70:7c:06:f0:e3:76:ec:e3:9f:cd:7c:
3e:38:ad:1d:a9:e2:78:95:4f:5b:96:89:78:f8:3a:
53:c3:fc:b5:90:65:40:3f:79:fd:0b:2f:f8:8f:25:
af:8c:d9:14:90:ef:98:a1:7d:6c:e1:e6:7e:bb:71:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A5:E0:9B:F8:26:9F:CF:01:03:74:89:42:83:F1:D8:B7:25:05:C3
X509v3 Authority Key Identifier:
keyid:A3:2D:A7:89:98:87:AA:C4:49:95:8B:B9:0E:B5:35:95:1A:97:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oy2niZiHqsRJlYu5DrU1lRqXOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/a388b6-43c6-4458-abf5-d3332f9044ec/1/oy2niZiHqsRJlYu5DrU1lRqXOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fa:33:e1:41:38:b5:45:ac:7a:d0:fc:4f:1c:32:d8:c3:a8:
ca:f3:82:90:02:f7:a4:19:9d:84:58:f8:80:40:6c:b4:8f:3a:
0c:ff:0c:b2:f8:81:d4:15:d9:3a:9f:9c:a3:51:d2:46:10:d3:
7d:6f:f0:7e:19:48:e6:ff:ca:e3:51:20:c5:38:89:b3:3e:40:
5d:d3:56:a3:da:81:e3:ba:e5:22:0c:28:eb:e2:f0:95:76:37:
8f:45:d3:9d:b7:14:30:c9:5e:1c:22:ef:e7:f4:46:9e:4b:f0:
e1:6b:85:9c:ce:98:15:85:1c:8a:ef:e2:84:37:5c:7a:5a:40:
2e:de:17:5f:52:02:83:c8:a7:36:69:a1:cc:9b:78:e6:65:d0:
b0:f3:91:bc:ad:48:e0:81:26:bb:21:dd:68:5b:df:90:a8:fd:
80:ac:cc:08:a6:f0:70:fd:11:59:f4:48:15:23:93:94:da:5e:
56:55:de:74:eb:28:64:a1:a2:bf:ae:93:b6:2d:83:23:1a:96:
b8:7d:07:64:e4:a7:a9:00:d7:69:8a:0e:a5:7e:a6:77:e1:3a:
67:c6:37:f5:cc:d6:b9:5d:7c:df:3b:69:e1:1c:ca:ef:5a:89:
bc:e8:89:52:2d:c2:2a:f4:0b:4b:42:1e:a3:7f:4a:4c:2a:fb:
07:10:24:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:50 2025 by rpki-client