Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
File: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft (raw, json)
Hash identifier: XJ6eHBbvlx2Rko0ChdJIhD4k7h7Zm+pK6XMJ8CBSvQE=
Subject key identifier: 88:14:9D:CD:E2:6F:84:8A:8D:66:34:07:2A:9A:80:82:FE:E6:90:DA
Authority key identifier: 3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
Certificate issuer: /CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Certificate serial: 0194BCA9D878F81F8D50E51591F3AD307DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:35 +0000
Manifest this update: Fri 31 Jan 2025 14:00:35 +0000
Manifest next update: Sat 01 Feb 2025 14:00:35 +0000
Files and hashes: 1: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl (hash: HTaxpc8c/RU6Sz6HO3KIiVCXSxHzoIzrid0xLG0xg/I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d8:78:f8:1f:8d:50:e5:15:91:f3:ad:30:7d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Validity
Not Before: Jan 31 14:00:35 2025 GMT
Not After : Feb 1 14:00:35 2025 GMT
Subject: CN=88149dcde26f848a8d6634072a9a8082fee690da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:8c:3e:4b:42:38:5f:8c:8e:0e:b5:79:65:
8e:aa:10:2d:7b:ab:fd:b1:ee:bc:91:f2:05:78:fe:
26:86:56:3a:c9:53:de:ab:e5:fd:ef:df:6b:2e:1c:
5c:cf:d4:e5:42:62:56:de:d5:4f:5b:0b:60:b4:af:
c0:90:1f:2a:9c:92:39:a6:e6:05:cf:a0:e3:d5:cf:
51:04:23:8b:24:16:f8:bf:b7:cf:8b:da:10:a1:cd:
25:04:5b:e3:af:85:58:8b:ac:e2:eb:5a:ad:80:08:
68:b7:b4:62:01:0b:b0:e6:68:36:85:a9:40:5d:71:
b9:13:ba:66:91:e9:4d:46:84:bd:1c:ad:7e:11:83:
eb:5b:dc:e1:24:9d:42:bf:93:25:a3:7d:34:74:4e:
07:02:0a:46:e3:a3:00:13:de:03:6e:f2:9d:37:d7:
0a:32:20:60:3f:cc:36:39:2a:29:f8:03:96:a4:c6:
e8:d4:2e:bf:21:95:f0:e0:60:a1:f8:d5:06:e5:d0:
aa:fe:63:e9:d9:82:43:5f:42:3c:91:cf:ee:3b:d6:
ab:9d:d1:b1:7f:98:81:62:bf:02:89:ff:af:a3:65:
64:5c:62:1c:3f:e0:db:f2:27:b7:6d:dc:bb:1d:9b:
16:ee:fa:c6:de:51:80:af:52:ad:89:97:72:8b:78:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:14:9D:CD:E2:6F:84:8A:8D:66:34:07:2A:9A:80:82:FE:E6:90:DA
X509v3 Authority Key Identifier:
keyid:3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:aa:e4:d3:75:68:16:8e:0e:80:ff:5a:c4:ba:0d:3c:5a:75:
fb:09:8b:9b:38:1a:92:a8:2a:8f:7b:44:a7:1b:44:99:7d:bd:
56:c9:fe:4d:b6:7b:a8:8f:86:1c:05:98:ee:d9:4e:69:59:f7:
ba:b5:dc:50:05:92:ea:26:ac:53:70:9b:63:e3:78:c0:79:e9:
49:76:e5:21:56:85:8e:93:e5:ae:bf:84:94:45:dd:7c:40:e9:
fc:d5:1d:6b:cc:11:4c:85:5e:c8:35:1c:73:9e:74:05:17:52:
fd:e2:fa:e6:8d:ac:92:c9:f0:93:72:b8:b9:c8:73:70:c1:97:
57:2f:0d:40:2b:dc:a9:9c:dc:22:b4:a7:02:f3:1e:2b:98:e3:
d5:5f:76:0b:7b:57:fc:bd:09:a3:50:91:09:4d:86:48:32:7e:
ea:2d:65:bb:bd:bb:80:2a:79:25:5b:68:3c:96:4e:85:9b:2b:
d3:95:63:5d:d2:db:f0:cc:9e:80:87:9d:62:d2:3c:9c:f3:67:
4a:42:87:a8:00:ca:c5:bc:5e:6e:75:4e:79:d3:2c:88:c3:df:
08:cf:71:90:cf:dd:11:87:95:9d:63:63:7e:ba:20:8e:ae:f2:
94:44:f6:c3:d1:c2:d2:f0:bf:3d:f3:71:61:d2:44:a4:77:87:
60:6d:1b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:33 2025 by rpki-client