Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
File: OEzdzXTQQilYPSwr7tBz4AlrozU.mft (raw, json)
Hash identifier: K0esEVtm6qIg4WDi1gFIiqZJ+Z6oqXsUuURjCsW/k3g=
Subject key identifier: 94:B8:A8:02:50:7F:09:A0:53:31:AF:CF:0B:1E:A2:47:77:D2:F1:D8
Authority key identifier: 38:4C:DD:CD:74:D0:42:29:58:3D:2C:2B:EE:D0:73:E0:09:6B:A3:35
Certificate issuer: /CN=384cddcd74d04229583d2c2beed073e0096ba335
Certificate serial: 0194BBCE5F34335CD307E9DEE44C04E2D325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
Manifest number: 047C
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: OEzdzXTQQilYPSwr7tBz4AlrozU.crl (hash: cR0GE9YfnwHdVW8evf6vKWLx68yWjQ69wijeNeI/Qxg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5f:34:33:5c:d3:07:e9:de:e4:4c:04:e2:d3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384cddcd74d04229583d2c2beed073e0096ba335
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=94b8a802507f09a05331afcf0b1ea24777d2f1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:d7:7a:b5:f4:dd:6b:aa:00:dc:36:b8:ea:
64:a9:90:f5:cf:96:ab:1b:2e:25:51:7e:a4:be:65:
79:28:21:9f:b2:86:7e:61:89:fa:ec:ae:c9:82:f5:
ff:5e:3e:91:1a:c0:ba:97:9b:9f:af:68:d5:be:45:
7f:e2:83:96:1d:18:f6:78:97:30:1e:8c:a2:14:32:
9a:74:26:9e:aa:b3:a9:2e:09:69:08:04:45:d9:45:
12:4f:90:03:5c:75:79:f5:98:5c:11:51:37:47:c9:
4b:8f:76:a0:eb:af:fd:a3:9e:1b:df:42:aa:2c:7a:
7f:40:26:e8:cf:41:19:0d:84:3c:5a:38:6e:dd:8e:
f0:25:81:99:51:38:5b:0a:ee:f5:fc:14:97:5c:ed:
89:f9:38:5e:24:c9:bd:97:12:57:69:50:ba:07:45:
6c:7b:35:aa:3f:fa:ec:6d:b2:ad:83:4e:57:c9:ba:
14:70:eb:c7:94:a3:9e:97:8f:af:e3:1e:ce:84:0b:
64:ab:5b:36:5b:94:e3:27:68:c8:e9:2c:8e:aa:55:
c8:e5:9d:21:17:f8:4f:fd:6d:b1:c6:ad:cf:74:bb:
0b:dd:3f:4d:dd:22:58:47:e5:18:37:79:49:01:7c:
26:7d:b3:3a:a9:75:06:33:0d:7d:cb:71:60:15:71:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B8:A8:02:50:7F:09:A0:53:31:AF:CF:0B:1E:A2:47:77:D2:F1:D8
X509v3 Authority Key Identifier:
keyid:38:4C:DD:CD:74:D0:42:29:58:3D:2C:2B:EE:D0:73:E0:09:6B:A3:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEzdzXTQQilYPSwr7tBz4AlrozU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/151c3e-95d8-483b-8dc2-998ad50f4a2a/1/OEzdzXTQQilYPSwr7tBz4AlrozU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:34:33:4e:04:83:d2:0a:89:c0:13:3d:20:da:92:01:b9:72:
db:2c:f2:45:ff:54:af:10:6c:55:bc:4c:6c:5c:37:09:0f:b9:
dc:a7:03:65:98:75:07:7b:a5:53:fd:ab:70:9c:b2:38:6d:8e:
17:01:a9:5c:a8:fa:fb:ff:c2:ac:81:90:8b:b3:b9:5c:43:55:
9d:a7:ae:78:2f:79:9c:96:ec:da:5e:c6:7d:6b:9e:92:11:d3:
78:75:f9:c8:3d:9c:59:c2:ed:16:7f:9e:7e:e9:a1:91:72:33:
51:1d:2c:2b:db:27:e3:92:90:0a:c9:ec:61:b1:5f:98:0e:89:
62:1d:fb:17:cf:5e:6c:59:b1:b6:86:02:32:f8:9d:6d:ec:51:
cc:21:0b:f5:4b:9f:31:44:7f:a4:86:3f:58:32:cb:66:f3:72:
11:f4:4f:b0:98:93:77:a7:ae:20:77:8d:91:15:77:cb:e0:7a:
55:97:06:3e:4b:5f:f8:39:4a:07:94:a6:1d:d5:d5:f5:1b:da:
84:34:97:c1:15:fa:89:1a:cc:a7:b3:89:06:99:50:d1:16:11:
99:a0:b2:23:07:4a:ba:b4:97:81:26:bd:a4:2a:e5:c0:ea:c7:
f6:e1:ad:8f:00:df:77:ca:63:36:9c:43:77:ca:f8:c1:b3:21:
a1:12:92:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:05 2025 by rpki-client