Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
File: o6VWBFl7BrDqzoivsakP_5N9l-o.mft (raw, json)
Hash identifier: jWr24qVqBghD2cqrE9Fdke8NXGaQJ1iL/akFUwP1cwo=
Subject key identifier: 07:A9:5F:97:FF:18:18:9C:D5:11:8E:06:C1:6D:01:56:8A:98:58:8A
Authority key identifier: A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
Certificate issuer: /CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Certificate serial: 0194BBCE40B33D1EEDD9AE201CF5E5806923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:43 +0000
Manifest this update: Fri 31 Jan 2025 10:00:43 +0000
Manifest next update: Sat 01 Feb 2025 10:00:43 +0000
Files and hashes: 1: o6VWBFl7BrDqzoivsakP_5N9l-o.crl (hash: JMYVuQfWxmxNHXb6IBkFIFCX0jqoUYMZnh2HKsFYQ2k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:40:b3:3d:1e:ed:d9:ae:20:1c:f5:e5:80:69:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a55604597b06b0eace88afb1a90fff937d97ea
Validity
Not Before: Jan 31 10:00:43 2025 GMT
Not After : Feb 1 10:00:43 2025 GMT
Subject: CN=07a95f97ff18189cd5118e06c16d01568a98588a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:aa:12:24:69:e5:01:66:ce:59:b2:6f:31:b2:
94:c0:e3:47:97:40:ea:4d:48:de:65:24:7d:f4:32:
80:54:d9:23:f3:31:c0:4d:80:e6:e2:3e:3a:ef:7a:
84:2e:11:22:87:8d:9d:3e:0e:55:07:93:a5:d3:00:
85:95:21:d6:53:2a:30:ac:26:2a:f2:81:77:86:b1:
90:94:93:15:cb:81:7b:0c:aa:2b:5c:e5:28:5f:e9:
7a:fa:4a:15:c2:c7:2d:41:10:b7:5c:83:98:79:6e:
9d:80:3c:88:5b:a1:4f:96:73:74:8e:37:a5:d8:13:
50:39:bc:b5:e1:cd:4d:f7:06:ad:ee:b6:d6:ba:20:
35:36:66:76:7c:b0:89:0f:8d:6e:82:96:ea:ac:92:
7e:12:2c:3c:e2:f5:6d:22:9f:23:0e:46:bd:bb:fa:
7f:2d:b2:3a:ba:95:45:90:6c:3d:5b:06:86:9e:e5:
b1:77:6b:2d:72:8f:f2:cc:6c:9a:f5:0c:53:a4:a2:
71:b9:83:61:bc:21:44:bc:70:c6:00:25:8b:61:b0:
21:6d:33:d8:33:1a:19:00:4b:2a:4a:a1:9e:f5:93:
da:80:ad:2c:89:07:67:35:7f:f4:5a:99:f4:1b:ed:
47:45:5a:7e:21:b0:e7:14:7e:13:e0:1c:ed:e7:8b:
0a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A9:5F:97:FF:18:18:9C:D5:11:8E:06:C1:6D:01:56:8A:98:58:8A
X509v3 Authority Key Identifier:
keyid:A3:A5:56:04:59:7B:06:B0:EA:CE:88:AF:B1:A9:0F:FF:93:7D:97:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6VWBFl7BrDqzoivsakP_5N9l-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f9ff1b-8379-49d1-b80a-fac4bb83ed28/1/o6VWBFl7BrDqzoivsakP_5N9l-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:99:47:20:e2:ed:1e:cc:f5:4c:45:4c:5b:91:2f:28:7c:49:
1d:a1:2d:2e:4e:67:a6:f5:e4:13:cd:d7:40:35:ef:e8:72:26:
7b:d6:21:52:eb:1b:d5:12:98:3a:fe:4f:23:2d:9e:c3:a4:18:
69:29:77:ea:72:96:58:08:46:8f:e1:1a:2d:69:43:30:7c:95:
a3:ed:85:68:92:9b:09:8b:74:97:0a:05:de:9d:f8:61:a4:5f:
9d:ef:75:b6:80:d9:53:de:f3:07:f3:f5:a4:fb:32:e2:e2:5d:
82:b2:97:21:23:a2:40:3c:26:a7:08:44:d6:a0:81:58:f8:04:
cb:4a:1a:24:1a:0d:f2:27:9b:b5:4e:f2:52:c7:6d:c4:fa:c6:
11:a6:44:ce:f4:cf:9d:f6:26:77:30:1f:7d:68:c9:ea:67:b3:
3b:6b:cf:f7:77:c7:f1:4b:ac:b7:db:60:02:ac:88:46:e1:0f:
ab:0e:9a:b5:1a:a2:4b:35:a1:3c:8b:b9:e2:61:30:83:a9:11:
de:b8:b7:25:42:9f:d6:1a:26:54:1c:00:1e:2b:b9:77:99:4f:
50:d8:31:4c:79:6c:34:90:0e:0e:b7:ca:49:15:2d:19:e6:9c:
9d:48:51:b4:37:ef:50:78:72:a2:43:b8:fc:db:c3:0f:be:44:
27:8e:ab:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:54 2025 by rpki-client