Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/959dad-90c8-40b6-8740-2eedae0fa788/1/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.mft
File: OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.mft (raw, json)
Hash identifier: 8reuXltC/WCF33Hz/sPqD8CB99j47p2NEsk1jT7i+/o=
Subject key identifier: 7B:8D:E6:F2:31:CD:53:AE:1F:61:0B:DB:D9:20:19:D2:82:CF:B4:1C
Authority key identifier: 38:BA:0B:9D:0F:1F:67:4B:13:97:CF:CE:A6:DD:46:80:C8:35:1A:F9
Certificate issuer: /CN=38ba0b9d0f1f674b1397cfcea6dd4680c8351af9
Certificate serial: 0194BC72E54D352980552078F359F479CA11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/959dad-90c8-40b6-8740-2eedae0fa788/1/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.mft
Manifest number: 31
Signing time: Fri 31 Jan 2025 13:00:33 +0000
Manifest this update: Fri 31 Jan 2025 13:00:33 +0000
Manifest next update: Sat 01 Feb 2025 13:00:33 +0000
Files and hashes: 1: OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.crl (hash: mLjkNjqSyk4IGDf9Y/HLKmTs5wyzp6QCHvJGUirjENA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e5:4d:35:29:80:55:20:78:f3:59:f4:79:ca:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ba0b9d0f1f674b1397cfcea6dd4680c8351af9
Validity
Not Before: Jan 31 13:00:33 2025 GMT
Not After : Feb 1 13:00:33 2025 GMT
Subject: CN=7b8de6f231cd53ae1f610bdbd92019d282cfb41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:27:64:9f:4e:4e:7a:51:34:d7:6a:43:bc:d1:
0d:ea:46:eb:54:0c:a4:43:4b:c9:2e:c3:ee:a1:f6:
4e:96:a2:26:5d:14:3f:3c:66:2f:ec:4c:68:e0:37:
57:ff:24:65:ba:87:7d:48:55:9b:22:64:59:af:35:
af:42:33:d7:e5:cc:33:c7:34:7d:53:89:d8:08:9b:
ed:f8:23:c5:46:b8:ff:b4:04:52:a4:eb:ed:1d:7e:
22:dc:39:db:ff:ad:e6:a6:96:49:2d:ba:5e:f3:21:
87:d7:be:ab:66:d8:37:34:51:30:31:5a:21:da:dc:
a4:85:e7:1e:79:07:11:4d:a1:f2:8b:d3:29:94:6e:
2c:05:88:90:d3:b6:c9:f8:40:2a:5d:13:91:64:e8:
d5:b5:d2:39:1b:d0:bf:4e:cf:e0:82:de:87:d6:fa:
02:40:5f:e6:70:49:33:f0:34:56:89:1c:df:32:94:
8d:fe:15:5c:5d:e1:60:5b:5d:ec:dd:98:f4:4f:ab:
33:4c:2c:78:11:bd:10:87:20:f9:c5:ac:26:8e:2f:
88:73:68:ae:cd:f6:c9:f0:fb:4d:c4:71:3b:74:c1:
a7:5e:55:7e:60:02:ec:91:59:92:ab:2b:fd:e0:cb:
83:96:de:7f:d7:a6:8f:45:7d:05:cc:fc:25:57:32:
71:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8D:E6:F2:31:CD:53:AE:1F:61:0B:DB:D9:20:19:D2:82:CF:B4:1C
X509v3 Authority Key Identifier:
keyid:38:BA:0B:9D:0F:1F:67:4B:13:97:CF:CE:A6:DD:46:80:C8:35:1A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/959dad-90c8-40b6-8740-2eedae0fa788/1/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/959dad-90c8-40b6-8740-2eedae0fa788/1/OLoLnQ8fZ0sTl8_Opt1GgMg1Gvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ee:18:80:34:1a:f7:18:7f:1d:27:39:cd:fb:7f:5e:6c:e1:
53:85:ef:c4:d3:35:0d:29:64:a9:da:0b:e8:1b:33:6d:5e:47:
53:42:25:c4:9f:03:3b:4a:bd:83:7c:e9:74:55:6e:49:06:93:
0f:3b:69:7b:32:0b:cd:26:03:4d:cc:8f:60:d3:68:f0:3b:a0:
14:60:8a:36:ac:14:ca:99:b4:a7:0c:91:58:16:31:7c:0d:04:
87:05:bd:b8:93:cb:b6:c6:43:f7:3f:e4:ce:1d:5b:fb:28:80:
e3:98:8b:26:9c:c0:da:22:1b:97:44:6f:c0:fa:91:b6:b4:fc:
3d:f6:1b:f2:ad:b1:4d:be:6e:01:94:9e:d2:57:e3:8f:9e:14:
50:15:e6:8e:bc:a5:3d:07:ac:91:ab:12:38:3f:b8:25:2b:ea:
82:3d:ec:51:5f:ac:b4:ea:b2:9e:3c:83:39:0f:9f:ff:24:87:
c9:e7:98:1d:68:50:d9:3d:c1:c3:d4:b6:a5:9d:5f:ce:87:b5:
69:e6:a5:d0:47:16:b5:17:3b:a3:bf:c0:3c:9e:e1:85:08:2e:
99:ef:15:f9:99:3d:bc:d5:9a:5e:09:24:33:f4:9d:2e:78:84:
f5:4e:a1:0b:63:ac:86:14:d6:bc:35:66:62:75:32:43:e3:bc:
48:b4:b6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:19:44 2025 by rpki-client