Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
File: ovrHXzkOiAUoM33Qvc3HeTS43zw.mft (raw, json)
Hash identifier: FMH+XbhLJoJjfOZcSBnClbJnKl0d5mlgZk2DLLwCrak=
Subject key identifier: 8A:38:6B:EB:FB:E7:00:8C:CE:B9:44:04:26:32:1B:17:7B:63:73:DD
Authority key identifier: A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
Certificate issuer: /CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Certificate serial: 0194BC3C60078C939F536AF20BBAC81911AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:01:00 +0000
Manifest this update: Fri 31 Jan 2025 12:01:00 +0000
Manifest next update: Sat 01 Feb 2025 12:01:00 +0000
Files and hashes: 1: ovrHXzkOiAUoM33Qvc3HeTS43zw.crl (hash: r6YubBI01iLHppI61td8kKb8rmz/JCBolqdJ//gSapw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:60:07:8c:93:9f:53:6a:f2:0b:ba:c8:19:11:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2fac75f390e880528337dd0bdcdc77934b8df3c
Validity
Not Before: Jan 31 12:01:00 2025 GMT
Not After : Feb 1 12:01:00 2025 GMT
Subject: CN=8a386bebfbe7008cceb9440426321b177b6373dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:23:06:06:94:60:e0:2e:a2:c7:b2:6e:8a:
60:dc:79:89:43:fa:2f:39:07:b3:1b:ee:5c:3d:08:
23:c8:d7:3b:b3:d3:a7:b3:bc:2f:6e:4e:b4:e9:b2:
78:08:8f:d9:6e:ea:96:43:9f:7b:db:da:eb:7d:ee:
ef:eb:d7:35:02:0e:c1:88:f5:de:63:60:40:d1:91:
5a:dd:81:e6:ec:f2:36:5f:b8:00:89:4e:f4:4d:c2:
56:03:3a:d8:4d:fa:c1:ae:42:c0:09:3a:06:b5:28:
4a:1f:b2:24:9e:7b:47:6c:f6:d0:c8:9c:83:b7:74:
00:36:6f:94:11:b0:3b:69:97:7c:7d:45:37:2d:c1:
64:74:18:2c:f0:08:8d:21:c8:0f:41:1c:6e:91:0f:
63:86:d7:3a:4e:d4:d5:cd:c1:0c:e4:20:1d:bc:b2:
2b:da:3a:ad:30:ef:08:78:c2:70:2e:14:db:e5:04:
70:61:5f:7d:3e:8f:0d:f0:68:84:b7:fc:ab:3c:2f:
c9:48:74:68:bc:2f:18:73:ae:04:35:5b:2a:96:43:
75:74:97:0a:6e:b7:2e:c9:e5:79:72:ee:a5:44:d4:
be:de:00:d0:c6:ee:98:7b:33:45:ea:8d:76:09:28:
9f:6d:83:0a:83:a3:c1:a4:35:e2:f1:7a:32:c1:7d:
20:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:38:6B:EB:FB:E7:00:8C:CE:B9:44:04:26:32:1B:17:7B:63:73:DD
X509v3 Authority Key Identifier:
keyid:A2:FA:C7:5F:39:0E:88:05:28:33:7D:D0:BD:CD:C7:79:34:B8:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ovrHXzkOiAUoM33Qvc3HeTS43zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/483093-36db-4043-b6d6-762259ab9500/1/ovrHXzkOiAUoM33Qvc3HeTS43zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:31:58:3e:ff:37:ed:32:b0:62:eb:7d:ab:76:6b:b5:e4:0b:
71:89:9d:67:0a:03:56:cd:dc:8b:d4:20:5d:ac:39:6c:7c:43:
31:c6:c5:9e:49:3d:42:b9:c5:6e:61:78:0b:9b:0e:ca:51:73:
5a:bc:35:7a:fe:91:99:4b:0c:42:4d:98:14:f7:58:e5:72:d1:
f1:47:3e:6b:88:06:d0:0d:9a:32:c2:a4:bd:9d:62:18:6b:ad:
bb:12:55:61:c3:98:41:eb:3c:72:3b:76:33:30:13:9c:56:a1:
1f:ca:46:af:10:44:b8:be:4e:98:5b:a3:f3:3f:6d:4d:09:54:
41:25:d1:e8:3e:f2:f2:e9:98:c8:ed:cf:34:b8:68:32:12:a9:
c2:e5:2f:4e:d3:33:3f:39:84:f1:85:9e:7d:66:a8:2e:a0:59:
61:4e:9c:1d:0c:84:44:cc:86:51:7b:35:5f:a8:59:be:d6:39:
75:4d:a8:6b:a7:c8:7f:dd:e3:44:37:d1:04:9f:1b:61:50:68:
3c:ef:41:ac:a3:c7:c3:de:10:f9:64:19:40:0a:34:4f:40:89:
2d:9a:41:b4:30:08:b0:c2:37:86:e6:aa:4d:e0:b2:18:58:67:
0f:31:ce:2c:52:c0:4c:e2:75:79:e9:48:49:f1:6b:9d:42:4a:
12:a2:cf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:20:26 2025 by rpki-client