Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a20258-6dff-4295-9dc1-0afeb14524be/1/owjczEdYTD-oJh23kmouQBcrP3k.mft
File: owjczEdYTD-oJh23kmouQBcrP3k.mft (raw, json)
Hash identifier: FgRtNYEhLMHwgU/vrc+HOXKwKJvaqWyG+fdIpyC8Xzo=
Subject key identifier: 89:66:15:1B:F7:59:2F:59:8C:E0:B1:96:85:E9:47:5B:FE:3B:83:61
Authority key identifier: A3:08:DC:CC:47:58:4C:3F:A8:26:1D:B7:92:6A:2E:40:17:2B:3F:79
Certificate issuer: /CN=a308dccc47584c3fa8261db7926a2e40172b3f79
Certificate serial: 0194BD17FE84EE16CBE4E820DA1207BA8FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owjczEdYTD-oJh23kmouQBcrP3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a20258-6dff-4295-9dc1-0afeb14524be/1/owjczEdYTD-oJh23kmouQBcrP3k.mft
Manifest number: FC
Signing time: Fri 31 Jan 2025 16:00:53 +0000
Manifest this update: Fri 31 Jan 2025 16:00:53 +0000
Manifest next update: Sat 01 Feb 2025 16:00:53 +0000
Files and hashes: 1: owjczEdYTD-oJh23kmouQBcrP3k.crl (hash: b58YhbVW4f8mFg2C+YerEjIHarScpSyN0JJMLdPKqKw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fe:84:ee:16:cb:e4:e8:20:da:12:07:ba:8f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a308dccc47584c3fa8261db7926a2e40172b3f79
Validity
Not Before: Jan 31 16:00:53 2025 GMT
Not After : Feb 1 16:00:53 2025 GMT
Subject: CN=8966151bf7592f598ce0b19685e9475bfe3b8361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:ea:8f:62:62:5f:43:fa:6c:2e:b9:fd:59:
97:07:89:63:4c:8c:d4:a4:11:6a:a6:c6:b4:a5:fa:
5d:8c:50:e6:cb:d5:0f:b2:20:83:7e:d4:92:2a:b2:
87:a1:eb:9f:e7:2d:7c:f6:4b:ef:45:54:35:f9:17:
a4:c5:75:17:d9:fd:05:3d:4c:db:24:f5:b6:f0:2e:
ce:60:f4:8d:5b:fc:32:4f:e9:bc:22:cb:44:c6:3a:
5f:21:a8:d8:27:d1:c6:d1:f8:20:22:93:98:f9:8b:
d7:0e:a9:23:2b:e8:31:1b:02:6b:be:1d:0f:f6:47:
1f:0e:74:01:d7:51:4b:a4:8e:df:22:6c:ae:f5:7f:
c9:4b:83:0c:53:84:63:d5:46:bf:aa:a9:4e:24:75:
43:bb:7f:0a:1e:9a:bd:2f:f5:d8:14:a9:04:32:94:
db:5e:8b:e0:71:ae:05:0b:26:6e:e2:61:06:2e:f2:
ca:92:35:d7:18:d8:a9:e1:0a:8f:64:af:75:27:e5:
e7:b2:ad:03:18:1f:b8:15:3b:96:56:07:f6:41:7b:
47:12:b9:f6:d1:9e:2d:20:ad:ae:dd:4f:51:1f:9e:
87:7c:e7:24:71:bb:d6:35:f6:6c:3f:e4:fe:b2:d5:
ed:67:72:3c:23:b8:2b:ac:2b:66:eb:4d:a9:67:14:
c7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:66:15:1B:F7:59:2F:59:8C:E0:B1:96:85:E9:47:5B:FE:3B:83:61
X509v3 Authority Key Identifier:
keyid:A3:08:DC:CC:47:58:4C:3F:A8:26:1D:B7:92:6A:2E:40:17:2B:3F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owjczEdYTD-oJh23kmouQBcrP3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a20258-6dff-4295-9dc1-0afeb14524be/1/owjczEdYTD-oJh23kmouQBcrP3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a20258-6dff-4295-9dc1-0afeb14524be/1/owjczEdYTD-oJh23kmouQBcrP3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f0:8e:10:79:54:66:68:b2:16:89:93:33:b8:b3:b0:0d:62:
c8:36:43:81:03:d5:7a:c5:94:b5:bd:e7:ab:2f:35:53:1d:7f:
19:9c:cb:3d:74:42:97:7b:aa:6e:70:e2:49:84:cd:75:f0:1f:
ee:7f:26:ef:f5:4c:54:48:62:8d:c1:9a:a0:f6:db:c5:e6:9a:
bc:a5:c1:ca:46:b5:89:9e:60:b9:27:6f:e2:9f:5b:24:b4:8f:
f3:59:c9:0d:3e:e4:27:77:41:8c:c7:e4:26:a1:18:4b:92:ee:
f4:88:d7:4e:26:0b:95:f7:51:96:16:c0:78:2f:57:bc:40:bf:
71:ef:43:7b:4f:62:ee:a5:f7:e2:b1:22:c8:47:a0:bb:9c:7e:
f7:26:1c:3d:71:37:18:4e:37:3f:8f:f9:35:6b:24:00:59:fb:
38:4a:32:0a:19:21:5d:fb:f8:9e:09:4e:b1:37:92:cd:e2:95:
1b:89:0f:f4:be:07:df:05:bb:36:9a:80:8a:b2:6d:d8:f8:e8:
ad:86:39:f6:5d:a0:04:bb:a7:82:c5:64:70:5f:44:28:a0:9a:
97:fb:b5:0c:a0:25:ab:bc:79:1e:03:8b:01:e8:d9:ec:01:0b:
79:17:15:e6:fc:62:9e:63:b0:d5:9b:6a:d1:8e:e0:78:44:ac:
27:53:f3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:29:21 2025 by rpki-client