Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
File: opYekZxsdKh1zuBhj-zF_WP5WVE.mft (raw, json)
Hash identifier: FhVdfaMzU9hhIL8b0Ib2RoHBp/+l4D+do8HR6eRT9CQ=
Subject key identifier: 1A:4E:18:FE:25:7B:76:F2:A4:43:01:6D:38:29:EB:3D:7A:CF:E8:F2
Authority key identifier: A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
Certificate issuer: /CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Certificate serial: 0194BCE0CE31FE35AEF83D0C30A3D80F9120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
Manifest number: 0247
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: opYekZxsdKh1zuBhj-zF_WP5WVE.crl (hash: 8Qgj3anU3GH1i2PUc9rGM923PZ0dz66TEeyJNdC/J/s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ce:31:fe:35:ae:f8:3d:0c:30:a3:d8:0f:91:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2961e919c6c74a875cee0618fecc5fd63f95951
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=1a4e18fe257b76f2a443016d3829eb3d7acfe8f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:f8:dc:47:69:8a:00:50:38:ac:23:d6:e5:
7d:0d:77:a7:ab:16:6b:8c:16:a3:83:5e:bb:c7:c1:
d6:df:82:76:01:4f:55:21:99:03:84:98:ae:7b:6a:
47:b2:e9:14:49:c1:48:56:a6:27:8c:50:3d:b8:ec:
fd:af:19:e7:13:a6:93:69:48:b9:fd:22:90:b7:24:
44:a9:e2:81:fc:18:c2:b0:be:92:61:48:34:08:54:
8e:19:96:20:3c:4f:43:9e:ad:08:e3:91:a6:92:58:
ef:50:e0:de:d7:54:8a:94:2d:cd:8e:02:f9:04:fc:
8d:c5:40:c5:5a:bc:5e:dd:c6:e5:22:99:40:f5:eb:
b8:cf:61:5b:bf:47:a6:be:9c:81:e6:4c:1c:72:7d:
90:04:37:10:a0:87:77:f7:8b:e9:78:46:f6:15:b1:
8b:e9:c0:b7:f8:1c:ac:a7:c6:86:8f:2b:08:64:cc:
62:18:76:21:b5:67:9d:96:a7:c0:c4:63:b9:2b:c0:
d9:46:cb:12:58:25:37:fe:08:5b:16:f5:d0:48:9d:
d7:bd:56:b5:29:a3:a1:48:14:c7:f5:f4:49:4c:ce:
06:4d:97:bd:69:cf:ef:15:ed:ab:b3:ac:26:3d:bb:
63:9a:b7:32:ae:40:b2:4a:15:d9:c1:36:e0:c0:b1:
b4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4E:18:FE:25:7B:76:F2:A4:43:01:6D:38:29:EB:3D:7A:CF:E8:F2
X509v3 Authority Key Identifier:
keyid:A2:96:1E:91:9C:6C:74:A8:75:CE:E0:61:8F:EC:C5:FD:63:F9:59:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opYekZxsdKh1zuBhj-zF_WP5WVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/100831-39f8-4bf3-be1a-4f5e265d1679/1/opYekZxsdKh1zuBhj-zF_WP5WVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:06:20:03:86:f8:58:3e:e5:d8:5f:14:86:9b:1e:de:d2:bd:
3f:f7:d0:ea:f6:98:87:b8:8a:3e:ff:ed:cc:42:07:63:15:1d:
ff:71:83:67:0d:90:30:a6:bb:f7:b8:4b:ee:9e:cc:fe:5c:82:
a6:9f:d5:c5:69:6c:7a:a6:b5:55:06:39:54:1a:d5:55:d7:f8:
8a:14:23:6f:bd:9b:ba:95:7f:61:15:6f:80:9d:8c:a5:6b:1f:
54:08:83:45:4f:19:98:11:c7:93:bf:89:d6:cb:87:0e:e0:83:
bd:58:a2:aa:b0:b0:f5:d1:b7:00:9c:a9:ac:b4:59:49:a7:da:
11:4d:dc:af:74:6a:41:53:62:2a:d5:fc:e4:0e:57:8d:2b:1e:
e9:a9:fb:a6:11:a4:bc:77:de:84:54:ec:18:c7:0f:6e:81:e7:
75:34:5b:c3:44:2b:b6:5d:46:1e:b3:c6:1f:86:04:cf:58:0c:
b5:b6:57:66:7f:4a:fd:a9:17:26:cb:85:10:fe:62:ed:16:e0:
a7:3f:41:42:e8:ce:ca:2b:37:d7:fd:8f:e3:ef:bc:bc:a0:e0:
01:a8:c6:e7:b6:5b:9b:6f:4e:f1:f4:48:f4:47:00:b4:d3:51:
5b:8e:fa:59:a9:da:56:c9:4d:63:c0:bf:6e:a9:5a:f3:50:a9:
0c:2e:34:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:30 2025 by rpki-client