Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
File: OCrZBtcZpmqFoxPRBSlAAstlf3s.mft (raw, json)
Hash identifier: vtaXS5yxeHTFNfc/+yzGDsO+BteXntHWpZflh7S7fIs=
Subject key identifier: A5:CD:AF:0D:15:61:AC:4A:99:B8:29:2F:C2:94:EC:4E:2B:98:E1:AB
Authority key identifier: 38:2A:D9:06:D7:19:A6:6A:85:A3:13:D1:05:29:40:02:CB:65:7F:7B
Certificate issuer: /CN=382ad906d719a66a85a313d105294002cb657f7b
Certificate serial: 0194BD17907D89CE07A809314E5C4F603474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
Manifest number: 0B
Signing time: Fri 31 Jan 2025 16:00:25 +0000
Manifest this update: Fri 31 Jan 2025 16:00:25 +0000
Manifest next update: Sat 01 Feb 2025 16:00:25 +0000
Files and hashes: 1: OCrZBtcZpmqFoxPRBSlAAstlf3s.crl (hash: Iu0+1uoHrX3UwUXoSIPFguV8gBsrX6HOoYQF3oH8khI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:90:7d:89:ce:07:a8:09:31:4e:5c:4f:60:34:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382ad906d719a66a85a313d105294002cb657f7b
Validity
Not Before: Jan 31 16:00:25 2025 GMT
Not After : Feb 1 16:00:25 2025 GMT
Subject: CN=a5cdaf0d1561ac4a99b8292fc294ec4e2b98e1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:e2:b2:cc:cb:d0:02:f0:8d:88:d3:61:e8:
8c:02:89:e2:b1:78:a9:e7:98:de:a9:6a:9a:cb:6e:
b7:9c:10:07:af:da:a7:6f:cb:bf:f9:7d:80:01:c0:
b6:69:9a:e6:e9:ae:68:83:e0:11:43:c7:7a:15:25:
e0:7a:8c:06:a4:0b:17:ee:e4:dc:ed:06:63:c1:78:
86:95:db:43:fd:93:f3:de:64:da:80:63:4e:34:98:
fd:80:f9:6d:35:12:7d:bd:ca:5e:97:a7:3d:88:29:
85:d3:99:46:ca:eb:88:07:58:d8:f6:84:73:df:e3:
7f:af:ea:c2:b8:89:05:a1:d1:2a:ba:06:b5:55:80:
d4:e5:f6:5d:28:cf:56:d7:c2:e4:e8:d5:f2:34:9b:
5f:6c:1e:73:0e:02:7a:10:3a:e9:90:38:d8:35:cd:
9a:61:68:1a:88:97:c0:bd:3c:bf:0f:ed:b3:50:10:
92:e3:d1:12:e4:a2:0b:b0:13:57:c5:58:1e:de:b5:
c2:52:4d:c7:9a:34:94:20:2c:90:bd:d1:00:86:e0:
60:6a:64:57:29:76:21:97:41:92:58:9d:a4:b0:c8:
11:87:23:a6:b9:be:68:92:e8:4f:dc:09:bc:ad:9f:
21:fe:c0:65:59:80:d1:78:86:fd:41:b8:5e:d7:62:
ba:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CD:AF:0D:15:61:AC:4A:99:B8:29:2F:C2:94:EC:4E:2B:98:E1:AB
X509v3 Authority Key Identifier:
keyid:38:2A:D9:06:D7:19:A6:6A:85:A3:13:D1:05:29:40:02:CB:65:7F:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCrZBtcZpmqFoxPRBSlAAstlf3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/914d91-ee71-4224-b300-6ce52bee666a/1/OCrZBtcZpmqFoxPRBSlAAstlf3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e0:90:4d:b2:7c:34:66:81:eb:6c:6c:fc:23:f6:12:d9:6a:
ae:ce:53:f0:3d:bd:91:8d:0b:42:78:de:e2:67:ab:f6:a5:41:
02:c3:37:a2:24:bd:68:00:13:b6:a9:32:41:b8:63:f3:df:c8:
41:05:e2:1b:b1:fe:ec:9c:a2:11:7a:63:22:e4:d4:de:0c:09:
a8:3a:17:e5:c5:06:10:13:72:7b:d5:f1:b4:b3:a9:bf:7b:58:
61:27:ff:2d:46:19:6b:f5:04:1e:68:1d:9f:cf:33:54:35:25:
df:22:3e:58:82:7b:18:b0:ec:9e:c8:4b:54:61:5b:35:8c:ac:
ba:9f:37:d4:6a:52:6c:d9:d2:b4:55:3e:01:cd:1b:82:35:ea:
e2:c5:11:31:49:5a:30:7e:24:8c:7c:25:ce:dd:8e:f6:6a:2e:
a6:60:af:bc:d3:9c:db:f8:76:0d:ff:46:3f:78:ec:29:49:72:
86:80:56:29:fe:f1:14:35:71:63:ea:f8:7c:00:1f:9f:e4:ec:
22:01:aa:f5:68:dd:aa:e7:ce:78:4f:85:eb:c6:92:90:59:cb:
da:0e:9c:d9:8f:df:13:2e:23:7b:87:f4:e6:3e:9c:86:bb:84:
c8:4f:9b:70:27:d2:b2:d6:c5:3c:50:cd:53:16:60:57:29:df:
45:8f:00:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:11:09 2025 by rpki-client