Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/910313-ce10-4d6f-827c-5c55ec221e12/1/OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.mft
File: OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.mft (raw, json)
Hash identifier: r/Na2XYPhdaIG3UVZRyk2ncSWOms1rA2A1OoYOpinuk=
Subject key identifier: 0D:1D:81:1D:1C:C9:20:87:38:83:A7:31:B2:10:8F:A4:EF:52:D0:BB
Authority key identifier: 38:9D:D4:12:6F:8B:E0:7A:F4:54:49:7C:A0:F5:66:52:95:48:2A:D5
Certificate issuer: /CN=389dd4126f8be07af454497ca0f5665295482ad5
Certificate serial: 0194BBCE807D5CA506C42A3447DE88F13BBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/910313-ce10-4d6f-827c-5c55ec221e12/1/OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.mft
Manifest number: 0386
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.crl (hash: POXzowmA2ULfPSOQ9Be++4hTHkCs98kfY/f/hayCSfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:80:7d:5c:a5:06:c4:2a:34:47:de:88:f1:3b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=389dd4126f8be07af454497ca0f5665295482ad5
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=0d1d811d1cc920873883a731b2108fa4ef52d0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:72:6f:96:2d:58:1b:dd:f3:f3:17:f5:12:
35:67:79:8e:d7:77:80:f8:ab:24:c9:8f:de:b5:f1:
04:13:e6:08:9a:71:85:1e:26:c1:3e:00:1b:7a:25:
41:ed:da:21:54:2f:18:59:64:cd:ef:6c:27:76:36:
bc:5c:b5:93:dd:3e:7b:c6:65:5a:d1:ec:fb:ae:64:
d6:38:a0:1f:c1:36:fe:8e:f2:e4:ec:a8:0e:30:4c:
3a:f3:97:73:77:c4:76:e0:c8:b6:6e:a1:7d:f8:5b:
aa:42:82:cf:5d:61:df:d4:62:0c:08:0d:5d:43:d1:
9f:30:ee:f1:ba:2b:d9:de:5d:9f:01:d9:37:79:a0:
9f:8e:14:21:2e:95:d5:1a:c6:be:37:cd:05:c8:d6:
d7:9d:94:83:21:d0:c3:3b:d8:fd:86:b5:09:fa:4f:
91:a1:58:20:5b:fe:75:2f:dc:dd:a0:82:1e:96:80:
a1:35:31:ed:3d:5e:c8:fd:e2:6a:5b:bd:31:55:74:
e5:c5:fb:94:4d:15:73:4e:99:95:49:9e:39:b7:7e:
76:71:da:d9:9b:08:38:41:70:ec:7a:f4:5e:38:86:
74:47:9f:61:b4:42:9d:ec:59:fd:57:9d:c9:c2:42:
15:c1:15:c4:2f:a1:90:3f:3f:a3:a8:30:c8:44:e6:
91:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1D:81:1D:1C:C9:20:87:38:83:A7:31:B2:10:8F:A4:EF:52:D0:BB
X509v3 Authority Key Identifier:
keyid:38:9D:D4:12:6F:8B:E0:7A:F4:54:49:7C:A0:F5:66:52:95:48:2A:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/910313-ce10-4d6f-827c-5c55ec221e12/1/OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/910313-ce10-4d6f-827c-5c55ec221e12/1/OJ3UEm-L4Hr0VEl8oPVmUpVIKtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f7:f5:c9:11:b9:27:39:4c:45:f2:12:e5:aa:62:d5:13:b1:
d6:0b:a3:b4:54:d5:ff:43:39:d9:bf:4a:69:0a:78:f5:08:ed:
e9:cb:3c:46:b3:11:61:fd:89:51:a9:9f:d5:71:86:1e:81:40:
96:e6:24:e8:3c:33:03:eb:14:bd:13:70:a1:25:01:e7:97:2c:
a6:90:ae:66:35:3c:31:e0:31:dc:1e:cb:cd:52:3c:7b:1d:0a:
db:47:1a:3c:4e:79:80:27:89:99:ac:39:62:d5:d5:6e:cb:7b:
3a:79:1e:88:b8:59:60:da:bb:d2:e0:14:ff:cc:e8:d3:1d:88:
b0:03:bb:25:ca:80:e2:47:7a:55:7a:8d:84:7b:35:74:c1:dc:
5f:20:5e:e6:4d:0b:b5:a0:1c:33:d0:39:a2:ad:29:33:7c:6d:
98:7c:d9:aa:3d:83:58:91:5b:3b:ad:b1:e2:07:97:52:ca:7f:
c4:43:d6:d7:71:9d:d4:ef:75:47:36:a5:4a:60:3b:89:6e:17:
26:af:9b:af:49:49:88:0a:93:5a:0f:57:78:65:ae:26:d3:ef:
d2:8f:dc:21:60:42:be:19:13:5c:e6:77:df:6e:8d:00:f9:c6:
a0:db:18:0f:df:ed:2a:7c:a3:62:30:28:1c:dc:a1:42:52:a9:
76:37:fe:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:30:14 2025 by rpki-client