Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/71c579-5080-41fe-8653-024f7c50f428/1/OpzyvclyZDBARldYsyWap8kubhw.mft
File: OpzyvclyZDBARldYsyWap8kubhw.mft (raw, json)
Hash identifier: npZ/NllbO1k4lN7zkhstbRO+9dWp0d0DqNTIIURnhAQ=
Subject key identifier: 77:C4:95:A5:C0:BA:27:1C:5D:2B:D8:67:B4:A4:A2:BE:86:B5:1F:E1
Authority key identifier: 3A:9C:F2:BD:C9:72:64:30:40:46:57:58:B3:25:9A:A7:C9:2E:6E:1C
Certificate issuer: /CN=3a9cf2bdc972643040465758b3259aa7c92e6e1c
Certificate serial: 0194BC3BDCF0BDF27702FF7B5B623EEA3AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpzyvclyZDBARldYsyWap8kubhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/71c579-5080-41fe-8653-024f7c50f428/1/OpzyvclyZDBARldYsyWap8kubhw.mft
Manifest number: 1425
Signing time: Fri 31 Jan 2025 12:00:27 +0000
Manifest this update: Fri 31 Jan 2025 12:00:27 +0000
Manifest next update: Sat 01 Feb 2025 12:00:27 +0000
Files and hashes: 1: OpzyvclyZDBARldYsyWap8kubhw.crl (hash: QZ2r8i/wSMWaLx0b8+uVKKpXoLRloQb4PkzFjq+LDT8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:dc:f0:bd:f2:77:02:ff:7b:5b:62:3e:ea:3a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a9cf2bdc972643040465758b3259aa7c92e6e1c
Validity
Not Before: Jan 31 12:00:27 2025 GMT
Not After : Feb 1 12:00:27 2025 GMT
Subject: CN=77c495a5c0ba271c5d2bd867b4a4a2be86b51fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:34:22:fa:b6:c5:20:6b:fe:cd:fb:72:ba:
f2:ee:aa:06:0f:c4:a5:d9:a4:7c:9b:25:c5:34:ba:
dc:15:7e:42:78:16:3f:91:cc:26:73:ac:7b:3a:10:
f7:e9:2f:b4:f9:47:85:17:59:b9:15:5a:23:25:06:
ad:69:10:5b:e1:9c:41:1d:93:e8:b0:b6:22:5c:6e:
9e:73:f2:eb:9e:6d:f9:d4:d0:92:d5:da:e0:91:da:
11:a7:63:11:19:7b:3d:58:00:fc:3a:96:9e:28:89:
f1:cf:ed:8b:1b:bc:8f:ae:4c:28:94:df:15:8a:00:
a9:f6:0c:61:d9:98:75:25:fc:79:ea:37:11:e7:9f:
01:f3:84:23:7a:b5:55:34:cb:08:1b:29:e1:44:7c:
ae:7d:db:ac:fb:61:c0:3b:7b:99:38:9e:43:ff:67:
8a:7d:81:ee:c9:f8:14:24:a8:fb:04:49:e0:bc:ef:
d0:53:6d:b4:e7:d9:02:18:7c:91:b0:b7:08:90:4d:
a5:b7:55:27:75:7f:45:b0:5b:85:72:98:08:94:01:
ba:2e:97:ec:da:b8:a3:e3:1c:a4:fc:29:05:17:79:
5f:03:b2:b4:be:32:76:a2:09:61:a7:ac:74:3e:fb:
32:21:38:f4:25:31:e6:df:ca:bd:44:87:87:b9:51:
82:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C4:95:A5:C0:BA:27:1C:5D:2B:D8:67:B4:A4:A2:BE:86:B5:1F:E1
X509v3 Authority Key Identifier:
keyid:3A:9C:F2:BD:C9:72:64:30:40:46:57:58:B3:25:9A:A7:C9:2E:6E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpzyvclyZDBARldYsyWap8kubhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/71c579-5080-41fe-8653-024f7c50f428/1/OpzyvclyZDBARldYsyWap8kubhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/71c579-5080-41fe-8653-024f7c50f428/1/OpzyvclyZDBARldYsyWap8kubhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fa:1d:3b:93:fd:9b:55:6b:bd:ad:f4:3f:d3:ac:ca:37:19:
5d:73:59:cd:c2:73:7a:fb:2d:4d:64:fa:d5:a2:8f:ab:de:15:
a4:74:76:34:bb:25:6d:08:2d:10:29:7f:3a:3e:48:9e:7e:26:
db:67:30:54:03:fa:3f:cb:60:f7:2c:d6:b8:b1:24:3a:74:42:
88:c8:27:5b:2e:fc:ae:6c:18:44:2e:99:f7:88:84:36:10:3e:
cb:05:be:c9:3c:e0:c5:df:7e:cf:c8:32:71:92:cd:6f:ee:bb:
3d:ab:aa:6e:be:c6:33:7e:44:71:f9:3c:25:85:8e:66:ab:bc:
dc:16:44:ae:bc:cb:37:e3:a7:00:b8:92:ad:90:ec:98:e0:cf:
e1:65:28:6a:09:46:ca:a3:60:35:b8:1d:aa:c9:45:36:3e:6d:
48:a4:38:4c:e8:81:9c:88:c6:6b:03:d1:ef:32:f3:49:18:6c:
44:46:3c:1a:a8:b4:0c:6d:18:73:f1:ab:47:36:f4:59:42:88:
d2:df:98:a0:34:3f:5a:db:e5:f0:e1:78:ad:e8:31:0d:3a:a7:
bd:40:d9:37:a7:72:4a:92:23:1b:66:fe:17:f7:2e:27:78:86:
a5:3b:4d:e7:5c:28:a0:33:32:71:78:bf:dc:28:5a:1d:1d:f3:
d6:6d:38:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:38 2025 by rpki-client