Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
File: oFZPeYAZBRh04Czu4_0hy86rSuk.mft (raw, json)
Hash identifier: SfRVXQnJF0xaWCgz3K9bY0fw07Xv52Ajj/F2i/tcDug=
Subject key identifier: 3C:56:1B:E2:2D:E0:91:AF:31:19:A4:EC:0F:C1:1F:A1:D6:F5:90:2C
Authority key identifier: A0:56:4F:79:80:19:05:18:74:E0:2C:EE:E3:FD:21:CB:CE:AB:4A:E9
Certificate issuer: /CN=a0564f798019051874e02ceee3fd21cbceab4ae9
Certificate serial: 0194BC3CAB3BD8703BA947CF2ACB6D0BAD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
Manifest number: 0930
Signing time: Fri 31 Jan 2025 12:01:20 +0000
Manifest this update: Fri 31 Jan 2025 12:01:20 +0000
Manifest next update: Sat 01 Feb 2025 12:01:20 +0000
Files and hashes: 1: oFZPeYAZBRh04Czu4_0hy86rSuk.crl (hash: Q8qxY6woTxr/zsV8V/Kmq+0Tw2Ng56w469TU0qWdEPg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:ab:3b:d8:70:3b:a9:47:cf:2a:cb:6d:0b:ad:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0564f798019051874e02ceee3fd21cbceab4ae9
Validity
Not Before: Jan 31 12:01:20 2025 GMT
Not After : Feb 1 12:01:20 2025 GMT
Subject: CN=3c561be22de091af3119a4ec0fc11fa1d6f5902c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:aa:7f:65:17:5e:95:fd:12:3c:e9:39:2a:91:
ca:fa:81:f4:43:b5:a5:ab:33:30:3c:80:51:f6:7f:
91:9b:a7:2e:36:c6:cd:1e:d8:54:c1:3b:05:17:3c:
8f:d8:c2:c2:7e:e0:ca:99:0b:77:0f:51:9e:66:d4:
74:88:01:d8:67:a5:a9:92:7b:1b:a8:d2:39:ed:c7:
dc:00:73:58:2c:1e:eb:ad:32:17:01:ec:2a:cd:8f:
7d:32:8c:4b:f9:3b:33:99:10:8e:74:b9:a5:17:f1:
75:24:0a:c9:00:21:3e:42:2c:06:bf:50:77:71:6e:
10:1f:7b:d8:c3:16:dc:14:6a:ac:01:e2:51:17:3f:
82:a9:40:49:d0:ce:88:15:59:ea:03:f9:3f:4d:3e:
c6:31:49:5a:66:29:6c:75:ae:c1:cc:43:37:26:3f:
a2:e5:26:13:e7:47:d4:b7:84:28:ba:04:ac:f4:88:
82:2b:89:b8:fe:0e:8b:a2:39:b6:e9:d6:79:aa:ca:
a1:47:d7:76:c7:da:e3:f4:80:28:30:a9:9c:68:1c:
80:6c:4f:16:bd:66:ac:b3:6a:18:88:45:81:8f:ac:
32:ec:a0:6f:c6:3d:45:ff:85:fb:3b:af:86:36:2f:
3d:55:90:86:f7:1a:41:1e:aa:ea:0d:9a:c2:dc:a4:
66:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:56:1B:E2:2D:E0:91:AF:31:19:A4:EC:0F:C1:1F:A1:D6:F5:90:2C
X509v3 Authority Key Identifier:
keyid:A0:56:4F:79:80:19:05:18:74:E0:2C:EE:E3:FD:21:CB:CE:AB:4A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFZPeYAZBRh04Czu4_0hy86rSuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f052ee-76b1-422f-8719-215eecb3df93/1/oFZPeYAZBRh04Czu4_0hy86rSuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d1:34:2e:38:78:3e:ef:e5:2b:58:da:23:9c:16:68:18:de:
cf:ca:ae:ad:ee:d6:0e:86:0c:c9:b1:4e:cd:27:5b:45:75:3b:
37:b8:7b:49:46:ea:11:fc:b1:ff:11:54:9b:5f:25:3a:ed:cd:
cd:15:2f:58:f6:6d:33:e9:86:a6:39:94:c3:41:eb:02:94:7c:
17:fb:47:fa:6b:92:01:4b:b9:51:28:ae:8b:c7:5a:ae:05:52:
26:fe:b9:99:82:b0:5b:d6:8f:14:f4:3c:b0:98:07:2a:6a:d0:
b3:6d:df:a3:41:3e:d7:68:5f:e9:db:04:5b:68:09:e7:12:c8:
2b:b8:59:d9:10:9a:8a:52:d7:c5:ba:f0:6c:13:7e:e9:8b:78:
e5:46:b5:0d:dd:99:db:e8:b6:61:c1:cc:d0:70:36:0c:8f:e7:
cd:1f:e4:0f:1b:71:80:3b:0d:b6:9f:70:ee:d9:96:29:8f:f0:
3a:bc:ad:29:fb:1f:15:25:c8:0f:cf:1d:62:ab:c4:4e:bc:b8:
31:a6:be:5d:4b:c2:38:d1:8a:5e:16:c9:d6:07:82:a1:c6:b3:
56:f4:35:05:dc:5f:df:f5:bb:cd:fb:c3:b9:b5:d4:79:6d:13:
f5:d0:86:02:87:e9:6e:bf:09:ef:4d:37:68:aa:c1:65:77:39:
f9:d3:cc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:24 2025 by rpki-client