Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
File: Oeh-8DzxcaQLor7InmiLudOCWHM.mft (raw, json)
Hash identifier: cyMY0yNUY1760zfmv1yJrWgPZxk++BJg8YGj2csfhIs=
Subject key identifier: 8A:E9:D4:C9:2D:80:95:30:45:7D:6A:81:E5:42:DC:4B:00:8F:F6:E5
Authority key identifier: 39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
Certificate issuer: /CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Certificate serial: 0194BC04F29F249EBCECFCF0E0923943BF55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: Oeh-8DzxcaQLor7InmiLudOCWHM.crl (hash: xmVnE8EJM8hdWTpa1EXUff1RWEHvMS+atBVCRKubK54=)
2: n5SYr_9AWl7ry045zaGcqL0nDKk.roa (hash: T+InoEanLxjmmolVeMM0w1zQ5q4vdK0ebBhDTbrVjAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f2:9f:24:9e:bc:ec:fc:f0:e0:92:39:43:bf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=8ae9d4c92d809530457d6a81e542dc4b008ff6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:2d:82:f6:4d:64:40:e6:da:f8:9f:ed:ce:
aa:c7:15:03:d6:fb:36:51:c9:2d:49:3c:d6:d2:9d:
2c:61:62:b4:f0:4e:26:77:19:3c:3d:11:c2:ec:3f:
a5:42:99:74:55:28:3c:b1:c6:98:69:8a:37:ca:04:
f3:be:25:53:78:2f:f1:26:13:a3:91:5a:d3:88:5c:
fc:0f:3c:a9:06:a1:dd:c2:92:87:d1:b4:f5:e8:8e:
43:f6:a2:e6:e1:50:18:b5:1e:e3:bd:d9:33:f0:bf:
bf:a1:97:9f:ae:8f:74:ed:34:3f:d0:02:f5:ff:66:
0b:9b:45:a6:a6:54:0b:80:b3:23:7a:86:c3:57:c8:
ed:96:1c:ba:bb:22:fe:9f:7b:11:bb:eb:99:82:a0:
30:02:a5:69:b5:eb:cc:14:c9:75:89:87:eb:33:88:
1e:85:e1:e7:83:b8:f6:66:c9:8a:9d:ce:6f:52:e3:
76:0a:21:98:b2:48:c0:db:07:c0:be:78:f0:52:a3:
ae:49:85:2c:29:2c:34:3e:1f:87:c8:17:fc:e5:f8:
1f:f3:ba:1a:e5:d1:66:c7:c4:bc:94:32:88:19:f4:
a7:fc:f3:95:39:4b:fd:a2:be:eb:05:09:d8:37:d2:
b1:e7:ca:1e:5c:6d:09:fc:c4:62:c1:18:7e:fd:61:
27:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E9:D4:C9:2D:80:95:30:45:7D:6A:81:E5:42:DC:4B:00:8F:F6:E5
X509v3 Authority Key Identifier:
keyid:39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:05:37:24:d9:3c:46:58:78:86:e6:eb:91:f8:7d:a2:a7:aa:
54:b2:26:c8:c0:8f:83:20:51:41:64:c3:b2:d7:9f:d2:f6:be:
69:f2:5d:be:50:da:7b:8c:e5:25:88:8f:67:42:8f:1e:cf:a8:
95:f2:72:77:fd:30:77:82:f0:ec:6a:6c:98:cd:d5:3f:c4:c2:
56:da:42:a4:bf:d7:bc:b1:f1:ad:8b:24:e9:de:a4:5b:d5:df:
7d:48:0e:3e:bd:c8:e7:9a:3f:c9:ae:22:f5:b6:62:df:64:d3:
36:2d:06:b3:64:3b:dc:68:3e:bb:b2:3f:2f:02:60:5c:01:7a:
80:9f:a6:7a:5d:c2:42:b8:7a:90:50:45:ff:dd:05:15:30:c3:
b5:39:6d:b3:cf:86:cf:e2:f4:33:57:e0:6d:c6:8b:17:e0:11:
35:86:e2:84:1e:7b:f0:c6:6d:bb:f2:57:c9:b5:80:3a:5a:41:
74:2a:50:5c:28:dc:5c:c4:a3:8e:ef:86:b8:78:f5:fe:92:f6:
21:1b:ad:e7:23:51:77:34:2f:71:b2:33:f5:5d:7a:05:fb:f1:
c2:69:8a:e8:d1:c0:4b:58:c3:29:bf:5a:79:c8:96:86:48:75:
53:c4:63:b0:1d:c1:d5:4b:10:72:c1:20:20:26:f8:49:b0:40:
aa:74:48:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:17:25 2025 by rpki-client