Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce3a39-5baa-4c8d-ae6f-c5593d14617b/1/_ocU-XQUakcmThHuhpWPRnj3Apg.mft
File: _ocU-XQUakcmThHuhpWPRnj3Apg.mft (raw, json)
Hash identifier: jNvabscqjTRHwcHEbh90qXk9TlQkjpSqZgTbw3MHhZk=
Subject key identifier: 2A:BF:DC:AD:35:CD:67:DB:9C:47:FC:B5:90:59:E3:E9:90:B1:8D:AA
Authority key identifier: FE:87:14:F9:74:14:6A:47:26:4E:11:EE:86:95:8F:46:78:F7:02:98
Certificate issuer: /CN=fe8714f974146a47264e11ee86958f4678f70298
Certificate serial: 0194BBCE06FE99A05EE3982122F104B2C3EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ocU-XQUakcmThHuhpWPRnj3Apg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce3a39-5baa-4c8d-ae6f-c5593d14617b/1/_ocU-XQUakcmThHuhpWPRnj3Apg.mft
Manifest number: 0BD0
Signing time: Fri 31 Jan 2025 10:00:29 +0000
Manifest this update: Fri 31 Jan 2025 10:00:29 +0000
Manifest next update: Sat 01 Feb 2025 10:00:29 +0000
Files and hashes: 1: _ocU-XQUakcmThHuhpWPRnj3Apg.crl (hash: 7qADFNOAxgcCHuknJw38JEdqq+sTDclQVYQfFLL+N9o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:06:fe:99:a0:5e:e3:98:21:22:f1:04:b2:c3:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8714f974146a47264e11ee86958f4678f70298
Validity
Not Before: Jan 31 10:00:29 2025 GMT
Not After : Feb 1 10:00:29 2025 GMT
Subject: CN=2abfdcad35cd67db9c47fcb59059e3e990b18daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:d6:a7:b4:41:5e:99:fd:02:63:34:8a:d5:
cc:c0:11:a9:db:c2:98:8e:1e:72:28:0a:cb:c7:9d:
db:c7:20:7d:9b:b1:2b:5c:c0:1c:1c:cc:ca:35:b7:
13:f3:da:88:52:c3:ea:1f:c1:a4:c0:2d:58:9c:c7:
89:f7:1f:09:b7:aa:95:a3:91:71:54:ce:49:ae:f1:
46:40:ba:b0:94:01:ac:21:17:c9:e1:34:01:29:68:
10:ac:84:a5:4e:d5:45:cb:ec:54:09:60:cd:6e:39:
9e:b4:d1:d7:b6:b5:61:6e:c4:2a:59:44:d8:9c:a6:
33:13:ac:e4:9c:5a:2a:49:23:81:cd:4f:5f:ed:66:
fc:28:dc:c5:36:78:e2:48:10:3d:5b:19:4b:3e:1a:
27:c5:0f:19:6c:ba:4f:4d:01:e6:0f:4e:15:00:b0:
ae:fd:27:2e:48:46:30:07:36:14:d4:07:3d:e5:99:
3b:1c:17:3b:82:56:9d:9a:05:8a:32:37:17:44:4d:
d5:11:4a:3d:29:77:bc:31:fc:14:0a:a0:d3:38:75:
dc:af:5b:b2:4b:8b:09:3c:7c:35:70:42:e1:bc:84:
71:da:96:d9:f4:9d:7f:ac:c4:03:4e:e2:86:bc:aa:
a2:0e:fe:8d:30:9f:41:5c:60:c7:1a:65:42:1a:c0:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BF:DC:AD:35:CD:67:DB:9C:47:FC:B5:90:59:E3:E9:90:B1:8D:AA
X509v3 Authority Key Identifier:
keyid:FE:87:14:F9:74:14:6A:47:26:4E:11:EE:86:95:8F:46:78:F7:02:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ocU-XQUakcmThHuhpWPRnj3Apg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce3a39-5baa-4c8d-ae6f-c5593d14617b/1/_ocU-XQUakcmThHuhpWPRnj3Apg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce3a39-5baa-4c8d-ae6f-c5593d14617b/1/_ocU-XQUakcmThHuhpWPRnj3Apg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:69:8e:b1:4b:0c:7f:8f:71:c2:bf:58:04:ba:f5:d9:e4:2d:
85:30:b1:07:0f:1f:f6:a3:1a:2f:29:4f:9d:5f:9d:a2:f8:6c:
db:8e:52:db:53:1e:0b:6c:c2:ed:0a:3e:e7:a9:2f:ba:3e:ff:
02:5d:12:89:26:b6:62:95:3c:86:6d:9d:68:40:40:6c:b2:95:
2f:db:5c:5a:a4:7d:82:2c:a5:6a:3e:95:e4:95:33:af:b2:af:
dc:e0:0a:03:d9:81:a1:ef:07:af:93:ac:66:d9:26:fe:41:4d:
8f:44:fa:a4:f8:c1:6c:59:0f:cc:94:41:e6:83:95:c9:91:67:
c0:94:00:89:31:c2:51:18:d2:b6:96:7c:ac:2b:31:af:d7:e0:
64:ea:f1:e5:dd:52:92:1d:06:bf:5f:6f:92:87:a8:12:8d:73:
17:df:a6:f8:6a:63:0c:94:62:38:b3:b4:c9:97:48:11:3b:98:
8e:9d:48:b6:a7:fe:df:20:d0:53:77:ab:5e:1e:a3:ef:01:09:
37:ae:49:bf:52:bf:4e:47:e2:a8:0b:92:d8:d7:ec:3c:a2:6e:
da:24:22:81:82:42:b9:b7:d7:21:ec:45:a9:06:30:ff:0a:3c:
c7:73:bb:b2:3d:ca:66:ba:7c:83:55:32:a7:c2:01:4e:f8:bd:
c7:9b:ab:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:04 2025 by rpki-client