Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
File: ofM67NjVmmpPBWkszHLitxOeF8w.mft (raw, json)
Hash identifier: JfidlWHCftivAEJVGEIDFk7SO9md2HWvWINQHfosbpY=
Subject key identifier: BD:4F:93:81:0B:72:43:0C:10:C0:22:5F:02:76:90:E4:82:C5:62:04
Authority key identifier: A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
Certificate issuer: /CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Certificate serial: 0194BC3C41E99DC845C8BD04D6CE9FBF231E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
Manifest number: 0B0A
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: ofM67NjVmmpPBWkszHLitxOeF8w.crl (hash: z8vqvk/zUz0WYIcBcEzRUViYWiIGUD+iW4VxkmxgB+w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:41:e9:9d:c8:45:c8:bd:04:d6:ce:9f:bf:23:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f33aecd8d59a6a4f05692ccc72e2b7139e17cc
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=bd4f93810b72430c10c0225f027690e482c56204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:46:6a:44:52:88:24:8f:0d:ec:f9:c6:94:6a:
f8:49:1c:5e:70:ab:fd:2d:ae:83:b0:cc:92:15:93:
9f:bf:05:9d:53:bc:3c:75:a4:1a:dd:a7:73:cb:ce:
bd:f0:93:c4:01:8d:67:a2:23:8c:d7:54:a5:7d:cb:
9f:7e:a5:4e:02:1e:85:2c:f5:ca:87:45:32:90:4b:
7e:eb:4e:09:56:c9:d7:59:be:de:70:3b:75:89:8d:
14:48:0a:1f:0b:36:83:95:6c:5f:25:4f:ac:f2:40:
96:47:05:dd:36:5a:d4:7f:5a:a2:c5:5e:1c:90:0f:
fc:55:62:06:50:da:e9:eb:cc:a0:61:a2:e0:7a:6a:
7c:cd:4a:87:f1:8a:aa:65:34:bc:5c:57:98:9f:43:
6e:b4:10:66:c8:6c:63:1f:13:49:af:2a:b9:09:94:
82:30:78:3d:5a:75:39:65:25:98:fd:48:9d:d7:9b:
8f:1d:37:4d:f5:7b:67:2a:52:e3:cf:52:01:52:54:
14:d5:0a:2b:21:d7:31:65:c3:33:31:0c:fb:2f:cd:
8b:c7:c3:7b:30:0a:69:bd:d2:95:5f:4a:75:9a:cc:
fb:68:b4:40:5c:a7:be:e6:ee:45:ea:af:93:ad:27:
37:f3:41:22:00:45:69:1d:bd:77:5d:54:79:05:88:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4F:93:81:0B:72:43:0C:10:C0:22:5F:02:76:90:E4:82:C5:62:04
X509v3 Authority Key Identifier:
keyid:A1:F3:3A:EC:D8:D5:9A:6A:4F:05:69:2C:CC:72:E2:B7:13:9E:17:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM67NjVmmpPBWkszHLitxOeF8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b07f7c-2308-4d4a-98b8-39d63e9e586b/1/ofM67NjVmmpPBWkszHLitxOeF8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ce:43:5f:02:69:b7:93:09:39:ad:68:ec:7c:77:cd:ad:85:
e4:5a:d4:34:c5:ac:0a:7d:37:bf:2a:8e:42:0f:e0:ce:db:21:
06:31:ba:95:fc:38:91:bf:91:a8:ab:3d:91:15:57:a9:b5:62:
c3:bd:87:63:fa:4b:0f:ab:e4:73:05:b1:08:f1:5a:5b:de:18:
6e:a0:b7:c6:00:76:96:5e:0f:83:91:ef:96:e5:9c:24:be:c1:
5a:b6:5a:f6:73:40:1b:ab:cc:a0:13:63:dc:33:6f:10:13:fb:
85:bb:a1:5c:32:33:d7:bd:de:78:b0:4b:a0:e9:a6:2b:93:f6:
85:aa:08:0e:aa:71:67:59:9e:3a:35:8b:27:61:17:01:3a:aa:
75:58:b3:9b:08:8e:61:5e:c8:e1:af:90:19:37:83:82:4e:b1:
1f:2a:86:ac:6f:40:ac:99:b4:35:46:cc:e4:36:96:94:6b:78:
da:eb:8c:b7:c9:11:7f:91:eb:d1:54:4b:b5:7d:fa:b6:e5:65:
86:f2:f3:0d:7f:8e:7d:62:69:2a:a6:5d:0a:ff:71:ae:98:d4:
49:70:f4:05:99:81:73:1f:4d:2a:3e:28:f7:59:56:63:7d:43:
15:03:a2:e5:2b:b6:2d:4b:d6:66:f0:0f:1d:19:6d:0d:cd:6f:
57:9d:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:18 2025 by rpki-client