Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
File: OeHApbBM1BmsHvkjvI1lcDIwYdo.mft (raw, json)
Hash identifier: ZDH0B7NNXfVSPZWbn/oM4Agdl4NZPDOeFjEON4xACVk=
Subject key identifier: 8F:62:A4:75:EC:53:60:3E:43:54:C9:0B:C9:C1:14:89:59:1B:D2:04
Authority key identifier: 39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
Certificate issuer: /CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Certificate serial: 0194BBCE59785D3EF6E948EF6A4991704675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: OeHApbBM1BmsHvkjvI1lcDIwYdo.crl (hash: p2jAmerH063GjddPFXC48c8zhdHXrTCIXeE4H2LqZAs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:59:78:5d:3e:f6:e9:48:ef:6a:49:91:70:46:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e1c0a5b04cd419ac1ef923bc8d6570323061da
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=8f62a475ec53603e4354c90bc9c11489591bd204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:7e:30:8c:17:45:f4:8b:86:fa:cc:06:09:
33:1d:8f:d0:59:bb:15:a3:3c:81:78:df:9e:1d:33:
fd:df:7d:fc:e8:4b:26:5e:18:29:20:39:49:7e:6a:
6f:69:99:df:7c:2e:59:56:04:01:c9:ed:b5:41:54:
e3:d2:6d:0c:73:7e:38:87:d6:02:37:60:6f:af:b7:
a4:82:2b:4a:88:b6:e0:6e:ab:e0:22:e7:a7:54:69:
dc:e9:6e:31:c6:20:a2:dd:4f:fd:ab:bd:34:31:9a:
2e:34:b0:79:44:08:ee:16:a4:9a:3b:03:05:8e:0a:
2e:b1:08:a6:20:76:7f:aa:aa:aa:72:84:f0:4c:69:
62:c7:34:68:00:06:f0:6a:2b:9a:c0:bf:53:56:a7:
40:7a:32:9e:bf:4a:32:fa:de:c2:61:c5:b0:a4:7b:
b4:45:f4:c0:5a:69:f4:b7:da:32:43:76:0d:43:24:
3a:81:53:57:9e:d6:70:d9:32:5e:98:50:23:bb:7c:
93:83:3e:e8:8e:c6:7c:e3:ce:55:63:72:ff:9a:85:
58:f3:ad:ed:f4:e1:52:9d:a4:e9:78:c8:0b:91:32:
d9:a3:8e:9a:7c:ee:b4:97:17:57:86:71:92:ff:87:
a7:bd:1a:82:a8:73:18:78:11:70:e8:99:7b:e7:fd:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:62:A4:75:EC:53:60:3E:43:54:C9:0B:C9:C1:14:89:59:1B:D2:04
X509v3 Authority Key Identifier:
keyid:39:E1:C0:A5:B0:4C:D4:19:AC:1E:F9:23:BC:8D:65:70:32:30:61:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OeHApbBM1BmsHvkjvI1lcDIwYdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3fa411-af98-4af8-b5b8-50e22ab71f84/1/OeHApbBM1BmsHvkjvI1lcDIwYdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:f1:ed:50:03:10:5f:a2:b7:19:fc:5b:53:65:d7:15:e9:3c:
72:f4:d6:75:be:64:d9:9d:09:e2:88:33:bb:f1:a8:0a:eb:03:
f4:f6:fa:fe:72:48:70:16:fc:83:54:c2:13:3c:f9:1e:05:e6:
b1:e2:ea:b6:87:63:e5:d0:d3:af:ee:a5:bc:72:81:f8:4e:a3:
73:84:11:0f:9a:a4:c1:63:19:8b:24:e7:4d:2a:17:d2:13:dc:
8f:d3:28:39:a7:9f:87:4f:ba:97:43:8a:54:d6:ba:73:85:d1:
b1:b9:4d:d7:2d:42:d0:46:26:98:21:e3:e9:0f:fc:03:27:15:
f0:1a:d0:f6:8c:a5:f3:d4:d3:99:f8:9a:38:dc:8e:98:85:0a:
ea:81:ed:af:ac:b9:6f:d7:6d:b9:a2:41:3c:50:aa:29:00:6d:
70:23:a6:28:94:c0:85:ce:f3:7f:dd:1d:16:b3:55:ac:fc:53:
89:0d:9f:3b:c9:9f:a2:70:e9:4d:6d:22:4a:45:52:8a:48:8b:
a3:ca:93:fb:9c:79:99:07:19:52:2b:bf:92:9d:de:44:be:17:
28:31:1d:83:65:7b:e8:1b:e0:6b:9d:89:37:d5:86:9f:f8:4f:
46:10:36:28:fb:07:94:3d:2f:45:e7:50:e3:58:d8:57:79:3c:
f2:a5:2e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:53:20 2025 by rpki-client