Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d809b4-2025-41ed-a0c3-36d7921e93b3/1/Onh8GnI5OY_vQvv05ri6Z_tBZHo.mft
File: Onh8GnI5OY_vQvv05ri6Z_tBZHo.mft (raw, json)
Hash identifier: rBNhO9/LWemzz4Cd91ToHLN1sPenvrYWDXF0Kp1rdDI=
Subject key identifier: 1F:0F:A3:24:D9:1D:1C:2E:37:7E:F3:1E:06:39:0F:04:22:74:22:2A
Authority key identifier: 3A:78:7C:1A:72:39:39:8F:EF:42:FB:F4:E6:B8:BA:67:FB:41:64:7A
Certificate issuer: /CN=3a787c1a7239398fef42fbf4e6b8ba67fb41647a
Certificate serial: 0194BC3C78EA8D4E520584B1D40A6B94A830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onh8GnI5OY_vQvv05ri6Z_tBZHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d809b4-2025-41ed-a0c3-36d7921e93b3/1/Onh8GnI5OY_vQvv05ri6Z_tBZHo.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: Onh8GnI5OY_vQvv05ri6Z_tBZHo.crl (hash: i3KOuhjDbKL7ly8XV8PFO3bmetuu+MSt3rpWbOmC7eI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:78:ea:8d:4e:52:05:84:b1:d4:0a:6b:94:a8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a787c1a7239398fef42fbf4e6b8ba67fb41647a
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=1f0fa324d91d1c2e377ef31e06390f042274222a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5b:79:8a:0c:16:28:98:15:d0:b8:81:c0:73:
67:05:cc:a5:8e:ba:b6:87:73:75:d4:17:a1:c1:11:
dc:d8:8d:fe:0b:5a:21:76:9c:2a:c8:42:f3:d3:66:
ec:dd:2a:0a:f0:be:ba:73:ee:11:83:fd:15:1a:a2:
28:a9:ba:32:56:b6:86:2a:2c:b2:59:21:bd:07:80:
6d:d8:fb:7e:2f:91:63:46:94:b7:12:2a:98:66:95:
13:43:21:a4:9a:90:a0:e3:10:7a:91:c7:69:21:75:
fc:be:4e:09:62:b4:61:bd:f8:f6:72:9f:24:a1:5c:
fc:8d:37:2e:cd:49:f9:26:b8:5a:e8:8a:99:dd:be:
4c:2e:89:ba:58:99:ca:cf:4f:5d:88:a8:e1:29:42:
a0:ba:69:99:94:ee:22:14:8f:61:a9:5f:5b:0f:f9:
1a:c2:dc:7f:2c:6d:52:0f:09:65:b6:c5:d2:d5:ec:
ea:c9:cb:22:c4:d5:cb:06:23:4f:b2:c8:33:33:ba:
98:b7:57:e8:f2:bc:10:1a:2a:82:77:3f:7d:3c:0f:
80:ba:df:db:2d:2f:ca:f7:82:89:88:16:88:f7:f9:
05:25:c0:0e:f7:c9:34:10:9b:ea:cb:0c:1b:b4:cb:
ce:3a:ac:ed:7a:1a:ca:3c:b6:25:90:76:d8:24:98:
92:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0F:A3:24:D9:1D:1C:2E:37:7E:F3:1E:06:39:0F:04:22:74:22:2A
X509v3 Authority Key Identifier:
keyid:3A:78:7C:1A:72:39:39:8F:EF:42:FB:F4:E6:B8:BA:67:FB:41:64:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onh8GnI5OY_vQvv05ri6Z_tBZHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d809b4-2025-41ed-a0c3-36d7921e93b3/1/Onh8GnI5OY_vQvv05ri6Z_tBZHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d809b4-2025-41ed-a0c3-36d7921e93b3/1/Onh8GnI5OY_vQvv05ri6Z_tBZHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d7:84:fc:9d:d8:b6:40:bc:c5:fb:56:8b:57:c8:01:bc:76:
02:e6:c2:35:b7:33:b6:16:c1:f3:a3:be:92:28:31:3c:0a:5f:
5f:57:96:5a:7d:fc:47:a0:4e:58:a2:56:33:df:d3:8d:72:22:
37:3d:b1:c0:cb:14:76:16:3e:b0:fe:87:a3:4e:96:3f:4b:8b:
6c:39:bf:62:09:7f:e3:79:18:19:ab:6a:40:07:a8:54:c2:98:
65:cd:c0:6a:91:d4:98:9b:22:e7:76:31:7a:e0:ab:f5:fa:b8:
7e:50:ac:d0:4b:37:a2:f8:7a:20:27:9f:ff:eb:ae:25:49:e7:
b0:8d:6c:f4:a6:09:d6:1c:00:59:ca:bc:85:e1:a6:27:db:5a:
3b:4d:bd:c1:4b:47:54:57:60:7e:86:12:a9:3a:11:ec:a6:0a:
f3:1d:ac:4c:b6:a6:3f:22:92:48:94:af:2a:8b:7c:c4:54:b7:
4d:81:28:9d:87:92:73:e9:92:60:d6:1e:eb:26:29:21:bd:57:
d1:1b:ae:99:3b:6d:21:f9:d3:84:91:92:3b:e7:15:e0:f2:c4:
90:86:74:a6:88:b1:d2:9b:22:8c:9f:c9:de:6c:33:45:4b:c7:
00:34:ab:46:65:85:a1:fa:c1:01:f2:1e:dc:34:c6:9e:72:6d:
56:b1:8f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:28:09 2025 by rpki-client