Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/577212-08b0-43ed-89c6-a9a6bf65e63a/1/oHEAJhaNhq-46ZnPsqjonFct0vk.mft
File: oHEAJhaNhq-46ZnPsqjonFct0vk.mft (raw, json)
Hash identifier: c1R7RSjE9tmuadMshlrYa3HmSbEIww5Le1LI6B5Bc1A=
Subject key identifier: 18:4F:6D:69:75:35:A7:B4:9E:60:85:B5:B1:0F:A5:F9:D8:B5:B6:BE
Authority key identifier: A0:71:00:26:16:8D:86:AF:B8:E9:99:CF:B2:A8:E8:9C:57:2D:D2:F9
Certificate issuer: /CN=a0710026168d86afb8e999cfb2a8e89c572dd2f9
Certificate serial: 0194BC3C4B58200C0AE7D6FEBF253B19BADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oHEAJhaNhq-46ZnPsqjonFct0vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/577212-08b0-43ed-89c6-a9a6bf65e63a/1/oHEAJhaNhq-46ZnPsqjonFct0vk.mft
Manifest number: 1175
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: oHEAJhaNhq-46ZnPsqjonFct0vk.crl (hash: SfdR+BoDjzRuWz3WBT9wOZEIi6HEOf34H+6B40qxPQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:4b:58:20:0c:0a:e7:d6:fe:bf:25:3b:19:ba:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0710026168d86afb8e999cfb2a8e89c572dd2f9
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=184f6d697535a7b49e6085b5b10fa5f9d8b5b6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b9:59:70:f1:62:48:81:3c:55:c4:d8:a9:42:
33:35:5b:dc:28:0f:e3:47:ee:04:4c:1b:eb:23:03:
75:5c:67:66:7d:32:fb:5e:34:41:3a:5f:af:c5:4d:
32:1f:71:51:e1:2c:ed:f1:b1:a1:34:c6:93:6c:e6:
7d:09:25:e1:05:9d:72:73:88:2f:c3:0d:fa:a6:53:
c5:42:5e:ac:4d:0f:37:34:5e:63:9b:98:07:a9:ba:
fb:05:b4:35:1c:d1:b0:6e:ba:c5:57:14:4d:7e:a0:
9a:9d:a1:b7:f1:0b:2f:a2:9b:a0:76:97:14:60:e4:
a9:1d:b4:28:5e:2c:96:e3:d1:43:6d:84:ab:45:c3:
6b:e4:3a:5e:a9:ee:fa:67:ff:0d:90:3c:c5:92:6f:
03:4c:cc:56:9b:9a:f5:76:bf:e6:e6:fb:1c:47:88:
2a:a6:3c:6b:5a:b7:57:e0:d2:04:2c:14:2b:ba:00:
ae:83:72:72:36:97:2d:93:e9:56:98:0c:5e:6e:6c:
75:0e:28:de:77:58:2d:c5:d3:5a:3f:79:b5:6a:62:
96:f5:13:a6:7e:f4:30:e1:7f:ad:a0:30:00:93:8b:
d2:11:a3:52:c1:19:f8:f5:a6:36:33:ef:58:ee:58:
ed:a6:94:85:71:d3:21:dd:01:2b:09:60:ab:19:fc:
c6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4F:6D:69:75:35:A7:B4:9E:60:85:B5:B1:0F:A5:F9:D8:B5:B6:BE
X509v3 Authority Key Identifier:
keyid:A0:71:00:26:16:8D:86:AF:B8:E9:99:CF:B2:A8:E8:9C:57:2D:D2:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oHEAJhaNhq-46ZnPsqjonFct0vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/577212-08b0-43ed-89c6-a9a6bf65e63a/1/oHEAJhaNhq-46ZnPsqjonFct0vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/577212-08b0-43ed-89c6-a9a6bf65e63a/1/oHEAJhaNhq-46ZnPsqjonFct0vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:01:37:50:88:01:dd:ed:2f:6c:09:fc:08:ae:05:f1:52:9c:
c9:4a:d4:5d:39:b7:1f:ea:6b:c6:a3:d4:d8:d6:0a:91:df:bd:
11:f4:c8:db:d5:29:45:51:a4:37:82:59:f8:37:b1:ff:8a:0c:
6e:11:a5:c0:28:b6:04:21:a3:a4:6c:41:77:93:43:7d:49:18:
bc:51:85:d9:f5:97:ce:a3:cf:6f:0f:e9:da:32:7e:25:34:d3:
bf:e0:ee:29:99:c3:09:68:b6:12:7e:2f:8f:0d:59:fd:86:66:
3d:48:84:1f:4f:2c:9f:3b:d1:c7:9c:10:79:d1:9a:19:07:33:
6a:d4:ce:77:d0:a0:b5:af:89:9b:4b:3f:31:49:39:b7:97:1d:
46:7c:26:a1:59:fe:64:16:d9:ea:04:98:a3:3a:05:be:c7:b7:
62:fb:3d:2b:a1:e0:3e:5a:87:d4:25:80:75:53:86:2f:4a:e6:
8f:40:4f:67:3f:65:60:b3:ad:7a:3f:3d:a8:4e:92:dc:5f:80:
d6:8e:a2:ba:97:96:56:ca:42:0e:3f:c0:e3:a2:5c:d5:86:c8:
f5:4e:de:53:6c:ef:5e:a5:19:ad:73:9f:50:01:c4:ad:2a:b3:
50:b3:67:fa:33:11:ed:e0:fc:04:eb:5c:57:d6:eb:a4:fc:6f:
9e:65:1c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:07 2025 by rpki-client