Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
File: OardMv4J68lyyFltxaBzWI-WDC0.mft (raw, json)
Hash identifier: MxbTbN6fhbBoAJ9jkmHWqqfnG/M2gq88DuG4j7sylYE=
Subject key identifier: 4B:99:B0:C0:41:C8:5E:F4:E9:96:70:7C:09:83:D8:BE:83:46:AD:2B
Authority key identifier: 39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
Certificate issuer: /CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Certificate serial: 0194BC3BF4635D3D9A79CF8E23E58348DF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
Manifest number: 0AA3
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: OardMv4J68lyyFltxaBzWI-WDC0.crl (hash: bWGZflTedVdWRkOqMEV/lTLSZXGtF6pkZ+5la9hkd5g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f4:63:5d:3d:9a:79:cf:8e:23:e5:83:48:df:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39aadd32fe09ebc972c8596dc5a073588f960c2d
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=4b99b0c041c85ef4e996707c0983d8be8346ad2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:1a:02:ce:49:0e:82:1e:c9:f3:98:a7:2b:
c0:cf:5c:b9:75:b6:0c:64:5d:80:e2:f6:cc:ac:f6:
82:6c:ce:83:87:ad:7e:f9:94:f3:64:db:3b:df:86:
66:66:16:e6:36:77:b8:46:76:4c:51:4c:ef:ba:6a:
39:5e:06:57:90:a0:72:7c:6b:e1:3e:4b:1c:0d:d6:
02:36:42:4b:da:80:d9:3e:20:4a:d1:66:e0:c4:0e:
e1:19:42:de:78:17:56:4e:17:99:c8:fb:84:e6:4d:
33:34:36:6e:d7:7c:c0:52:0b:91:cd:bf:76:8b:14:
7a:57:d7:d8:87:15:46:d5:86:a0:91:b0:49:97:a3:
81:34:5f:ce:3f:8c:f0:2a:a8:24:4d:e3:9d:77:f1:
5b:cb:be:5e:30:e8:bb:16:ca:b7:ac:30:7d:65:47:
77:46:d3:0b:3e:b4:f5:d4:b6:e5:20:b0:cd:3e:a5:
e5:e9:a5:f9:09:4d:8b:45:7e:67:d2:71:31:a3:ae:
b0:ac:52:a4:d8:f9:69:30:0b:e2:a7:4e:c8:ba:a4:
57:af:ca:e0:a9:db:d3:92:8f:c4:bf:23:76:a9:2b:
d9:ff:c8:4b:96:5d:8e:14:5f:66:70:5f:53:d3:1c:
19:90:83:f4:6e:88:f9:c0:47:d6:6b:ef:f7:23:37:
2c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:99:B0:C0:41:C8:5E:F4:E9:96:70:7C:09:83:D8:BE:83:46:AD:2B
X509v3 Authority Key Identifier:
keyid:39:AA:DD:32:FE:09:EB:C9:72:C8:59:6D:C5:A0:73:58:8F:96:0C:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OardMv4J68lyyFltxaBzWI-WDC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b966c4-50d3-4090-8f46-2e8ec3d6c2f9/1/OardMv4J68lyyFltxaBzWI-WDC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f9:eb:c1:9f:9d:2f:19:a5:f8:9a:f9:60:3c:6f:e0:ed:97:
f5:4c:4a:6e:70:4b:df:59:9f:10:e5:db:c2:78:09:36:42:bf:
89:93:3b:9c:99:8d:d2:ba:aa:cf:8b:84:c3:e6:05:b7:31:08:
cb:49:cc:f9:5f:a8:6b:ad:8e:4b:bc:d8:26:b0:6f:78:94:97:
9c:54:79:06:52:e1:74:18:53:1d:83:cc:48:0e:53:10:bb:2d:
3c:01:1e:a2:eb:5f:ab:84:40:b8:13:31:72:05:85:2f:d2:7e:
9e:33:e6:27:c5:d1:39:37:3c:6d:6e:ae:be:ad:a6:1b:3f:f9:
44:45:16:e7:3e:7a:3e:4a:6e:12:8a:21:78:b8:ce:3e:96:d3:
55:03:64:aa:35:b8:1c:b2:b8:b4:54:b8:ed:f5:b0:89:86:ae:
13:32:04:63:6f:50:71:b3:1b:8e:e4:47:33:5d:90:c3:59:40:
4b:37:a1:c9:7e:02:15:e4:a8:26:44:87:54:0a:fe:59:d0:ba:
49:03:dd:38:06:19:ea:59:c0:99:18:d2:12:e8:3c:a5:70:27:
c6:6c:14:7d:88:38:93:55:d6:93:49:7e:5c:b2:15:39:8a:c6:
10:1c:81:42:fa:3a:65:9e:38:32:f3:28:29:ec:9f:74:c7:76:
e1:79:96:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:03:16 2025 by rpki-client