Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
File: O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft (raw, json)
Hash identifier: 3SZWa9GxijpWst2m7PDtb5Yr88LUxgfDfjkTSARAHAY=
Subject key identifier: B8:4D:3F:B3:4A:8E:C5:A1:B3:EF:85:3A:27:D1:98:9D:12:6E:0E:DC
Authority key identifier: 3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
Certificate issuer: /CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Certificate serial: 0194BD17EB00FC8064471B60B5B8DA9B7A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
Manifest number: 0E69
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl (hash: iBG8hf/pJpSrFZ3AJFZB+We9Dxckqk4u0iULk/S3GDA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:eb:00:fc:80:64:47:1b:60:b5:b8:da:9b:7a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bf2c20da4d630182eee3345ad9d1c4ad9170d50
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=b84d3fb34a8ec5a1b3ef853a27d1989d126e0edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:37:fc:36:fb:1d:e6:d3:4d:4d:33:aa:5c:79:
79:28:54:4e:c9:9c:61:a2:2c:bd:98:b4:a7:bd:d5:
ec:44:32:06:06:3e:2b:80:f7:43:55:0c:d4:f6:b0:
3b:9f:2e:19:67:1e:cb:d8:9f:c2:db:ca:36:99:06:
29:3c:79:af:ef:ac:94:10:60:75:d9:35:d6:c0:8d:
3a:38:e9:e5:91:74:7f:11:34:d4:98:0c:7f:77:26:
0a:f0:16:08:14:9a:5c:de:fa:58:95:87:9f:f7:72:
df:c2:8d:03:c6:e1:94:24:0d:8c:01:d4:04:7a:85:
92:29:55:2e:40:69:35:17:00:df:32:c8:a4:88:4b:
db:38:cb:e5:7c:8b:88:48:2a:86:41:02:99:d5:ea:
c2:46:bd:14:4f:c3:f7:17:c6:b9:54:fb:2b:a8:15:
8d:ea:c0:90:4e:f3:a7:67:d3:80:6c:46:5f:1d:c0:
16:78:2b:5f:06:dd:ed:ff:95:ea:e3:56:32:9c:f0:
ec:b6:b6:85:9e:0a:ea:57:81:d1:42:71:81:8c:a1:
66:01:b9:b8:ee:78:48:9b:49:e6:7b:72:ab:2e:c2:
61:ed:de:cd:ae:3f:7b:14:52:b0:75:a8:04:83:ca:
34:49:43:8e:82:1b:0d:ba:24:57:dc:1a:37:12:bb:
68:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:4D:3F:B3:4A:8E:C5:A1:B3:EF:85:3A:27:D1:98:9D:12:6E:0E:DC
X509v3 Authority Key Identifier:
keyid:3B:F2:C2:0D:A4:D6:30:18:2E:EE:33:45:AD:9D:1C:4A:D9:17:0D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_LCDaTWMBgu7jNFrZ0cStkXDVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/072b46-0da1-42d2-899c-a0bda8af756a/1/O_LCDaTWMBgu7jNFrZ0cStkXDVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c0:35:fb:c9:d4:1e:14:e7:69:4f:48:8b:25:fc:34:c0:07:
89:83:e5:82:a9:8d:99:3b:c5:0a:ec:84:6a:8b:0c:a7:29:d9:
50:ee:43:0b:71:fc:f3:36:11:01:ea:ef:d7:17:38:04:e7:94:
88:59:50:f1:33:99:70:a1:fb:04:cf:bb:24:0f:7f:e5:8f:b1:
fa:a5:53:47:43:ab:a6:94:78:4e:f7:e2:8f:cc:db:35:ad:10:
5b:07:1e:f9:4a:fc:be:a0:ef:d8:37:b0:8e:fb:89:77:a1:c9:
97:bb:bc:e2:57:e3:04:48:ef:71:31:d2:86:30:64:74:33:15:
13:1f:85:60:5e:23:3e:60:20:da:b7:80:f3:df:68:0d:ca:1f:
90:58:1b:58:23:c2:41:25:de:b1:08:8a:07:85:43:c4:f4:c1:
ad:6e:70:0f:8b:8f:8c:41:54:45:25:8f:38:8f:97:e9:0c:42:
90:98:95:a9:38:6b:33:6a:b7:7b:12:f0:d8:c6:e9:f9:52:e4:
57:96:3d:c2:9c:ec:c8:73:89:93:f8:b2:cd:9e:6c:d2:52:d7:
55:13:7f:9d:5d:44:8b:23:75:e9:8b:91:32:e7:c5:b9:f6:41:
ac:dc:bd:f7:e9:d2:5c:60:f1:d1:66:c4:2c:0e:2e:f2:fa:a5:
96:f7:82:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:18 2025 by rpki-client