Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft
File: oWhu-kcXfglRrIjFZNj4hQvuxdA.mft (raw, json)
Hash identifier: 9r1kNy8+f2rTWhrFG/SH+bHUNQkL01loULwTb3PaFrk=
Subject key identifier: 94:E3:F4:1B:03:56:2E:98:14:AA:12:BF:37:9B:58:0B:B8:DA:C9:97
Authority key identifier: A1:68:6E:FA:47:17:7E:09:51:AC:88:C5:64:D8:F8:85:0B:EE:C5:D0
Certificate issuer: /CN=a1686efa47177e0951ac88c564d8f8850beec5d0
Certificate serial: 0194BC731B01A531035F9D04065F53E57F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWhu-kcXfglRrIjFZNj4hQvuxdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft
Manifest number: 0ABA
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: oWhu-kcXfglRrIjFZNj4hQvuxdA.crl (hash: Nbx5lCjqdPHL/Rsj/MAKb6Bsd5braOtoET4tOv6UPqc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:1b:01:a5:31:03:5f:9d:04:06:5f:53:e5:7f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1686efa47177e0951ac88c564d8f8850beec5d0
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=94e3f41b03562e9814aa12bf379b580bb8dac997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:52:15:87:c9:27:ba:e6:98:d2:5b:64:f0:
51:fb:91:11:78:43:4b:66:4a:5b:3b:19:99:62:02:
a2:b5:60:d1:e0:27:3b:14:d4:4c:30:4f:7b:c6:b1:
0e:c9:cc:dd:48:5c:1a:27:ef:04:94:50:56:f4:06:
32:cf:9e:55:83:3c:12:5f:63:e9:87:64:8e:5f:08:
4f:76:84:2c:46:44:93:17:ac:a9:99:f7:58:75:f0:
54:b7:99:1c:57:c4:30:f1:77:b5:01:fb:6e:25:1f:
9e:59:9d:85:ca:1a:65:73:69:c1:01:0a:b5:d0:1f:
33:f4:51:e4:83:be:80:9c:9c:9d:74:ab:6f:0c:87:
92:8f:cf:7e:8a:60:9e:85:71:f2:42:7c:94:c4:3e:
83:b8:39:b6:37:58:e8:98:e1:02:a6:56:ac:7d:73:
5d:15:ad:72:a7:af:3c:eb:ba:a9:ed:52:3b:0f:ab:
44:97:61:92:dd:fe:dd:ca:fe:ef:85:39:cc:73:1f:
b3:fc:26:b4:5f:60:56:ec:9b:1a:48:55:69:a2:7c:
c8:da:4c:cf:7e:ec:01:2a:bd:ca:a4:b1:97:aa:b2:
12:6c:23:34:56:df:82:68:9f:b7:e9:3b:35:e5:38:
a2:f0:67:3f:79:bf:98:fa:48:6b:b2:e1:56:17:f0:
d2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E3:F4:1B:03:56:2E:98:14:AA:12:BF:37:9B:58:0B:B8:DA:C9:97
X509v3 Authority Key Identifier:
keyid:A1:68:6E:FA:47:17:7E:09:51:AC:88:C5:64:D8:F8:85:0B:EE:C5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWhu-kcXfglRrIjFZNj4hQvuxdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/11d198-854f-4883-ab90-ca41b33b883a/1/oWhu-kcXfglRrIjFZNj4hQvuxdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c3:f1:b5:c2:c6:15:cf:20:7f:c6:fa:f3:bd:9a:b2:25:a7:
ed:5d:e1:ac:ae:bf:d9:01:7c:07:1a:b8:ac:e5:21:b2:06:df:
da:e3:08:45:01:f6:44:99:0e:71:72:0a:13:83:dc:87:a8:93:
a9:9f:5b:78:2a:77:44:5b:b7:69:45:20:48:c7:6d:8d:1d:55:
68:9a:91:3c:9f:8d:de:7b:2a:2d:5e:4a:64:fd:10:a2:17:11:
b5:fd:e2:4c:74:e5:ea:1b:7d:f4:78:27:00:58:2e:1f:20:6b:
55:eb:0f:87:40:20:0f:92:ee:c8:66:ab:a2:f8:47:dd:16:44:
f4:f0:d6:8e:e9:c0:2f:1a:c0:a4:3c:00:f0:3a:f1:34:1d:ec:
b8:57:b7:41:c2:c2:c3:2b:f5:2f:05:9b:20:7b:c3:e2:63:f7:
a0:55:f1:e8:47:31:49:b5:7f:df:28:8f:20:be:2f:07:92:37:
40:be:f4:99:2f:2e:f4:bb:ac:fd:bc:39:1b:e9:b6:0b:d6:21:
d6:84:85:59:a0:b8:54:a2:a9:fd:ef:8b:a5:75:71:f6:71:8a:
bf:31:be:99:35:13:34:65:fc:ab:ec:90:5d:e9:af:38:0a:c0:
3b:41:c1:5f:e7:d2:8e:c8:36:0e:7f:e2:9f:32:34:15:c2:f6:
52:f2:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:29 2025 by rpki-client