Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.mft
File: ofM7gYxgo6zGnzmgsuDuqrttk-A.mft (raw, json)
Hash identifier: iRVD9G7CdGMAlc9VDhvrs0dIkNiKXfjHo1Ag90QldqM=
Subject key identifier: CA:BC:65:FC:D3:85:9C:92:B1:D3:86:DE:1A:9A:F5:EC:51:F0:6D:88
Authority key identifier: A1:F3:3B:81:8C:60:A3:AC:C6:9F:39:A0:B2:E0:EE:AA:BB:6D:93:E0
Certificate issuer: /CN=a1f33b818c60a3acc69f39a0b2e0eeaabb6d93e0
Certificate serial: 0194BD174E2E62ACCD42D085D4E36381F7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofM7gYxgo6zGnzmgsuDuqrttk-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.mft
Manifest number: 1071
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: ofM7gYxgo6zGnzmgsuDuqrttk-A.crl (hash: r4wNUANMlGLScrR+ZubHnU42vkotuDCOocTkWnCzxCs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4e:2e:62:ac:cd:42:d0:85:d4:e3:63:81:f7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f33b818c60a3acc69f39a0b2e0eeaabb6d93e0
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=cabc65fcd3859c92b1d386de1a9af5ec51f06d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:50:58:45:44:c8:ee:43:bd:ad:30:f5:1f:99:
4e:d3:cf:0c:9f:6e:ae:d4:6a:b7:f5:8e:98:2c:f5:
3a:6b:70:71:e2:e6:f3:35:e3:b3:e3:87:30:91:8f:
b8:c2:97:50:b8:06:b6:17:ab:41:59:7d:a2:96:0d:
db:4a:cc:b7:fb:c3:37:83:53:df:15:0b:a5:1c:a6:
f7:84:d6:18:b6:7b:b9:67:c2:bd:c6:58:d2:11:2b:
7c:c6:75:0f:34:c0:29:63:b0:f6:b5:5b:3b:7e:f7:
3a:b6:39:78:90:bf:17:a4:4b:6b:ef:54:b9:b6:08:
47:2f:59:65:6b:50:ad:a8:53:32:3f:50:43:a7:62:
5b:9b:c3:15:27:7e:6a:66:8f:d0:a3:7c:4b:92:af:
19:dc:ca:a5:fc:bf:70:f8:3b:a8:85:9f:5f:3d:7a:
14:cf:a9:e3:3f:d5:67:dc:c2:85:16:dd:f5:7f:13:
e6:89:fc:80:83:ca:6b:80:56:07:30:2e:df:29:fb:
3d:a3:bb:26:9f:c9:1b:96:81:81:94:52:10:be:6d:
2d:67:95:ad:95:06:be:6f:31:5a:f5:46:36:e7:99:
c4:70:80:54:20:cc:61:7b:53:5a:23:9f:4e:a6:60:
20:f3:e3:93:7c:06:e9:0e:64:1e:f3:ce:e8:13:8c:
fb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BC:65:FC:D3:85:9C:92:B1:D3:86:DE:1A:9A:F5:EC:51:F0:6D:88
X509v3 Authority Key Identifier:
keyid:A1:F3:3B:81:8C:60:A3:AC:C6:9F:39:A0:B2:E0:EE:AA:BB:6D:93:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofM7gYxgo6zGnzmgsuDuqrttk-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/72255a-109f-434a-a7dd-e152ddf5ab06/1/ofM7gYxgo6zGnzmgsuDuqrttk-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:37:cc:a6:84:ba:6a:b8:e3:82:00:9c:51:1e:93:06:67:3a:
a9:67:8c:fb:e9:56:01:0c:30:83:5c:de:81:4a:0c:6f:3e:19:
bb:bd:cb:fe:66:fd:a0:13:86:f8:9f:bd:83:f8:a4:97:4c:c8:
60:d1:6f:83:55:ec:38:03:52:f7:83:2b:8d:d9:bf:62:df:ec:
57:30:6a:dd:32:e6:9c:ce:47:cd:05:30:cb:b4:88:2b:88:bd:
ab:1b:6b:3e:39:cb:14:8d:b3:3a:83:43:97:45:86:c5:33:62:
26:78:49:e3:42:e3:47:18:29:ae:6e:cf:80:92:83:5d:6c:17:
f6:79:a4:fc:56:aa:16:62:6b:c9:2f:e0:c6:75:9c:09:a9:41:
39:a4:3c:b9:85:59:16:fc:11:69:a9:20:d5:f6:77:cd:88:06:
94:fc:11:c2:d9:ad:04:4c:95:7f:56:bb:91:38:18:34:64:b9:
b2:6a:04:2b:48:87:c0:1f:b5:62:b5:57:5c:5c:05:26:79:ab:
5a:21:8a:96:e4:1b:6b:bc:31:e8:dc:34:d2:b2:93:bf:0e:c5:
91:b9:fe:6d:a1:44:88:55:1b:7d:d6:51:38:22:6e:fc:56:bf:
62:3f:48:2c:cc:7e:dc:92:9b:d2:91:d9:ee:a7:a4:38:32:d8:
7c:d9:4c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:40:02 2025 by rpki-client