Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft
File: t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft (raw, json)
Hash identifier: Dfg4RgQsKWCF7v4o+wQKZawtaK4U/YSuoGiK9RSmvWo=
Subject key identifier: 83:1E:4A:A2:EF:7D:D3:64:AD:24:88:BC:C4:F1:CA:07:05:32:42:19
Authority key identifier: B7:E3:AA:A5:9C:48:E9:0C:FE:25:B8:B4:A2:97:D3:DE:3B:AB:D2:C1
Certificate issuer: /CN=b7e3aaa59c48e90cfe25b8b4a297d3de3babd2c1
Certificate serial: 0194BC3CA26534CAB6411B2254D17962C3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-OqpZxI6Qz-Jbi0opfT3jur0sE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft
Manifest number: 0A4D
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: t-OqpZxI6Qz-Jbi0opfT3jur0sE.crl (hash: STNShV3FQd8mMt97U3S6Sa3hnkYky/ZbITUrY9r5bsE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a2:65:34:ca:b6:41:1b:22:54:d1:79:62:c3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7e3aaa59c48e90cfe25b8b4a297d3de3babd2c1
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=831e4aa2ef7dd364ad2488bcc4f1ca0705324219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ff:af:3e:dd:02:92:5d:02:db:99:a5:9c:49:
bf:30:fc:52:ea:25:8b:1d:bf:b5:c4:d8:59:84:67:
13:d3:13:01:23:f5:7c:a7:48:6c:18:8f:1d:03:77:
7e:c4:37:ae:eb:5e:75:b7:fc:ba:ee:91:b9:cd:e6:
7c:b2:0f:81:66:c4:60:e2:ae:76:f3:b2:aa:6e:b0:
86:57:d2:e3:0f:df:e3:1b:ad:03:e5:6c:5e:b7:5b:
d8:8f:5f:a1:fd:32:24:5d:b1:44:20:34:03:8c:ee:
17:72:16:39:10:dd:4f:49:d5:a8:cc:55:a4:ae:10:
0f:21:4e:81:07:94:4a:fb:37:00:ff:4a:31:6b:ec:
07:b6:68:b5:ee:fa:6e:69:b1:7f:93:38:f3:94:85:
73:9d:e2:20:d7:11:ad:b8:31:d8:fc:04:bb:c5:a0:
19:2c:44:af:96:78:00:33:8e:fc:85:b8:c7:ce:1a:
58:db:3e:0c:b7:07:55:a1:96:0d:7c:72:47:16:75:
ee:e2:ed:88:86:8b:65:5b:a1:b2:a0:ab:53:b2:f5:
5e:bc:95:37:14:82:ff:4c:b7:97:0d:57:c8:cc:fe:
3b:8e:8b:fe:ca:1c:73:98:71:0f:e7:ae:75:3d:3d:
2e:a0:cd:61:6f:f8:09:46:14:fe:63:6a:4f:fe:f1:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1E:4A:A2:EF:7D:D3:64:AD:24:88:BC:C4:F1:CA:07:05:32:42:19
X509v3 Authority Key Identifier:
keyid:B7:E3:AA:A5:9C:48:E9:0C:FE:25:B8:B4:A2:97:D3:DE:3B:AB:D2:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-OqpZxI6Qz-Jbi0opfT3jur0sE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/ba3ab1-f426-4779-a818-1096a982c66d/1/t-OqpZxI6Qz-Jbi0opfT3jur0sE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a9:1a:c2:4b:85:69:88:d7:ac:80:9c:39:ba:89:a4:17:69:
e2:69:bd:3a:3d:16:bc:b1:c2:da:3f:99:fa:a3:d2:c8:21:79:
ba:41:65:04:f6:21:e0:76:43:7d:a6:c3:b4:7e:2a:d0:24:32:
41:14:eb:eb:60:42:5f:ea:38:0d:36:37:e8:59:11:fb:cc:b5:
01:5d:43:62:92:92:91:e6:3e:2b:70:76:3e:8e:27:8a:53:e4:
92:20:b1:01:30:76:32:a4:10:7a:3b:e6:fb:d6:01:cf:bb:54:
6c:3e:7d:8a:b3:5d:ca:0b:93:cd:ea:66:aa:ff:44:2a:bd:bf:
6e:6e:80:62:b1:d9:05:59:34:04:30:8a:ed:fa:7a:29:24:ad:
55:44:82:20:bb:de:ee:74:42:9a:aa:4a:c9:0b:18:0f:ba:79:
b6:cf:ee:5a:05:24:21:41:a9:0d:e3:ea:5a:02:1c:06:0a:89:
14:2b:49:79:5b:f1:56:ff:01:79:bc:c6:a2:15:b9:d4:07:b3:
a3:40:a5:ac:e9:02:ee:3f:40:39:60:00:25:d6:74:52:4a:8e:
7d:14:5f:f8:68:d0:87:3b:7e:bf:2f:03:15:01:d1:f3:c1:11:
ff:3c:41:75:2b:3d:75:0f:8f:1b:5a:02:fb:f4:fb:33:22:b8:
11:7f:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:50 2025 by rpki-client