Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
File: os0snkthAHq1W8aePuP_zmJi2BE.mft (raw, json)
Hash identifier: 2fMf/Z8VOAgtBbrS6LEsyTH0rBoNtp/n3U0TkJOeu0A=
Subject key identifier: 0C:18:CF:5B:44:36:6D:8B:88:7D:CA:13:2E:8B:D6:28:B0:4B:7B:49
Authority key identifier: A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
Certificate issuer: /CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Certificate serial: 0194BBCEB46411D55898E4705918C1A62D87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
Manifest number: 0C9B
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: os0snkthAHq1W8aePuP_zmJi2BE.crl (hash: hfPw3t0r71SqQ2xeigvYoQ40ifApaQLO7u4Md/JHDEs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b4:64:11:d5:58:98:e4:70:59:18:c1:a6:2d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cd2c9e4b61007ab55bc69e3ee3ffce6262d811
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=0c18cf5b44366d8b887dca132e8bd628b04b7b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0d:b6:f9:81:5b:4f:b2:72:15:10:1a:e7:5e:
20:a3:d0:06:fd:8c:21:94:83:c1:bd:47:f0:1d:d4:
c3:b8:bd:4c:b8:fb:91:97:b6:23:e1:fa:8b:4a:cd:
d0:99:5a:c7:4d:79:71:e5:84:dd:6b:51:83:b1:84:
5e:96:88:b5:5f:a6:92:84:f0:83:a0:21:c3:0b:2a:
75:96:cc:b8:d6:a4:fd:4b:10:39:ce:02:02:d3:38:
79:6c:e3:11:f6:71:7c:39:6c:14:9c:9a:aa:00:a6:
c3:9f:da:a8:c5:fe:41:82:da:7a:52:00:be:f6:c2:
f7:5d:47:e8:9a:19:f8:a8:44:95:df:68:67:71:a5:
f7:ac:5b:a7:ce:13:4c:4b:3b:fa:59:8d:1a:16:a9:
c8:05:b6:96:1a:79:4f:1b:f3:f4:9b:b3:69:ef:2d:
80:83:dd:82:15:8e:19:88:b6:03:11:7a:d3:55:6c:
45:9a:9c:d6:cb:25:3d:50:b4:23:93:36:89:1f:63:
0a:c7:9c:6c:c9:f8:93:05:93:3d:ff:ad:56:01:70:
e3:84:1c:1e:48:87:d1:d1:cb:62:77:08:1a:76:2e:
fc:6d:f5:0c:28:e8:19:f3:9c:c4:78:e2:f1:cd:8b:
73:66:32:0a:40:06:70:d3:33:d3:5d:8c:b4:27:46:
96:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:18:CF:5B:44:36:6D:8B:88:7D:CA:13:2E:8B:D6:28:B0:4B:7B:49
X509v3 Authority Key Identifier:
keyid:A2:CD:2C:9E:4B:61:00:7A:B5:5B:C6:9E:3E:E3:FF:CE:62:62:D8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/os0snkthAHq1W8aePuP_zmJi2BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6c4c6c-af22-40a4-ae2c-4a02f097cdb1/1/os0snkthAHq1W8aePuP_zmJi2BE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fb:38:ba:c9:20:1d:1e:af:a2:e2:5c:ae:61:04:8f:2a:55:
c8:c5:4b:3e:e3:65:a3:94:83:14:2f:18:6c:95:11:65:20:13:
ca:2b:f3:eb:43:42:8f:0b:4e:99:d2:68:2e:46:71:1f:e6:09:
69:f4:68:e1:76:93:0e:30:2a:b8:5c:ac:1c:73:75:7e:f9:c8:
bd:f0:83:b9:43:ef:2a:73:0a:da:c2:12:b0:8d:90:08:ea:62:
59:63:61:a8:25:04:48:c1:62:68:87:e2:12:bf:ac:0f:44:14:
51:b4:d6:71:62:e7:7f:60:41:5d:3d:b2:63:0c:6a:6b:e2:15:
24:97:2e:80:59:65:1b:a1:72:74:84:ee:a6:13:09:49:9a:4f:
3f:1a:cf:cb:75:9a:ef:b3:f6:80:7f:72:d4:84:aa:76:0a:95:
5c:b0:35:68:cf:bc:ae:bd:e9:58:09:82:3c:29:3e:5f:c1:16:
08:b5:0a:0e:c8:2e:7a:96:10:f0:de:2c:f1:9d:cd:28:d4:77:
1f:df:df:94:d2:e8:ca:03:43:b5:ec:4d:d1:5d:f1:bd:5b:56:
f5:47:81:f4:38:28:73:69:c1:4b:33:3d:22:bd:7c:09:95:f0:
dd:3e:6f:cb:f4:20:b4:4e:b9:af:af:a4:3e:7b:5c:48:f3:22:
83:e8:2f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:03 2025 by rpki-client