Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/495c34-95f9-495e-b1c8-474f2cf6e62a/1/OWpY9F0OyAFfoyauWP9YAzKJv50.mft
File: OWpY9F0OyAFfoyauWP9YAzKJv50.mft (raw, json)
Hash identifier: FWMoRy0fkJkAQ5uYv6k2gcggAAhRzSwY/5WthVg4oOI=
Subject key identifier: 7E:7F:35:4B:42:F6:DC:9E:FB:9D:92:90:AA:B0:22:CE:05:0C:DD:B9
Authority key identifier: 39:6A:58:F4:5D:0E:C8:01:5F:A3:26:AE:58:FF:58:03:32:89:BF:9D
Certificate issuer: /CN=396a58f45d0ec8015fa326ae58ff58033289bf9d
Certificate serial: 0194BC72D231500A763AEFFC9963880CFE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWpY9F0OyAFfoyauWP9YAzKJv50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/495c34-95f9-495e-b1c8-474f2cf6e62a/1/OWpY9F0OyAFfoyauWP9YAzKJv50.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: OWpY9F0OyAFfoyauWP9YAzKJv50.crl (hash: KPS1Xi7o19r186bOQmHGzt/Pig6+2QoTpVVc3WIYSPg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d2:31:50:0a:76:3a:ef:fc:99:63:88:0c:fe:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=396a58f45d0ec8015fa326ae58ff58033289bf9d
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=7e7f354b42f6dc9efb9d9290aab022ce050cddb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:2f:18:21:8d:6a:cb:96:ec:dd:91:12:77:
d3:aa:06:ab:69:cb:10:63:1c:cd:38:9c:60:6c:15:
7b:fa:7f:6e:7e:ef:d4:d6:e0:b0:ca:a2:9c:2c:f4:
6e:55:45:4c:d7:d5:6a:1f:5c:7b:c0:c4:0c:8c:9b:
b6:92:e5:dd:26:45:7b:ed:5a:79:8e:be:f9:bb:15:
a1:b6:53:d9:fe:8d:e9:e0:5e:75:64:b4:3c:cb:24:
e8:fe:a5:60:1d:15:03:b9:ac:29:92:b5:e3:5d:76:
78:c7:ce:d4:57:35:a2:c0:d7:58:b3:0a:50:5a:87:
61:1c:0a:a9:bb:b3:51:8f:88:43:67:c4:ca:c1:cc:
f3:ad:3d:66:aa:8e:42:2b:12:ff:b7:1b:1c:6c:ef:
fc:b1:3c:3c:8e:d8:e8:b5:3b:e4:4a:43:43:f0:af:
b7:10:33:ce:b2:1f:e2:2d:73:41:c3:f8:94:35:d4:
d2:0c:a4:6b:78:f6:8b:c4:6e:65:82:72:96:13:b5:
c3:dc:d2:a7:9a:52:4e:0c:5a:51:9f:e3:11:92:e4:
5e:c1:ad:c1:79:97:60:f9:4a:88:c0:bf:3a:46:65:
2a:cc:89:81:1c:52:bd:c7:b9:ca:bd:af:a3:a2:91:
07:6b:9f:4a:64:e1:01:e1:63:2f:ba:d5:1b:12:0b:
7c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7F:35:4B:42:F6:DC:9E:FB:9D:92:90:AA:B0:22:CE:05:0C:DD:B9
X509v3 Authority Key Identifier:
keyid:39:6A:58:F4:5D:0E:C8:01:5F:A3:26:AE:58:FF:58:03:32:89:BF:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWpY9F0OyAFfoyauWP9YAzKJv50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/495c34-95f9-495e-b1c8-474f2cf6e62a/1/OWpY9F0OyAFfoyauWP9YAzKJv50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/495c34-95f9-495e-b1c8-474f2cf6e62a/1/OWpY9F0OyAFfoyauWP9YAzKJv50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:aa:93:bc:b4:42:a9:73:55:c1:75:6c:66:75:8d:5f:04:07:
ed:b0:81:5e:7d:b6:71:ba:dd:9f:e7:d3:6c:17:46:b5:ed:a3:
21:e5:14:29:74:06:cf:0c:9e:5a:f6:cb:9d:5e:25:93:a8:61:
ea:34:32:df:f3:d9:96:94:03:04:14:03:f3:0e:47:24:9c:72:
25:7c:1c:46:9a:de:fc:97:89:5b:42:f1:5a:d3:e6:aa:7a:0e:
45:f2:68:6d:9d:ec:a9:38:a8:34:e0:71:bd:99:29:b1:77:f5:
5c:8e:98:88:a3:e2:0e:1b:06:34:2e:a1:2d:ff:fd:4d:b5:fc:
a1:e5:f7:f2:0d:84:85:62:20:92:d9:a1:84:f2:1f:5c:bd:72:
69:d0:e8:9a:31:4d:99:63:fd:e5:93:c1:48:23:9c:3d:26:53:
d5:f7:13:1a:2f:78:fb:58:5e:cf:41:bf:3c:6b:22:a4:7e:57:
6b:0f:08:4e:c4:51:2d:c4:35:7c:bd:01:5d:dc:1c:5a:9f:ce:
8b:56:74:aa:00:5a:97:5f:8e:08:4f:22:28:b0:56:7c:50:88:
5e:bf:69:9e:29:51:0d:4c:ca:00:d1:dc:f2:eb:0f:da:9d:65:
bb:54:4b:a4:b4:87:66:fe:f2:2b:06:f8:1c:00:23:65:cc:43:
55:d4:2e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:12 2025 by rpki-client