Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.mft
File: oBhxQsOFxByo--yy9VpP_wB5vPQ.mft (raw, json)
Hash identifier: A4oznVnXb+WQbeX1zNcQ/oRLtdYTOCrxzNZOGz3m0Gg=
Subject key identifier: AD:9E:61:E9:F9:16:DC:99:B5:BD:F3:40:EA:7E:4E:12:25:17:C7:1F
Authority key identifier: A0:18:71:42:C3:85:C4:1C:A8:FB:EC:B2:F5:5A:4F:FF:00:79:BC:F4
Certificate issuer: /CN=a0187142c385c41ca8fbecb2f55a4fff0079bcf4
Certificate serial: 0194BD17D6ABF9345528B2685E482CA573D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBhxQsOFxByo--yy9VpP_wB5vPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.mft
Manifest number: 0704
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: oBhxQsOFxByo--yy9VpP_wB5vPQ.crl (hash: NeMcP6/cfr66Tz5A3eiLKssbB3Hhdh0VlqCbXTHA7Qc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d6:ab:f9:34:55:28:b2:68:5e:48:2c:a5:73:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0187142c385c41ca8fbecb2f55a4fff0079bcf4
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=ad9e61e9f916dc99b5bdf340ea7e4e122517c71f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cf:c8:dd:fc:fb:47:72:62:81:15:a5:7e:81:
24:4b:35:41:1c:4c:fd:92:ff:ef:ab:1a:21:36:e1:
d1:e7:85:d5:0a:5c:f2:d8:e3:89:6e:5e:06:30:f5:
d3:c3:eb:8b:99:70:95:48:68:e9:a3:e1:38:7a:87:
f3:76:35:3b:ee:de:e0:5b:f3:bd:21:cc:7f:d0:8f:
89:bc:62:c4:17:e9:17:c8:d5:a8:e9:6d:72:68:26:
3e:70:8b:fc:56:68:f6:35:a2:07:29:b9:bd:ad:ab:
0b:61:e0:d7:f6:7f:6a:b7:4a:26:a9:c5:ad:bb:c8:
23:ba:65:55:ca:b7:ef:a6:79:63:1f:db:91:2d:9a:
f8:21:53:79:75:60:6f:76:e7:83:8b:2f:34:c5:24:
80:09:9f:16:7c:25:12:78:5c:49:f8:23:a2:3e:0f:
a7:46:08:a2:f9:56:d1:c8:7d:aa:b2:db:37:07:6c:
85:44:9e:4e:69:f9:e7:a6:43:89:59:19:5b:13:7c:
33:52:82:30:e2:9b:37:be:a0:bb:95:33:2b:9c:08:
62:3a:e9:dc:98:23:94:d2:0f:45:d7:ef:94:62:de:
a1:45:a2:68:87:d7:66:c2:89:90:4d:44:cc:e5:2b:
dd:3e:ff:98:ed:57:29:21:d2:d9:74:a4:f1:04:3a:
1b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:9E:61:E9:F9:16:DC:99:B5:BD:F3:40:EA:7E:4E:12:25:17:C7:1F
X509v3 Authority Key Identifier:
keyid:A0:18:71:42:C3:85:C4:1C:A8:FB:EC:B2:F5:5A:4F:FF:00:79:BC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBhxQsOFxByo--yy9VpP_wB5vPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:02:f1:79:fe:4c:38:93:d5:10:37:a3:0d:c9:c0:a8:b4:1d:
3a:be:a9:00:c9:77:27:cb:12:f7:08:c9:7e:62:69:d5:5c:98:
43:3a:45:16:d8:0b:2b:c9:22:f9:c0:3e:ba:12:de:30:f9:62:
ec:ba:10:60:f6:3b:67:1b:a3:23:0e:09:64:8a:44:57:16:75:
96:fe:ea:8b:b7:62:ed:cf:f4:36:7b:eb:e5:a6:a8:aa:c2:30:
b2:70:7e:8e:80:fd:61:f1:df:59:32:24:ec:61:ea:0c:3d:05:
98:5c:cc:24:37:cb:1a:9a:f2:44:7e:86:7d:00:38:4c:89:3e:
d6:4b:87:d9:87:62:fe:bb:5d:ce:01:91:3e:37:5c:64:07:39:
5b:d2:93:e5:b9:aa:bf:4a:f8:a3:06:e0:f2:6a:eb:9d:fe:5c:
32:67:36:a8:bd:24:06:fb:51:51:90:b6:db:2d:a9:a5:61:71:
ec:95:32:39:83:53:b5:ae:2f:a4:2f:08:a4:63:38:66:fa:39:
99:ce:4a:2a:36:19:22:0e:c5:f2:c5:4c:96:37:3a:01:8e:8b:
fa:78:04:e8:96:f2:7c:ff:fb:70:75:cf:08:8a:e9:72:7b:8b:
98:16:6c:42:62:16:d5:5c:1f:a1:31:7e:0f:34:6b:cc:a4:5a:
e1:ec:f6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:51 2025 by rpki-client