Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
File: OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft (raw, json)
Hash identifier: i0g5Y3ew6Wz4Qugbr2A+XXBJ2c6teNMwTrPQ6zFQeRs=
Subject key identifier: 85:01:38:EB:D9:2C:E6:79:5A:3E:1B:FD:31:8C:F2:1B:E5:B1:E6:E9
Authority key identifier: 3B:2A:A7:20:56:81:71:62:0E:9B:C9:B9:7D:AD:CC:74:B5:13:39:4F
Certificate issuer: /CN=3b2aa720568171620e9bc9b97dadcc74b513394f
Certificate serial: 0194BD17FF48B4F3190F75371C2A40D44337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyqnIFaBcWIOm8m5fa3MdLUTOU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
Manifest number: 045D
Signing time: Fri 31 Jan 2025 16:00:54 +0000
Manifest this update: Fri 31 Jan 2025 16:00:54 +0000
Manifest next update: Sat 01 Feb 2025 16:00:54 +0000
Files and hashes: 1: OyqnIFaBcWIOm8m5fa3MdLUTOU8.crl (hash: lEQpuLcs+UAho/i4rpz3mPglKEpru8kSvRKl1AhjrtQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ff:48:b4:f3:19:0f:75:37:1c:2a:40:d4:43:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b2aa720568171620e9bc9b97dadcc74b513394f
Validity
Not Before: Jan 31 16:00:54 2025 GMT
Not After : Feb 1 16:00:54 2025 GMT
Subject: CN=850138ebd92ce6795a3e1bfd318cf21be5b1e6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ad:79:5f:51:bf:1d:48:9b:04:1a:b0:5b:5d:
89:8b:5e:70:fc:4e:06:9e:3f:32:a4:33:14:1c:3e:
ff:d3:66:77:f7:1f:81:82:4d:1f:f7:7f:51:80:96:
85:9c:e6:1a:71:36:87:35:f9:25:77:60:52:ee:8a:
fe:4b:82:b2:4c:5d:ee:09:d3:91:84:96:1d:25:9f:
2d:15:65:c3:9e:f4:11:2d:60:1c:ae:ce:b6:06:0a:
0c:32:07:7a:a8:b2:54:be:60:cf:5f:8a:9a:8c:92:
49:5f:ae:ed:45:9e:70:08:12:13:a7:44:6a:aa:82:
13:d6:cc:45:d3:58:74:f7:09:2c:d1:6a:fd:3e:cc:
28:c8:61:a8:a5:03:81:d8:00:9a:99:3d:b4:ae:4c:
63:74:9f:06:00:44:ac:5f:e5:54:1a:1e:19:22:12:
12:e9:43:f6:5c:09:a1:09:5f:cf:7c:c6:9b:ce:5a:
e1:39:db:83:29:dc:a7:76:f8:59:00:74:1e:73:e1:
7c:13:75:76:8a:ce:0a:b4:a3:50:d1:1e:2d:1f:70:
29:f4:8d:00:ba:c6:8a:53:2d:b7:96:12:17:f6:9f:
6d:2d:42:f6:b1:b3:f5:a9:1e:73:67:e6:9c:71:29:
f1:24:97:4f:16:3d:e9:54:34:97:c5:e7:a2:da:68:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:01:38:EB:D9:2C:E6:79:5A:3E:1B:FD:31:8C:F2:1B:E5:B1:E6:E9
X509v3 Authority Key Identifier:
keyid:3B:2A:A7:20:56:81:71:62:0E:9B:C9:B9:7D:AD:CC:74:B5:13:39:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyqnIFaBcWIOm8m5fa3MdLUTOU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/277589-8d9a-4b22-9a15-605de0eaaeb6/1/OyqnIFaBcWIOm8m5fa3MdLUTOU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d9:08:17:85:bb:2d:e7:13:e3:fc:64:36:da:53:b5:30:7b:
00:24:46:de:21:33:23:3c:32:7c:76:4f:f5:be:21:2b:9d:94:
12:44:cd:a8:b8:c6:a7:24:8b:53:03:87:39:0e:6a:73:9a:05:
58:6d:be:f3:dd:b6:1f:84:35:6b:11:d7:2e:2c:a4:75:30:00:
3c:8c:b4:ab:b8:8d:44:b1:16:c4:90:a1:17:53:f2:bd:ca:2d:
c6:44:65:02:e8:ca:16:89:c3:a6:da:d3:db:7a:af:ef:d9:1a:
3b:e4:45:5b:0c:41:cf:fb:0a:ad:12:d2:38:67:95:d5:d6:f0:
dc:9b:8b:3c:0d:27:d3:b2:1d:52:b8:14:27:c8:3a:6f:08:00:
7e:d7:68:74:b9:d1:f2:e5:e1:70:c7:1a:81:44:2e:6e:bc:29:
3a:37:f4:fb:02:d6:3e:2b:fc:1d:92:ed:7d:8e:a7:15:0f:45:
a5:e3:1a:bf:4c:be:e1:c3:a5:a1:f1:ca:44:c4:08:1c:3c:72:
ff:47:32:d8:54:5c:28:70:62:83:a0:40:03:fd:6a:1b:c2:44:
7e:22:4e:a0:01:4e:88:ff:b5:3f:92:96:15:5b:4a:1f:9b:37:
24:be:02:12:67:cf:8b:dc:ac:47:1d:42:aa:af:23:d9:c7:30:
25:8b:b3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:03 2025 by rpki-client