Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
File: Og6YCIquzFusI9Wg5intsMVT5y4.mft (raw, json)
Hash identifier: W9ZkqxStvkl+gJYs+75CcUE2w72tiSCUsB+JlCatIeU=
Subject key identifier: D4:0E:41:9D:D8:DA:49:8C:0C:AB:70:49:25:7A:8C:06:CB:C6:71:3A
Authority key identifier: 3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
Certificate issuer: /CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Certificate serial: 0194BBCEB82D746CD7A91B592E23288D8AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
Manifest number: 1046
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: Og6YCIquzFusI9Wg5intsMVT5y4.crl (hash: Z0xl0e/766A1YJze+I79sVfQYK0HbR0clpSNVh2jVWs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b8:2d:74:6c:d7:a9:1b:59:2e:23:28:8d:8a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0e98088aaecc5bac23d5a0e629edb0c553e72e
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=d40e419dd8da498c0cab7049257a8c06cbc6713a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:11:af:a2:73:1f:ea:c5:bf:63:a5:ce:d4:fe:
0d:ca:48:01:41:4d:ab:d2:17:b2:c0:7a:fb:30:cf:
96:ff:e8:33:64:80:cf:ce:16:fa:4b:59:48:ea:12:
f6:20:63:3c:6d:03:1d:d9:eb:d6:df:c7:c2:2c:3d:
d1:c7:02:d4:27:ee:47:e1:05:54:e8:ac:d0:af:c1:
d6:c9:52:80:86:8a:6c:11:43:24:06:77:8c:95:cb:
25:f8:d6:9e:11:e1:8e:b4:49:1a:39:e2:b0:35:c9:
cf:a4:e4:56:7f:ad:a3:60:ad:20:b7:4e:bb:18:1a:
af:0f:5a:35:b7:11:a5:96:b6:21:0c:97:5a:00:ac:
cb:38:07:67:ed:92:42:ff:4a:44:9b:a2:16:ef:e6:
31:f1:4e:ab:b0:37:84:21:69:07:f7:a6:aa:31:0d:
d2:bc:21:83:16:2a:81:6b:4f:c8:d7:e1:84:3c:10:
9f:a3:b6:b2:82:c7:70:e6:a6:8e:8c:df:15:a8:f9:
b9:c4:e3:59:d2:4e:a0:43:28:57:9a:12:76:8a:48:
4d:4b:f8:a6:99:07:b9:bd:25:a6:24:89:b4:ca:c0:
b4:b5:7e:d2:81:6f:e8:12:5d:ec:35:92:cb:91:f1:
46:ba:fa:07:37:83:44:fa:d5:0c:17:0a:b2:87:ea:
31:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0E:41:9D:D8:DA:49:8C:0C:AB:70:49:25:7A:8C:06:CB:C6:71:3A
X509v3 Authority Key Identifier:
keyid:3A:0E:98:08:8A:AE:CC:5B:AC:23:D5:A0:E6:29:ED:B0:C5:53:E7:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Og6YCIquzFusI9Wg5intsMVT5y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9ba385-6c7c-4307-9946-a5cd8e22146b/1/Og6YCIquzFusI9Wg5intsMVT5y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a5:ef:4a:24:65:d6:d4:18:f2:b7:ec:cd:e4:96:d9:70:9a:
ca:a8:fa:1e:cb:43:37:ac:d9:fc:e0:ec:5c:be:11:60:57:7b:
82:00:ba:fe:35:39:2d:ce:3e:0a:81:9d:29:79:98:a9:6d:d7:
61:94:97:f6:cb:13:91:e6:31:bc:94:40:8a:ad:70:68:0d:90:
0c:89:25:cc:05:d1:69:00:19:34:41:d0:22:0e:aa:f3:32:da:
79:b2:90:ea:d4:8c:f0:99:80:2e:35:3d:c9:0e:79:c8:06:a4:
c8:6a:cd:ac:62:94:49:a0:55:c5:8c:39:15:03:6d:d2:ef:89:
9d:34:f7:e2:51:e7:e3:24:0e:b9:49:c5:14:dc:e4:da:a6:ef:
33:41:62:3e:38:dc:15:e8:55:49:25:65:25:24:ca:1d:51:47:
cb:c4:fa:db:f1:49:0d:1c:d3:0d:67:e2:95:fe:1c:38:65:24:
24:0a:32:7a:14:2a:20:86:2f:a5:6b:45:cd:9b:e8:41:2f:6c:
43:df:bd:d3:68:8d:4e:7f:7f:a5:2d:0b:07:55:84:c5:d3:2d:
dd:20:32:11:1f:ff:3b:47:d0:1e:84:2c:27:a8:8d:76:04:3a:
9b:f0:6a:f5:81:2e:3b:dd:7b:e9:48:eb:58:93:36:a5:4b:da:
f4:82:f3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:38 2025 by rpki-client