Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
File: oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft (raw, json)
Hash identifier: 9RFUIPDSMK+SRjXxzPa1jbGWsh1EzuCTjLaPb3iky6U=
Subject key identifier: EF:CC:CA:E0:55:48:48:5C:79:5C:EE:8C:D5:7E:DE:9E:86:50:92:0F
Authority key identifier: A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
Certificate issuer: /CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Certificate serial: 0194BBCECFEDA624CEBFF0036E9E1ACA893C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:20 +0000
Manifest this update: Fri 31 Jan 2025 10:01:20 +0000
Manifest next update: Sat 01 Feb 2025 10:01:20 +0000
Files and hashes: 1: oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl (hash: IjioLWkcQM402HNRuUp5wWNz2wFDsFSUyE5Yr5MmLMw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:cf:ed:a6:24:ce:bf:f0:03:6e:9e:1a:ca:89:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10f341d3ab563b9fc40980ae7c17402c215ef2a
Validity
Not Before: Jan 31 10:01:20 2025 GMT
Not After : Feb 1 10:01:20 2025 GMT
Subject: CN=efcccae05548485c795cee8cd57ede9e8650920f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:38:6f:bb:4d:8e:0d:c2:76:ab:d6:22:48:
95:fa:db:3c:ef:c3:12:aa:4f:a4:48:cf:83:a8:4b:
ff:9d:2e:33:b6:01:13:2f:ed:b1:ae:1d:64:75:e4:
2a:cc:c2:ce:9f:dc:b7:dd:3c:70:19:64:85:ec:a8:
de:1d:a2:37:33:ca:54:f2:98:e5:5b:c9:62:4a:fc:
73:d7:b0:ea:c4:ab:14:b0:6f:55:2d:16:f8:43:0d:
ef:f6:02:92:03:c1:fa:14:8b:c4:52:c9:62:d3:05:
f3:88:21:1a:b7:11:c2:5f:9f:71:24:19:90:23:ec:
91:89:50:5a:58:94:bc:57:96:b7:f5:39:4c:85:dd:
a7:cd:30:c8:65:28:b0:b0:22:dd:53:67:49:25:21:
0d:33:6c:de:04:d0:42:43:78:fc:7b:b2:39:2a:88:
49:49:66:cb:70:7c:96:5e:a5:b6:7a:7c:5d:17:70:
3f:b5:1a:32:f2:7e:63:50:73:04:0a:b5:45:93:95:
34:d1:1a:c9:4d:25:5b:45:86:df:88:4b:10:a0:b9:
f2:07:d4:2e:7e:0b:b4:89:9e:73:a4:19:62:09:65:
b4:63:83:e1:d9:c4:3d:6d:50:bd:23:32:74:c3:02:
3d:2b:bf:22:27:06:7a:cc:9d:b2:e3:04:c0:cd:bf:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CC:CA:E0:55:48:48:5C:79:5C:EE:8C:D5:7E:DE:9E:86:50:92:0F
X509v3 Authority Key Identifier:
keyid:A1:0F:34:1D:3A:B5:63:B9:FC:40:98:0A:E7:C1:74:02:C2:15:EF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQ80HTq1Y7n8QJgK58F0AsIV7yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/8b2f14-c329-4cbb-ad41-17407165afe6/1/oQ80HTq1Y7n8QJgK58F0AsIV7yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:47:ff:87:b4:22:1f:ad:ba:4f:cf:ed:a0:76:a9:78:81:83:
77:e5:8c:31:01:c5:ff:13:db:6a:5c:c0:6f:44:a8:b1:4a:43:
48:88:8a:23:57:d6:17:57:af:f9:69:40:bd:10:43:db:32:59:
9e:46:f2:86:e1:fc:3d:f0:2b:a1:f9:f5:22:17:80:d6:17:68:
2d:37:6c:a8:43:4c:d1:6b:f8:38:9b:09:3f:97:75:83:95:93:
82:43:91:da:b6:a6:1d:58:93:e6:82:20:9a:06:bf:f1:ab:cd:
72:45:8b:86:c9:ac:bd:c3:5c:17:80:e9:a8:b6:82:ad:d0:74:
5f:ad:4c:26:61:f1:3d:ca:03:0f:0f:f9:3f:ea:62:25:0b:7a:
1c:dc:6d:f9:25:15:b4:53:7e:6c:2f:76:91:d9:5f:97:c5:f1:
46:fb:e3:1b:25:7c:ba:52:bb:a2:d4:ec:dc:75:a0:bb:49:02:
67:be:1e:4e:f1:c2:f2:69:f2:b8:16:7f:3f:e4:ba:2d:c9:ac:
a7:c6:d9:3d:69:cb:30:dc:c0:d4:70:c9:19:31:84:cc:0e:79:
80:81:6c:92:dc:e2:56:e8:a2:b9:90:c6:20:80:e5:f7:4e:25:
aa:3e:a9:2c:cc:dd:44:23:9c:94:15:85:76:1b:ff:c9:74:d7:
19:c1:58:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:16 2025 by rpki-client