Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
File: OqdpZQeVNJmPMK-OaabGYVk5gsg.mft (raw, json)
Hash identifier: XkU6Je239FUiIW9tLSBc9MHoFHT+vievk4kyhKvrNRI=
Subject key identifier: 84:A5:4F:0B:94:1C:02:F1:E2:B7:C9:43:DD:E1:8F:7F:22:AA:66:BA
Authority key identifier: 3A:A7:69:65:07:95:34:99:8F:30:AF:8E:69:A6:C6:61:59:39:82:C8
Certificate issuer: /CN=3aa76965079534998f30af8e69a6c661593982c8
Certificate serial: 0194BCA9AB7A83C2AFD5F530CD21C5BD66F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqdpZQeVNJmPMK-OaabGYVk5gsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
Manifest number: 10FB
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: OqdpZQeVNJmPMK-OaabGYVk5gsg.crl (hash: yrXnTmiGqc77Tm4G3W3B1ZUuQm9GaM1EZrb7gDYxmBI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ab:7a:83:c2:af:d5:f5:30:cd:21:c5:bd:66:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa76965079534998f30af8e69a6c661593982c8
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=84a54f0b941c02f1e2b7c943dde18f7f22aa66ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:4b:04:85:b4:a4:89:e5:4c:a6:e0:62:c9:
e7:26:5f:cd:98:76:07:75:14:8b:04:e0:57:60:60:
5b:4f:48:41:fb:a1:88:6a:cb:74:07:c5:39:6d:fc:
15:c0:39:b3:48:e4:30:83:e1:58:79:2b:bb:de:d8:
58:40:bc:18:38:5e:30:c4:f0:54:45:8e:4a:d6:17:
2e:76:81:00:8c:15:c8:54:85:dd:d1:95:58:1c:28:
64:63:65:e5:5f:d8:f6:f7:55:87:8e:50:e1:4b:9d:
0a:34:e0:29:bc:37:65:df:9a:57:82:12:9b:ac:3f:
58:45:de:5e:4f:61:48:16:61:4a:63:2a:5b:65:cc:
a1:42:a1:ab:bf:c5:46:1d:fa:8a:6c:fa:a3:84:7c:
c8:0b:8a:84:a2:d4:f6:28:f9:64:69:98:d5:a3:27:
9c:b8:81:19:e2:7c:a4:4b:2d:9c:49:ec:74:2d:ba:
7e:3b:9f:5d:7a:90:f4:99:3b:ef:fa:08:71:b6:8d:
86:e6:d1:28:57:09:fb:43:ed:08:bf:32:7e:1f:40:
a4:00:46:a2:76:eb:b2:f7:be:e9:8a:fb:e7:c6:d7:
86:63:5a:50:9c:da:f6:a1:3e:40:d7:5d:18:3c:54:
0d:06:8d:ab:ea:7b:e4:e1:46:b1:b5:1e:30:d8:6b:
32:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A5:4F:0B:94:1C:02:F1:E2:B7:C9:43:DD:E1:8F:7F:22:AA:66:BA
X509v3 Authority Key Identifier:
keyid:3A:A7:69:65:07:95:34:99:8F:30:AF:8E:69:A6:C6:61:59:39:82:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqdpZQeVNJmPMK-OaabGYVk5gsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1f:5a:a7:35:c5:6d:91:ea:ae:f4:c9:e7:18:9d:0c:22:1f:
e5:36:8d:9f:5f:5c:dc:5b:2d:c2:67:b7:41:82:a2:3f:18:12:
ec:f8:dd:f9:5f:4a:68:2f:b1:e8:09:7e:92:93:3c:b8:40:14:
d8:cc:a2:c8:06:9a:84:76:71:4b:5d:57:9b:ef:80:7c:06:b3:
e1:7f:57:fa:54:b9:15:61:db:6f:66:69:15:98:b4:88:1c:16:
12:e9:88:16:f8:c1:46:e5:0e:ca:d9:46:64:a3:0d:ac:d9:5e:
51:44:b2:2a:6d:b9:a7:2d:93:a6:6a:8a:07:c9:5f:80:b3:88:
39:1f:31:84:11:fe:1a:2b:13:ee:1f:99:ba:96:6a:31:6f:b6:
dd:e5:2c:2a:b9:71:84:e2:dd:5f:3c:0a:e8:9b:bc:87:8d:3b:
c0:75:65:57:f6:f0:db:48:eb:7b:97:88:0a:c9:72:f7:2c:e5:
73:b6:db:11:d4:d7:ec:31:ad:96:3c:4b:83:86:bc:20:3c:65:
8b:9d:be:f4:a5:d2:3f:e1:22:7f:d2:0e:db:b3:58:86:c8:80:
a3:6c:7f:d4:37:7b:c4:fa:00:15:2b:8b:0d:7b:58:af:50:e5:
0e:49:8a:8b:dd:fb:7c:9b:e3:6d:1d:61:a9:19:bc:0d:6d:4a:
9c:92:01:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:44 2025 by rpki-client