Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
File: OM0kYRn4VtiXOodwvsOf_EejydY.mft (raw, json)
Hash identifier: 3agE2GrgSh0LTA7yxZEg6MXkKYBgXMv+f6UQYhP1qUU=
Subject key identifier: 3F:4B:F4:3C:9F:5C:9B:FD:1E:19:78:26:A4:77:9F:F7:C0:28:CD:05
Authority key identifier: 38:CD:24:61:19:F8:56:D8:97:3A:87:70:BE:C3:9F:FC:47:A3:C9:D6
Certificate issuer: /CN=38cd246119f856d8973a8770bec39ffc47a3c9d6
Certificate serial: 0194BBCE6EB9C7E9E60459DE34931A4BC78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OM0kYRn4VtiXOodwvsOf_EejydY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: OM0kYRn4VtiXOodwvsOf_EejydY.crl (hash: O328BxsaNhjbVyhJEu8sEHsAedRb6u0ExOLEyB6+uZk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6e:b9:c7:e9:e6:04:59:de:34:93:1a:4b:c7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38cd246119f856d8973a8770bec39ffc47a3c9d6
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=3f4bf43c9f5c9bfd1e197826a4779ff7c028cd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bd:29:fc:cd:cb:9f:10:12:16:55:45:2c:d7:
d7:ad:96:54:2c:02:d5:b3:8e:99:17:24:6d:7a:e3:
a5:2b:1d:da:ff:c6:66:ce:13:73:e5:7e:11:1b:d8:
af:63:21:19:fb:cf:27:17:a4:c8:41:52:1b:c2:29:
c7:aa:99:64:93:34:83:ed:63:02:17:66:0a:de:69:
2b:58:48:61:e1:76:de:c0:ac:bf:7d:ca:ff:c5:2e:
70:2a:69:67:90:96:8e:60:a5:98:cf:62:bc:e3:68:
3d:93:ac:a5:de:4a:11:1e:04:86:85:c2:a9:7b:d6:
9f:87:97:ae:44:75:fe:e1:b8:fc:48:65:b7:fb:c4:
b7:4e:bd:c8:6a:78:6c:1d:08:70:2d:5e:54:ca:c1:
0a:93:2e:de:07:0e:e8:5d:56:79:55:4e:2e:14:8f:
77:85:3b:29:97:bd:74:8b:1a:d4:bb:a2:25:a4:55:
cd:9a:d6:78:7f:9d:c5:78:c3:5a:8a:bb:d4:b9:69:
05:c3:85:6a:9a:c7:5f:bf:10:d1:6d:07:a2:7a:d6:
1e:1a:ee:bf:bc:2d:1d:f9:0d:bc:b6:33:26:43:15:
f5:77:61:a3:f4:91:53:28:90:9f:67:45:eb:24:03:
cf:58:09:63:d3:82:eb:73:43:4a:41:b6:72:0d:5c:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4B:F4:3C:9F:5C:9B:FD:1E:19:78:26:A4:77:9F:F7:C0:28:CD:05
X509v3 Authority Key Identifier:
keyid:38:CD:24:61:19:F8:56:D8:97:3A:87:70:BE:C3:9F:FC:47:A3:C9:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OM0kYRn4VtiXOodwvsOf_EejydY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/96595e-e36a-4051-8453-8fcd53d431d5/1/OM0kYRn4VtiXOodwvsOf_EejydY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ac:71:38:e8:62:00:3d:72:9e:26:a1:a7:71:bb:29:49:e4:
bd:27:ae:75:57:27:f5:53:81:95:d1:14:c8:37:74:11:91:81:
bf:f3:21:01:6e:84:a5:c4:53:0c:d8:6e:2c:d3:e8:cc:b0:b8:
36:91:2c:fb:75:e0:ad:91:85:75:cf:ae:94:15:66:f7:85:f4:
cb:d4:b1:39:7c:d0:af:64:80:cf:3d:11:62:89:db:c8:c0:b0:
d7:90:0f:e5:12:ae:98:39:75:5a:20:a4:19:ad:a9:01:67:58:
f6:dd:0f:db:53:73:b4:f2:84:b3:1d:3f:2c:fd:35:70:dd:a6:
29:be:65:08:8b:c6:07:d8:a9:86:88:d1:3c:eb:cf:53:8d:17:
92:2b:34:d6:d4:58:9d:23:f9:2e:f7:e2:d4:2f:2d:cf:a0:7f:
5d:f6:eb:c0:77:d7:24:34:c0:1e:d6:1a:ec:9b:51:bf:ef:cf:
02:23:da:ce:14:a4:1d:f9:4f:3f:2d:8d:5a:28:f5:4c:b0:6a:
1f:61:c8:77:aa:40:b6:dc:c5:dd:11:7d:e4:e9:ad:26:f5:8c:
9d:34:dc:2d:00:c4:9a:06:af:94:a2:95:0d:0c:c3:9a:89:4e:
27:93:b2:f3:68:31:31:8a:5d:5f:4a:6b:95:6e:dd:07:cf:6e:
68:15:57:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:23 2025 by rpki-client