Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
File: oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft (raw, json)
Hash identifier: SUjQDpA079ZYnrmbNg/u4F3Xb5UXPbCXP+OVw9Fx8zY=
Subject key identifier: F7:C0:12:6F:92:04:20:B7:88:79:2F:ED:C5:7E:8A:0A:B7:FD:89:AD
Authority key identifier: A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
Certificate issuer: /CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Certificate serial: 0194BBCE6DEDBF9EAF7A2A7C13EB93091BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
Manifest number: 11CF
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl (hash: +Hve2QS7NgviVDxKDSAwgEmGUj6eQn1zWV6o1Cuqzx4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6d:ed:bf:9e:af:7a:2a:7c:13:eb:93:09:1b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a4582562c3135bb52bdb96145e1ad03786b148
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=f7c0126f920420b788792fedc57e8a0ab7fd89ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c9:16:91:fd:8b:cd:2d:03:48:fb:6b:76:0e:
71:c4:ac:9c:be:ac:c3:3b:8d:3a:75:cc:3a:0c:a0:
e5:fe:12:9d:93:6f:8c:8a:3c:4b:37:9c:54:8c:e6:
e7:f4:ff:f0:fd:55:67:c2:bc:05:81:04:19:db:2c:
d4:6b:23:85:43:dd:35:b2:25:78:e9:36:07:4f:9f:
a8:37:63:b9:f7:f1:d1:da:7a:49:70:7f:97:cb:46:
4b:19:49:e9:6e:97:3f:39:b1:16:64:9f:e7:d8:0b:
57:b3:f3:7a:c4:c4:ee:df:1c:78:53:0b:4b:f6:ad:
2c:a9:8b:4d:74:96:cb:88:12:ae:37:7d:d2:4a:ce:
7d:ea:0e:de:e0:bd:41:b9:2f:c8:03:81:bf:f6:45:
fd:90:5e:b0:6a:32:7a:31:53:2e:c5:58:d2:1d:9e:
a9:0a:44:d8:8f:89:16:28:e5:cd:fc:d4:c7:5b:e2:
41:f1:3e:d4:b3:08:43:db:48:60:72:40:23:e7:08:
49:ef:32:86:69:22:54:f3:6e:40:40:68:a5:7c:a2:
43:3e:4a:5b:10:1a:cb:a5:0a:d3:5d:ef:b6:37:45:
0e:6d:3d:a5:80:f3:f8:f0:00:27:ee:da:09:46:fa:
e4:3d:86:66:62:69:14:94:58:28:c3:9d:62:5e:03:
80:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:C0:12:6F:92:04:20:B7:88:79:2F:ED:C5:7E:8A:0A:B7:FD:89:AD
X509v3 Authority Key Identifier:
keyid:A1:A4:58:25:62:C3:13:5B:B5:2B:DB:96:14:5E:1A:D0:37:86:B1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaRYJWLDE1u1K9uWFF4a0DeGsUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4d10c0-67bf-4135-97ab-bbf2ce07ecad/1/oaRYJWLDE1u1K9uWFF4a0DeGsUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:f2:4c:d1:f9:76:e2:f5:5f:af:83:79:84:f0:81:20:8a:1d:
c8:2c:39:00:e2:df:a3:f6:7e:80:a4:c7:7f:9e:28:fb:f6:f6:
f0:f1:fa:14:fa:c8:64:01:aa:84:34:15:f0:89:fe:c0:fa:ae:
23:b9:dc:79:63:67:05:68:f0:45:86:a0:56:59:9c:78:cc:3a:
2b:45:f4:21:82:01:b5:7f:4d:63:68:fd:0c:98:20:5f:60:2f:
31:10:06:6a:0d:3b:e8:6b:2f:2f:7a:e2:f1:be:c0:31:10:d4:
1f:df:4c:f5:6d:31:59:d3:5c:c8:09:2e:8f:4e:86:a7:60:62:
6e:67:31:a9:60:3a:42:41:7a:02:46:5c:cd:29:6e:9a:cb:c7:
d2:aa:49:a4:fa:37:9f:8e:b7:12:14:9f:d2:58:80:9e:bf:ac:
5f:03:5d:a5:32:cd:3f:30:90:d8:de:e7:c6:8d:51:d3:b8:d7:
b3:08:9e:fb:5b:f3:1d:98:f9:1b:4c:ce:d2:f5:6c:84:51:dc:
b2:ee:b7:29:0f:1a:fc:49:d6:00:86:84:90:39:c6:d4:41:04:
52:d6:ec:18:23:1d:6d:4a:ca:c6:35:ee:a1:c0:57:c8:63:d3:
5e:75:54:77:9b:72:3a:0c:3c:e0:6a:d3:a1:f4:16:d4:ac:3c:
1e:41:65:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:14:12 2025 by rpki-client