Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
File: oMWM0HH3gLesNAwBROsE-1DMu_E.mft (raw, json)
Hash identifier: eW3RiWx9OGrVSiY8NPQkID/EjLV6Fd+dGuzBYp7jDFw=
Subject key identifier: 6A:E4:4C:B2:5D:0B:0E:89:98:D0:85:CB:01:24:B5:16:F2:7A:02:EA
Authority key identifier: A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
Certificate issuer: /CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Certificate serial: 0194BCA9A723BE884D98B72631C5CF1F3077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
Manifest number: 141B
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: oMWM0HH3gLesNAwBROsE-1DMu_E.crl (hash: Xx/DSnFwbj4rOqM4XSNLrlJnuOSRBERW9LH/lg9hj2M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a7:23:be:88:4d:98:b7:26:31:c5:cf:1f:30:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0c58cd071f780b7ac340c0144eb04fb50ccbbf1
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=6ae44cb25d0b0e8998d085cb0124b516f27a02ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3d:3e:7f:5a:59:fb:9b:07:5b:ef:e3:a7:f5:
b6:8e:d2:58:75:45:ff:f5:a4:ef:2e:b6:35:4a:3b:
4f:98:aa:86:be:8f:b7:42:1c:73:00:5c:b9:6d:18:
4a:8c:b8:16:70:a9:90:77:c2:61:5b:4a:1f:e9:5f:
20:af:4d:20:14:12:db:ac:e3:8b:d8:06:24:f5:5b:
9e:62:f2:2e:cb:12:58:1f:6b:f1:31:6d:c8:e9:0d:
dc:ee:98:b0:18:d5:35:8f:1a:0f:2c:89:a6:e7:95:
10:7e:2e:88:ed:4b:eb:af:56:76:3d:46:45:ee:ff:
fa:cd:c9:0c:62:cf:85:f9:5a:d2:66:cb:c2:32:8e:
d6:06:28:5f:99:e7:57:8b:ed:5f:3e:72:6e:ca:97:
d6:88:5c:c8:5d:64:0d:27:2d:26:df:e5:67:42:8b:
db:6c:34:dc:e1:0a:81:55:07:78:4a:fc:b5:7c:bb:
98:b1:84:7a:99:2b:ac:65:4d:8e:7c:d9:4f:1a:5e:
0f:84:b1:6c:c1:2b:a8:6a:75:87:de:9b:a2:4c:dd:
1f:93:8a:f6:e5:fa:44:49:95:fb:6f:2d:4b:92:92:
17:5f:1c:d3:1b:54:a8:4f:6d:a8:71:33:b0:5a:ba:
81:e4:43:c4:f8:13:26:9b:e4:e0:8c:78:97:85:46:
c3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E4:4C:B2:5D:0B:0E:89:98:D0:85:CB:01:24:B5:16:F2:7A:02:EA
X509v3 Authority Key Identifier:
keyid:A0:C5:8C:D0:71:F7:80:B7:AC:34:0C:01:44:EB:04:FB:50:CC:BB:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMWM0HH3gLesNAwBROsE-1DMu_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6c9722-2608-44af-8c79-66b2f99c0b45/1/oMWM0HH3gLesNAwBROsE-1DMu_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:39:a3:54:52:41:71:f3:8e:57:d1:97:f2:4a:5c:3a:59:40:
b1:24:48:58:24:e8:75:2a:dc:43:ef:2d:f4:d8:e6:aa:99:8d:
89:23:df:57:9c:ca:1c:70:67:ed:f1:e5:25:e8:45:b3:d3:16:
7e:e8:13:40:06:9d:8d:5e:27:8b:64:02:80:21:11:f5:2a:49:
4b:54:74:f9:45:e2:26:08:eb:be:9b:64:a6:9f:b7:1e:6c:bd:
e3:e1:e7:a3:9d:54:10:28:36:e7:12:da:4c:17:ce:f0:a7:24:
aa:33:84:36:a2:3e:0a:57:7a:f1:0e:19:a4:38:6c:d2:e2:da:
ea:e8:3d:2f:db:4b:aa:64:84:ac:53:aa:fe:35:fd:8e:db:7e:
b5:07:6f:f7:c6:86:ad:ea:61:7e:12:71:ef:02:31:07:3d:94:
58:1e:94:ab:79:f0:f7:c8:a5:e4:df:c1:a7:3f:1d:56:ac:c9:
85:2b:3e:b8:49:0b:7f:e7:0e:26:8f:4d:63:06:7b:0e:2b:c0:
a8:cc:65:4b:f0:2e:4b:f3:56:13:d7:fb:d6:22:14:74:11:e8:
75:cf:a5:f3:40:10:d5:1b:8e:fb:ee:bf:6b:19:eb:46:9a:9c:
2f:85:40:39:14:e4:d8:e1:46:a8:15:aa:17:ea:4b:a9:34:5e:
a9:30:68:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:56:58 2025 by rpki-client