Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
File: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft (raw, json)
Hash identifier: XawcghMls41QufqLgNY5Qo0vF/9Y7kkn0aamnXGZSb8=
Subject key identifier: 81:ED:67:4B:13:4E:CF:D4:EE:8B:C0:44:4E:52:5F:02:09:AD:1C:19
Authority key identifier: C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
Certificate issuer: /CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Certificate serial: 0194BCE07590DD6255FADE80BBD375B1692A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
Manifest number: 0181
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl (hash: lU4djOR4EVWiGORykrPYw0HXaiezn9xx45PneFqUzWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:75:90:dd:62:55:fa:de:80:bb:d3:75:b1:69:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c771fb4249fc5188a98b62b0d40bba9bf7e33923
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=81ed674b134ecfd4ee8bc0444e525f0209ad1c19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:73:0b:80:ac:d9:9b:9a:5e:05:f3:49:1f:
6e:9f:46:be:c3:f9:b4:bf:1f:b7:1d:8f:ee:7c:2c:
01:06:0c:b5:4a:b8:b7:89:5e:e1:97:08:a5:b9:bd:
8a:f7:48:35:63:cd:5a:5c:b0:96:a8:51:80:89:9d:
de:ee:eb:52:d6:41:fa:93:73:2c:3f:00:3f:40:54:
f7:2e:ca:2e:8b:71:7f:59:6b:f9:99:0e:a8:6f:58:
b4:24:10:90:8e:6a:96:d9:1d:54:2d:88:32:0a:01:
97:56:b3:b4:4e:03:77:ef:b6:2e:19:37:d4:2b:df:
f4:dd:37:8f:04:f4:6f:60:45:ca:b8:c9:e0:77:9e:
31:f8:de:09:34:fd:f5:5e:0e:05:44:9d:97:38:f4:
3f:df:68:b3:08:26:22:17:47:4e:b9:18:b9:dc:64:
85:ca:f4:05:0c:90:5b:12:da:10:78:aa:44:29:4d:
29:c8:5e:80:c7:84:23:f9:2b:43:41:b4:19:1a:d2:
15:98:fb:76:e3:75:72:7d:35:91:bf:69:d9:18:92:
c7:62:ef:2d:5a:15:7b:50:02:60:ee:44:07:82:90:
72:e2:b3:78:19:f7:06:c7:08:72:a4:3c:c3:3e:10:
18:12:ed:31:2b:7d:59:71:e2:54:4f:86:74:d7:81:
60:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:ED:67:4B:13:4E:CF:D4:EE:8B:C0:44:4E:52:5F:02:09:AD:1C:19
X509v3 Authority Key Identifier:
keyid:C7:71:FB:42:49:FC:51:88:A9:8B:62:B0:D4:0B:BA:9B:F7:E3:39:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a878ae-e977-45b0-923c-c90fa345c66e/1/x3H7Qkn8UYipi2Kw1Au6m_fjOSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:5b:67:63:18:81:79:bb:b9:14:68:2d:ba:17:9b:08:95:e2:
ab:3d:f0:f4:b1:3e:d9:53:bb:09:a3:36:6c:2d:4f:97:e0:cd:
27:1f:7a:65:ab:56:b8:38:3f:7b:87:0f:a7:f6:08:84:f8:44:
8b:7d:4a:ce:15:68:e2:6c:d3:f0:21:5a:48:ed:c7:38:76:fb:
e3:bb:c1:3c:f4:f4:49:05:13:01:a8:d1:80:9f:74:91:56:46:
e1:ed:cd:63:ed:69:f1:d4:41:29:f1:d1:a5:83:ea:01:54:c1:
69:d5:e9:26:33:21:8c:98:3b:91:78:d0:d9:42:2e:a2:10:c1:
93:9f:d6:13:b4:1e:41:b1:27:de:ef:f6:98:5a:e7:a1:4d:a9:
7e:ac:7c:42:d5:e3:74:91:8d:28:04:83:c2:ef:c9:87:5b:41:
67:de:39:c4:3a:c6:7d:8a:a0:45:16:6d:19:f7:52:d9:fd:cb:
3c:86:78:33:50:75:bb:25:05:f7:e2:98:cf:85:4c:58:30:8c:
9e:cc:88:dd:01:10:4b:a5:60:0c:38:e2:25:65:99:75:75:65:
40:16:57:ed:01:66:85:63:62:33:49:71:70:b3:25:5f:08:ef:
bf:67:dc:bc:48:c5:bb:5e:d1:f4:f4:57:fd:82:98:46:be:47:
ab:40:91:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:24 2025 by rpki-client