Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/057f9b-a03c-4ba3-9b7f-57d3dfa56407/1/oybRlH-kQ2NloBOsZ_TzKx_bqck.mft
File: oybRlH-kQ2NloBOsZ_TzKx_bqck.mft (raw, json)
Hash identifier: H24U6Ol/gCWzy1JAZbkcevPAwkhsa+ksZ3bhResvwMM=
Subject key identifier: C6:E3:BC:83:AA:DA:16:F6:49:7C:71:BC:0A:53:7C:20:89:AE:B6:A3
Authority key identifier: A3:26:D1:94:7F:A4:43:63:65:A0:13:AC:67:F4:F3:2B:1F:DB:A9:C9
Certificate issuer: /CN=a326d1947fa4436365a013ac67f4f32b1fdba9c9
Certificate serial: 0194BBCDC0E197F25850EB417FCEEFE32370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oybRlH-kQ2NloBOsZ_TzKx_bqck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/057f9b-a03c-4ba3-9b7f-57d3dfa56407/1/oybRlH-kQ2NloBOsZ_TzKx_bqck.mft
Manifest number: 1123
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: oybRlH-kQ2NloBOsZ_TzKx_bqck.crl (hash: l5wYHAPcE+IueH1uOUijsAVkaLW8Nqq5RRNeRy4FUtc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c0:e1:97:f2:58:50:eb:41:7f:ce:ef:e3:23:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a326d1947fa4436365a013ac67f4f32b1fdba9c9
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=c6e3bc83aada16f6497c71bc0a537c2089aeb6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6d:b3:64:9c:d0:5b:30:aa:4d:fb:5b:3e:2c:
98:f5:76:2f:9e:bf:d8:72:0e:71:8b:54:13:4e:fb:
4f:67:54:69:d8:6b:11:9f:27:06:c5:59:5c:73:9a:
e3:1b:54:ab:bb:7c:88:bd:88:7f:7c:cd:63:50:c4:
b8:4a:39:6f:c5:d6:f2:77:de:14:85:93:4f:ac:40:
3b:8f:b1:e1:c8:06:65:dd:e1:ea:61:2f:2d:7f:9b:
e3:39:c3:09:38:cf:cb:09:94:77:48:91:ac:10:2d:
57:c8:65:6a:1f:9a:54:cd:b1:2b:2b:72:24:d7:6b:
ea:57:3b:2e:3a:c5:b0:bf:bd:ed:a1:70:50:d9:39:
bf:d1:c2:a2:d7:f8:b2:f6:d8:b2:41:e0:e9:5f:34:
91:d5:b7:b8:97:74:1b:69:6e:f8:fe:0e:c7:e7:1c:
92:e0:57:44:5d:bf:d6:81:f5:ad:85:cd:9f:65:e5:
a1:85:d5:d1:9c:d4:86:a5:21:90:79:b1:75:4e:29:
74:8b:26:79:a4:2e:af:45:65:f9:6c:00:f4:29:ea:
b0:1e:da:b5:a4:1b:c4:70:72:8d:fd:1c:fb:6d:06:
fd:ee:1e:26:1d:22:5f:7e:ba:3b:78:88:d8:65:ae:
11:d3:84:ef:51:74:ef:be:f2:ce:5f:6e:cf:7c:b4:
c0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E3:BC:83:AA:DA:16:F6:49:7C:71:BC:0A:53:7C:20:89:AE:B6:A3
X509v3 Authority Key Identifier:
keyid:A3:26:D1:94:7F:A4:43:63:65:A0:13:AC:67:F4:F3:2B:1F:DB:A9:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oybRlH-kQ2NloBOsZ_TzKx_bqck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/057f9b-a03c-4ba3-9b7f-57d3dfa56407/1/oybRlH-kQ2NloBOsZ_TzKx_bqck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/057f9b-a03c-4ba3-9b7f-57d3dfa56407/1/oybRlH-kQ2NloBOsZ_TzKx_bqck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3b:1e:69:18:7c:1e:4c:fd:65:e6:d8:2a:d8:70:87:fc:75:
87:0d:ee:f8:43:5a:96:4d:4b:70:07:6e:37:50:cb:45:7c:00:
87:c4:fd:b9:48:9b:a9:5c:e9:7c:bf:c3:e4:12:41:91:96:3c:
e0:cc:36:6c:5e:fa:2a:9e:81:ea:8f:b4:34:07:2a:54:85:fe:
65:b9:3b:76:b1:e3:66:b0:d0:71:f3:0d:98:da:ee:ae:bb:e7:
ee:bb:eb:ae:1d:0f:9f:0f:2c:8f:9a:70:4b:8c:ad:cc:2d:66:
a1:19:60:bb:82:89:2e:3a:e0:72:53:e5:1d:99:65:48:06:7e:
94:a8:5d:c9:93:62:e2:7f:e6:d7:98:d1:f7:0e:a1:2a:be:44:
90:29:84:da:a9:c6:10:ab:60:0a:0c:3e:d4:82:7e:c8:58:8f:
dc:75:9d:a8:ee:c7:0e:37:ce:5b:fe:05:a3:38:7f:6c:69:33:
e8:a8:6b:b5:bb:7d:d4:dd:41:9e:48:cf:40:e5:d7:66:9e:5e:
73:b8:99:e2:dc:19:99:1f:c2:5b:21:de:24:fc:e2:10:06:fe:
aa:3c:a4:a3:a1:30:39:41:84:6f:76:22:47:2e:41:12:06:bc:
59:0d:f9:31:92:92:0f:39:14:61:52:67:06:aa:35:cf:f6:b8:
9c:72:0a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:37 2025 by rpki-client