Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
File: o2osPu23l22c4wRYHyNTL-y0bn8.mft (raw, json)
Hash identifier: u/yhY5id1TKtAJSuUBnmSvzaaWIrIejvmy4wbKG6Uoc=
Subject key identifier: 36:02:C3:36:D6:D4:E5:86:B0:8E:E0:A6:A2:C8:21:C7:5D:33:42:13
Authority key identifier: A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
Certificate issuer: /CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Certificate serial: 0194BC3C4CDC6D9724A97A428EA867C2D7E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: o2osPu23l22c4wRYHyNTL-y0bn8.crl (hash: vhVqz6Q5kMowztndWO7vzPzTqmNCTKz05/vN7BaFCqs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4c:dc:6d:97:24:a9:7a:42:8e:a8:67:c2:d7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36a2c3eedb7976d9ce304581f23532fecb46e7f
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=3602c336d6d4e586b08ee0a6a2c821c75d334213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:a8:52:d6:0c:f2:0d:19:12:0d:d4:cd:56:
f3:fd:26:a8:7e:ed:f4:54:48:1d:25:3d:0f:0f:6b:
51:65:3e:38:0f:e1:45:c9:36:00:47:5a:e5:e1:90:
25:b4:ce:ac:4b:f0:44:c9:d4:15:e2:55:0f:f7:f6:
09:67:f6:d3:88:66:ee:bd:23:78:5c:29:ad:6e:98:
41:b7:e1:59:7c:03:a9:15:d3:37:49:36:f5:0c:a2:
e5:72:c2:c7:f3:fb:32:9e:d4:1b:03:58:e9:ae:e3:
a0:a5:fa:58:0b:63:e9:22:c8:01:37:b2:08:1b:6f:
a3:2a:f0:63:99:09:aa:66:cc:89:40:61:76:58:62:
d6:ea:71:e7:c2:38:fa:25:de:fc:c9:12:1a:e0:33:
ff:88:72:19:47:da:4d:38:77:ed:c9:34:d0:7f:3f:
9c:72:77:a2:70:91:bd:84:38:51:b1:41:01:6f:06:
2d:1b:e4:b3:dd:65:08:2a:15:ea:3c:a6:6f:0f:9a:
4e:1b:57:e9:f4:f2:21:7b:f7:cd:85:bc:b6:b0:e0:
19:dd:14:35:2e:99:ca:16:33:d3:a9:36:3f:f9:bd:
2d:ef:b8:e1:60:1e:ef:94:e6:0c:9f:36:61:f5:ac:
bb:c7:13:bb:b4:92:1c:4a:b5:03:e5:e3:56:65:64:
1f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:02:C3:36:D6:D4:E5:86:B0:8E:E0:A6:A2:C8:21:C7:5D:33:42:13
X509v3 Authority Key Identifier:
keyid:A3:6A:2C:3E:ED:B7:97:6D:9C:E3:04:58:1F:23:53:2F:EC:B4:6E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2osPu23l22c4wRYHyNTL-y0bn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/9185e2-b929-4236-a98b-dde1923ba724/1/o2osPu23l22c4wRYHyNTL-y0bn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fa:39:6b:44:62:64:b9:53:c6:e1:8b:01:9d:fc:1b:b7:d5:
7b:f8:ba:43:01:d4:12:6e:1d:bf:43:33:40:ce:a8:51:d2:fe:
de:f4:f0:75:e4:0a:0e:2c:58:97:56:4f:96:bf:67:90:2a:b2:
46:27:52:05:5a:8f:58:1a:40:9f:f2:0c:ac:d6:3d:3a:84:2a:
73:58:79:5a:57:97:10:1e:b0:fe:c6:dd:e0:c7:42:28:8c:46:
b6:e7:88:d3:05:06:b4:f9:ac:af:92:9c:e2:b3:8c:d6:90:e7:
87:67:cb:1e:15:3c:0c:ac:f2:34:ec:dc:a8:9e:1f:f8:e0:32:
35:95:76:8b:04:9e:cd:3d:c0:b0:e1:83:2b:b9:c3:01:c9:3b:
c3:fb:0f:2d:0e:3d:94:b7:07:df:4f:bb:86:28:60:c2:fc:87:
d3:37:16:73:e5:d9:73:72:da:58:3a:5e:41:f5:0a:54:d1:6f:
94:f7:b5:7a:c5:ae:7f:7a:9c:69:06:96:93:c7:5c:d7:6f:6c:
80:b7:60:8e:54:21:b2:08:e0:24:1e:65:65:e5:35:ec:cb:b8:
7a:af:b4:2f:7d:fa:66:a1:45:5a:9d:a7:32:9a:bf:cd:8c:bf:
71:07:16:b2:cf:3e:18:a4:80:92:fb:b6:a7:15:df:72:3b:85:
0e:26:dc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:28:03 2025 by rpki-client