Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
File: ODQP9mmjrcnWaWE1yNcfbfXqwns.mft (raw, json)
Hash identifier: W6cGVI5XSefufrBKUmPjpUrthyTSBYSGBD9soQd/KYA=
Subject key identifier: F9:D5:AE:43:E7:06:26:11:4F:91:30:7A:58:68:9A:4F:9C:40:AE:13
Authority key identifier: 38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
Certificate issuer: /CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Certificate serial: 0194BBCDB42D9F70C0F81768FA5647C7F564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
Manifest number: 07CF
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: ODQP9mmjrcnWaWE1yNcfbfXqwns.crl (hash: XEu+3k0CDya5se5vOtZ+oyt7jyi3OTWG/YEKhEtBpiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b4:2d:9f:70:c0:f8:17:68:fa:56:47:c7:f5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38340ff669a3adc9d6696135c8d71f6df5eac27b
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=f9d5ae43e70626114f91307a58689a4f9c40ae13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:ef:85:73:93:69:0b:2f:c3:27:00:f1:3e:
d3:43:bc:03:f0:7e:88:ae:e4:78:56:e0:5f:3a:83:
85:d0:24:90:68:a2:47:e1:a8:93:08:d2:b1:26:1f:
ac:84:ea:91:00:02:50:c8:7a:20:f7:2b:ec:f4:0c:
e4:dd:62:7a:21:ed:eb:bf:1a:31:89:5b:74:df:c0:
23:a4:34:8a:5e:7e:45:c8:43:95:32:08:aa:65:72:
b3:bb:8d:c7:47:2a:32:eb:c3:9d:87:eb:8a:01:48:
dd:72:82:6e:fb:42:c4:4e:7e:2a:6c:29:89:6c:da:
ff:fd:30:fe:dc:8e:3b:e5:f9:44:e9:b1:2c:35:f1:
99:e9:52:13:e8:8b:26:fc:8f:0f:94:e5:86:b8:f9:
2a:69:97:5b:e7:91:d9:72:fa:dc:4d:cb:ff:bd:05:
e4:40:4b:da:ec:51:c9:e6:de:4c:a6:49:52:80:b1:
4f:ad:9f:b3:ca:1f:7b:20:c0:a8:bc:f7:4b:17:67:
ba:a2:8f:4c:ad:0f:a7:55:58:27:70:5c:71:51:be:
74:86:32:1b:1b:f2:5f:44:dd:cb:22:35:bc:e6:01:
dc:65:f2:8c:85:c4:a9:eb:c6:ab:96:00:be:d4:d0:
77:ae:09:db:cc:41:a2:ae:5a:45:f3:57:61:ff:b6:
de:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D5:AE:43:E7:06:26:11:4F:91:30:7A:58:68:9A:4F:9C:40:AE:13
X509v3 Authority Key Identifier:
keyid:38:34:0F:F6:69:A3:AD:C9:D6:69:61:35:C8:D7:1F:6D:F5:EA:C2:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODQP9mmjrcnWaWE1yNcfbfXqwns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f4ce89-8a16-4af5-b57c-2846eaadde67/1/ODQP9mmjrcnWaWE1yNcfbfXqwns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:cf:05:3c:da:02:7a:40:a1:9b:36:fd:bc:4c:2c:75:74:37:
7c:9f:f1:5a:a6:a8:18:e2:9b:db:46:ec:05:8e:d1:e9:84:79:
a0:ab:c2:01:2c:cc:67:39:c7:b4:7d:46:be:87:03:d0:74:f2:
61:89:4c:7a:af:f7:38:dc:99:d0:3f:94:d3:09:76:0a:20:5e:
bc:dc:54:8a:11:3a:0e:5f:7b:af:0d:b4:87:fe:76:4a:5d:37:
32:6f:86:11:65:94:6f:d2:fd:e7:99:35:f9:46:de:ec:e9:87:
18:48:e0:33:b8:e6:3c:c8:e4:4a:13:8e:b6:1b:21:4c:cd:93:
83:9e:67:a9:dc:bf:7a:29:4b:d8:a6:17:d4:d5:bf:3f:fb:31:
07:c0:53:cb:be:56:ec:a8:c9:ec:25:81:39:bb:e6:5b:05:a1:
65:92:51:38:4b:53:0e:a4:3d:1d:59:7f:9a:d5:5d:d8:79:1e:
87:bc:df:4e:a0:5b:91:cf:64:77:1e:c3:ed:b7:73:3a:ca:c9:
7c:18:bd:20:ef:ac:5f:47:9b:78:c4:ab:84:4e:e9:5e:c1:69:
17:37:15:f0:66:db:1b:cb:47:cf:02:ab:40:2a:5e:c9:45:c9:
e2:a8:29:f1:01:78:15:0a:47:7d:35:c0:d6:68:86:4e:8d:9f:
d0:41:84:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:37 2025 by rpki-client