Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
File: mO4cQpzn8y4xDctEE9iv6MdkWmE.mft (raw, json)
Hash identifier: Litt/HJyoOHiVIKa4Mv8x9cZhRCVJBbOTKoKqW7Rjv0=
Subject key identifier: 90:A0:35:32:FA:7A:5F:4F:73:D4:5F:37:12:23:A4:31:98:06:19:96
Authority key identifier: 98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61
Certificate issuer: /CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
Certificate serial: 0194BBCE75954A96B10CE6D6EBA4D88CA3EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
Manifest number: 0865
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: mO4cQpzn8y4xDctEE9iv6MdkWmE.crl (hash: eE4Uepe11EsABDEmEH9I9lQ1XAKF47VB3F1RCRjhASU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:75:95:4a:96:b1:0c:e6:d6:eb:a4:d8:8c:a3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=90a03532fa7a5f4f73d45f371223a43198061996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:db:f9:0a:b7:d4:99:9a:d4:14:cc:54:2a:55:
1e:b6:8a:d5:b8:e8:a5:11:bb:dd:5d:bd:92:4e:f0:
66:9d:be:7d:85:16:8b:8b:96:0c:21:c6:ae:4a:d2:
16:74:bf:a5:b7:c2:f6:61:9a:07:a9:20:1b:f5:f8:
35:8a:02:6e:1c:91:10:f0:4d:d2:32:4f:ca:07:1d:
94:00:96:6f:d9:ca:7c:5e:69:b6:2a:dd:6d:66:18:
c1:a9:3b:08:d4:7a:d1:5c:f4:78:8c:51:0f:33:00:
78:f1:d5:7d:e7:ac:96:97:34:22:f8:cd:11:a0:34:
79:75:59:13:43:e7:f3:af:a7:77:91:1e:ea:2e:49:
bf:17:ca:a2:3d:e9:e1:28:21:22:71:3b:c9:82:04:
ac:4b:fd:73:73:64:f4:c3:bd:79:1f:04:83:99:cb:
ea:5e:e7:e8:24:44:5b:90:b5:df:ea:3c:f8:d7:2f:
a4:50:e2:e9:96:a2:8f:d2:7d:14:97:26:a9:8e:0e:
7a:70:c2:34:cb:65:7b:50:dd:d7:75:e5:b1:72:4d:
73:8f:96:3d:6d:d3:62:7b:d0:38:9c:af:dc:6a:6a:
a4:a0:72:6c:23:9d:da:00:0e:9e:10:6c:83:1b:d2:
1e:62:09:65:ca:47:dc:70:ba:39:af:31:c8:10:12:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A0:35:32:FA:7A:5F:4F:73:D4:5F:37:12:23:A4:31:98:06:19:96
X509v3 Authority Key Identifier:
keyid:98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e0:46:ee:94:31:53:72:2f:b4:95:06:22:4d:42:59:23:4a:
4b:03:33:c6:94:be:df:54:fc:59:ae:50:4f:71:87:a7:76:a4:
24:e6:6e:b0:35:fb:c9:49:63:fe:41:32:55:ea:76:af:9f:67:
57:6c:1e:69:25:d9:dc:92:a0:24:8e:18:ec:50:db:e1:37:ce:
5d:77:36:d3:ed:b2:a2:d0:a9:8e:b9:20:c3:dc:b2:93:08:b2:
86:cd:74:f3:24:5e:94:e1:ed:24:03:fc:21:20:fc:aa:13:0d:
31:63:d8:77:de:21:a5:2a:41:0b:96:23:c5:57:c6:37:f6:cc:
e3:bf:31:2a:24:c1:68:c2:16:d8:67:3b:42:76:66:c8:9f:b6:
6e:82:6c:08:1e:e7:25:76:6b:f4:a9:19:16:12:4f:bf:1d:a3:
40:15:6f:cc:14:91:81:36:7a:37:a0:0a:76:80:2f:74:52:8e:
f2:a7:aa:cd:5f:6e:44:8a:83:15:73:de:66:51:a9:cc:95:e0:
3b:0a:44:43:65:b6:4f:8a:d7:e7:7c:78:8c:89:e2:89:55:d6:
e5:bc:ad:bc:b4:94:94:c3:63:57:41:d5:07:45:90:c8:75:16:
14:e1:d7:95:7e:6b:37:34:ed:40:18:e0:f4:03:f8:1c:8a:9f:
6b:7d:0b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:46 2025 by rpki-client