Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
File: oVKeqYh_ni_mqUWpfUgha8FqS0E.mft (raw, json)
Hash identifier: HeS4EIBLHHMZ0jamTqtXpWPGEAmM+QPnGHooq+bKSeY=
Subject key identifier: 0F:61:59:D3:A7:D8:D9:16:43:65:36:6A:4D:5F:8A:60:C5:4A:A6:73
Authority key identifier: A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
Certificate issuer: /CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Certificate serial: 0194BBCE732D7F79C08BD5D3F7A2EF5C907B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
Manifest number: 0F17
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: oVKeqYh_ni_mqUWpfUgha8FqS0E.crl (hash: 0mrH9qcaO+IcCD/JZM5bRuWerKjNxoCPpI0/obO8FUc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:73:2d:7f:79:c0:8b:d5:d3:f7:a2:ef:5c:90:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1529ea9887f9e2fe6a945a97d48216bc16a4b41
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=0f6159d3a7d8d9164365366a4d5f8a60c54aa673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4a:34:47:88:36:82:e5:09:1d:47:51:7a:08:
f6:56:11:ef:53:c7:4b:c5:3d:44:9e:eb:b8:3d:75:
5a:9b:53:c3:79:50:03:ef:51:c2:72:2a:ef:a7:e2:
53:7e:ad:5b:aa:4c:37:d2:c1:de:6c:1c:d8:0b:d5:
1b:ca:b7:d3:71:5a:e6:51:ca:6a:66:b0:de:63:0e:
ad:88:77:42:a8:17:ea:5a:0b:df:a9:cc:02:b7:6f:
69:5a:87:76:7d:fd:46:85:2c:44:43:12:92:ea:3a:
44:52:eb:57:3e:fe:1b:f7:4a:ed:b0:38:7c:c3:32:
8b:e5:fb:5e:36:99:10:69:6c:0b:4e:7c:49:77:e5:
ed:7b:f0:7b:49:b2:d7:d6:0b:25:89:00:0b:88:75:
0c:84:39:77:81:a9:fe:a6:67:ad:19:20:8a:f1:a2:
b1:43:24:01:30:64:00:68:28:3d:a3:c8:e5:8c:e6:
40:f9:b3:2b:da:77:c8:b9:2a:d1:e6:f4:90:7b:3e:
84:98:dd:a3:d3:aa:2c:c9:a7:20:03:ab:0a:df:6b:
e2:28:fd:d8:a8:79:93:1a:62:e8:ab:8a:14:b5:2a:
e3:2e:24:0c:f6:ee:98:b7:65:bb:e1:41:3b:ed:97:
35:9b:33:df:0a:7b:ea:46:28:fc:f3:60:42:60:02:
90:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:61:59:D3:A7:D8:D9:16:43:65:36:6A:4D:5F:8A:60:C5:4A:A6:73
X509v3 Authority Key Identifier:
keyid:A1:52:9E:A9:88:7F:9E:2F:E6:A9:45:A9:7D:48:21:6B:C1:6A:4B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVKeqYh_ni_mqUWpfUgha8FqS0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/800709-3dd2-4c3f-8e69-5b1eaac67030/1/oVKeqYh_ni_mqUWpfUgha8FqS0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a7:5d:12:d8:ee:9f:ef:be:d0:a1:e0:2d:dd:4a:d1:6c:c0:
ed:b4:72:7b:24:96:17:ed:4f:3b:5e:92:60:48:a2:b2:b2:09:
e8:c0:14:24:af:34:df:e2:f2:1c:0f:8f:46:f7:34:15:47:86:
0f:f3:4f:31:4d:63:4b:b7:66:73:91:9c:11:83:8b:f8:91:0a:
f2:5e:5c:3b:cb:f6:c2:ee:8f:ea:57:f5:04:91:e1:ad:b6:00:
53:bb:8d:30:14:12:5a:12:56:c1:79:43:e8:77:8c:d6:e0:b3:
6b:7e:da:3a:a3:4b:fd:74:ab:ab:dc:d6:fb:32:a7:ee:8f:9c:
68:44:36:3d:de:dd:f1:b4:04:34:b6:c6:76:47:ac:c7:36:b0:
6b:72:91:a8:65:b5:0b:f8:3e:fd:ee:b6:f5:4a:75:9d:8d:02:
a6:4e:a4:10:65:04:6f:f1:03:b2:46:a0:fa:8f:2e:a4:e3:11:
98:ff:46:9d:e5:b9:52:44:6a:79:6f:cc:77:7a:b0:84:cd:9b:
56:cb:94:3a:17:e0:bb:c8:63:54:2e:49:03:48:33:d3:35:a4:
07:83:ac:c7:ce:64:7d:ca:ec:a2:2c:2c:ce:6a:37:93:1e:72:
e8:a1:07:4b:f0:dd:e6:19:71:07:71:d5:d6:c6:b3:40:28:b7:
0f:43:66:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:56 2025 by rpki-client