Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
File: oNPtV5U0igTn7NFy12QvqWIJcoc.mft (raw, json)
Hash identifier: 8UUe0QGrH5EbasFPJrQhJb7gFHWiRRKQYRliEzxt3HQ=
Subject key identifier: 49:CC:2A:04:8F:D5:FB:E1:08:71:FB:4E:DA:0C:17:25:EB:B1:C4:50
Authority key identifier: A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87
Certificate issuer: /CN=a0d3ed5795348a04e7ecd172d7642fa962097287
Certificate serial: 0194BD4EB81B8E494A968B6C78F14EEF9692
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
Manifest number: 010F
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: oNPtV5U0igTn7NFy12QvqWIJcoc.crl (hash: igisDf+T8xT+B6FbJIaiXj2QzaJV8tglVfkYPVyW7JM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b8:1b:8e:49:4a:96:8b:6c:78:f1:4e:ef:96:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d3ed5795348a04e7ecd172d7642fa962097287
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=49cc2a048fd5fbe10871fb4eda0c1725ebb1c450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:fd:18:a9:0b:08:8b:32:d7:38:e3:bc:18:
68:79:2c:c7:49:0f:1c:5d:e8:9d:b4:07:ef:78:08:
78:b6:af:81:3c:aa:3a:85:c5:33:56:ed:bc:f5:3a:
38:c2:25:77:0c:be:64:f1:0b:40:d1:9f:b1:d0:a0:
27:58:70:a6:23:cf:84:24:b1:dc:30:8b:9a:9d:27:
46:45:f0:c5:7a:ab:cd:f9:c5:34:b7:e5:a8:1a:d8:
31:f5:b0:8d:14:be:88:ab:4a:75:4d:ce:f4:92:72:
32:36:9a:6a:f3:d3:fb:b4:cc:55:d7:13:51:49:10:
d7:a7:2a:25:29:12:8f:99:95:80:6a:67:c8:36:84:
97:65:a4:bc:af:6e:fa:b3:e0:eb:1d:26:0b:8b:72:
b2:c0:7a:06:d1:da:a6:40:ee:ad:07:79:7d:b0:45:
87:75:34:de:f0:c5:eb:e9:3c:d8:ee:5a:e7:a3:c2:
a4:82:d8:c7:b5:32:8c:5f:a6:a3:28:12:0e:cf:19:
cc:db:8f:a1:01:1b:91:46:ac:c1:4f:6f:6c:d2:fc:
35:dd:0b:39:2b:53:15:39:3e:63:16:cb:e8:a9:a1:
b0:c1:96:04:86:ac:db:99:d4:16:38:bc:8f:fd:3a:
12:82:ba:43:fe:1b:7b:12:67:3c:ac:22:aa:93:8d:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CC:2A:04:8F:D5:FB:E1:08:71:FB:4E:DA:0C:17:25:EB:B1:C4:50
X509v3 Authority Key Identifier:
keyid:A0:D3:ED:57:95:34:8A:04:E7:EC:D1:72:D7:64:2F:A9:62:09:72:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNPtV5U0igTn7NFy12QvqWIJcoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a3b11e-5909-49fe-bb75-790bc91a59e6/1/oNPtV5U0igTn7NFy12QvqWIJcoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1f:8a:b6:6a:0f:c2:a3:0d:78:2f:a2:d5:c8:b7:31:14:f5:
1e:e5:e7:7a:b8:df:42:10:a2:c4:70:b9:12:ac:d3:da:7a:ec:
03:05:80:17:93:0a:5d:81:d6:fb:d4:4d:31:af:48:b0:0f:5a:
ea:f1:bd:50:55:93:00:a2:70:aa:6e:03:00:29:ba:0d:5b:cb:
a0:70:2e:e6:95:51:e8:be:c0:4c:21:83:c9:fd:19:ca:7f:7f:
02:28:0d:52:d5:c2:9f:64:7a:e9:b6:04:86:9e:8c:9a:f0:f5:
41:c4:b3:fe:dc:e8:f4:cd:47:a2:b1:69:da:3c:90:f1:75:cc:
55:d9:4a:c8:f8:8e:c2:53:69:4a:2c:ca:0f:39:6f:74:60:cb:
fc:ec:07:38:01:1b:09:bf:81:67:ad:45:75:63:e8:29:29:3d:
83:51:1b:e1:2d:d2:0f:f5:87:76:80:b0:99:26:af:e2:5c:5d:
e4:da:0b:8a:9d:68:19:49:12:4c:ea:ba:e1:5b:ea:71:d7:8c:
c7:e2:49:31:33:44:b8:26:d5:45:d9:7d:23:a7:56:83:b3:bd:
39:30:2c:ef:b3:a8:df:8e:b5:0b:32:e6:99:74:8c:10:c4:21:
7e:72:60:69:2c:4a:79:c6:ed:2d:cd:5c:fc:ac:c7:75:2c:5c:
3f:61:5f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:34 2025 by rpki-client