Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.mft
File: O8RoMnEppQF7l23I7aydG56aFMw.mft (raw, json)
Hash identifier: yk/7bYjIOvNytE6tu69zM/kGovHESd3OxIRbZRMAzrM=
Subject key identifier: 32:6C:31:92:43:1F:0E:35:EB:AF:17:44:51:E1:70:A9:3E:56:C9:55
Authority key identifier: 3B:C4:68:32:71:29:A5:01:7B:97:6D:C8:ED:AC:9D:1B:9E:9A:14:CC
Certificate issuer: /CN=3bc468327129a5017b976dc8edac9d1b9e9a14cc
Certificate serial: 0194BD17D32A849D8FC9D3C66F15ECD7D3D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8RoMnEppQF7l23I7aydG56aFMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.mft
Manifest number: 13B6
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: O8RoMnEppQF7l23I7aydG56aFMw.crl (hash: ctJtqcZ1d5Q079wOqlyc2kUqTAThb2wx3cJYFxcEPq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d3:2a:84:9d:8f:c9:d3:c6:6f:15:ec:d7:d3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bc468327129a5017b976dc8edac9d1b9e9a14cc
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=326c3192431f0e35ebaf174451e170a93e56c955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ba:76:97:23:8c:b7:ce:d6:7d:65:b1:ee:18:
38:96:12:c0:02:ee:ea:4c:15:b3:5c:a2:96:d5:0c:
30:89:cd:a6:c8:c4:2a:8b:9e:c9:60:3b:83:60:98:
53:b9:a1:33:fa:77:0c:66:3f:ff:92:30:06:58:c1:
a8:a4:c6:a6:fe:be:27:80:c1:74:42:bc:21:2f:b0:
ec:c3:c0:a9:be:cf:51:3f:c8:12:fb:a4:73:dc:63:
71:bc:38:3a:f4:6d:66:45:f8:5b:d7:e9:5b:1e:5c:
ee:6e:d8:bb:cf:bd:9f:05:30:99:48:f0:e8:9a:27:
23:9d:fe:c5:07:c9:a8:1c:18:f9:e6:7c:9d:17:c5:
7e:ea:4d:7a:65:88:f8:88:83:ca:5a:b0:b1:48:ad:
49:a7:05:99:c1:dd:a2:38:df:80:7b:75:4c:55:47:
7e:f5:27:23:05:8b:94:61:97:85:77:9e:4f:b1:86:
89:16:d2:ff:ad:55:dc:25:f5:cd:50:60:46:5d:d1:
d0:73:41:38:b4:21:d9:ae:cc:8f:58:f7:e8:96:f0:
85:54:ac:05:56:3f:a8:89:e2:eb:ad:42:e8:5e:f0:
e2:52:31:5e:04:82:64:81:84:ab:f5:50:a6:8d:52:
b1:1e:b2:7a:7b:e2:e5:ae:71:33:92:e5:78:c0:7a:
11:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:6C:31:92:43:1F:0E:35:EB:AF:17:44:51:E1:70:A9:3E:56:C9:55
X509v3 Authority Key Identifier:
keyid:3B:C4:68:32:71:29:A5:01:7B:97:6D:C8:ED:AC:9D:1B:9E:9A:14:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8RoMnEppQF7l23I7aydG56aFMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8d4c03-5fc7-41ac-94f6-1f02c7e923b3/1/O8RoMnEppQF7l23I7aydG56aFMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f4:09:6d:53:6e:56:06:79:77:d5:fa:50:51:92:88:56:79:
b3:16:ce:1a:71:10:04:a7:3b:69:70:9c:ff:a9:2a:14:55:86:
78:0e:7a:6c:01:7b:d3:56:f6:6e:c8:d8:a0:49:04:8f:97:1c:
cf:05:84:91:17:a3:cf:2e:99:4d:02:c9:67:ba:94:4c:08:5b:
dd:50:bd:d7:a3:ab:aa:a7:68:6e:e4:3f:e7:06:1f:61:d9:d5:
ba:f0:1f:bc:8f:2b:0d:a2:9d:6e:2b:71:a5:18:05:65:51:35:
6f:99:32:39:b6:32:92:c9:c5:93:82:84:f4:dc:49:c5:7a:78:
22:4f:54:2b:8d:87:17:6c:8c:71:e7:49:be:1c:a8:84:c4:5d:
8b:c3:8a:7f:33:64:fb:62:60:87:1d:2e:c5:b2:78:80:19:a8:
4d:c2:94:2f:eb:e2:6b:7c:d9:a5:6a:9e:c8:90:5f:ba:6c:f7:
13:bb:10:f0:b2:05:aa:0f:d5:c7:61:86:f1:4e:e1:87:17:be:
1e:7e:07:de:52:e7:ad:06:d2:ed:82:54:d1:3c:7a:59:f2:cb:
c6:f3:fd:f2:6f:71:4f:4b:a0:04:64:60:f4:fd:bb:cf:b8:34:
97:dd:58:9e:a8:ce:34:52:2d:96:14:49:89:f7:2e:da:5e:79:
ef:70:65:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:19:06 2025 by rpki-client