Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/825011-3e5b-4404-a7b0-66f9c92d4fa1/1/ODH5qlDO_oJdpfkNpnswMlSp24U.mft
File: ODH5qlDO_oJdpfkNpnswMlSp24U.mft (raw, json)
Hash identifier: UJ0ZLUkHIN4IzOygvDIfpRHWViHZGjbv8iCgwMrWrHk=
Subject key identifier: B8:1A:D4:C9:6C:94:19:D0:CF:53:7F:8B:DE:05:EF:F9:7B:53:A1:A8
Authority key identifier: 38:31:F9:AA:50:CE:FE:82:5D:A5:F9:0D:A6:7B:30:32:54:A9:DB:85
Certificate issuer: /CN=3831f9aa50cefe825da5f90da67b303254a9db85
Certificate serial: 0194BD178CE096B0205D04B224B6D99C01E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ODH5qlDO_oJdpfkNpnswMlSp24U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/825011-3e5b-4404-a7b0-66f9c92d4fa1/1/ODH5qlDO_oJdpfkNpnswMlSp24U.mft
Manifest number: 083A
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: ODH5qlDO_oJdpfkNpnswMlSp24U.crl (hash: tZmsqNKwd5py7wuGkHrblS5CcsZw26f32cMPsunKPk4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8c:e0:96:b0:20:5d:04:b2:24:b6:d9:9c:01:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3831f9aa50cefe825da5f90da67b303254a9db85
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=b81ad4c96c9419d0cf537f8bde05eff97b53a1a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:08:60:c6:41:01:07:10:74:1d:c5:ae:9b:
b6:52:f0:ad:01:75:0c:76:aa:44:67:59:92:f5:53:
ea:2d:99:4a:47:7a:26:71:d6:96:1a:4e:07:23:54:
51:46:18:62:c5:ee:39:e2:5c:2d:64:3f:6f:f9:dc:
a9:a0:7b:47:f3:ac:5d:2b:07:ca:57:f5:3a:17:07:
ae:1e:38:1b:ff:78:97:9b:2a:91:ca:67:f1:85:8c:
77:e9:7f:5e:e7:76:a8:76:66:e2:20:7a:c0:26:7d:
e4:ea:c2:ee:bb:b9:10:dc:c5:2e:26:2c:8d:5a:7c:
39:37:61:88:f8:f5:e1:37:e6:d5:e7:e1:55:bc:46:
ec:e6:8a:f3:3b:f9:8a:c7:b1:02:b4:36:d5:dd:3e:
1e:74:f2:b9:15:db:55:ae:88:5e:59:86:8c:0c:41:
49:48:40:26:57:77:c7:69:51:7f:a2:24:c5:86:1a:
ab:a6:4c:73:da:9f:61:a9:ec:38:ca:81:21:3d:25:
49:d7:08:f6:de:ed:6c:94:a5:72:81:88:bd:d6:cd:
35:7f:5a:b9:df:49:5b:f7:c7:cb:06:2d:26:19:23:
df:1b:9f:a8:9b:58:e0:ab:4b:30:fe:07:e8:52:85:
d3:69:8e:ce:74:2b:c5:ad:06:2a:26:24:1f:f2:b3:
f2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:1A:D4:C9:6C:94:19:D0:CF:53:7F:8B:DE:05:EF:F9:7B:53:A1:A8
X509v3 Authority Key Identifier:
keyid:38:31:F9:AA:50:CE:FE:82:5D:A5:F9:0D:A6:7B:30:32:54:A9:DB:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ODH5qlDO_oJdpfkNpnswMlSp24U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/825011-3e5b-4404-a7b0-66f9c92d4fa1/1/ODH5qlDO_oJdpfkNpnswMlSp24U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/825011-3e5b-4404-a7b0-66f9c92d4fa1/1/ODH5qlDO_oJdpfkNpnswMlSp24U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b4:22:9d:0d:9a:ed:f9:96:4e:06:db:66:b8:75:69:eb:5a:
e4:39:b3:55:ff:b1:31:9a:97:02:f5:a4:61:35:b5:bd:96:7e:
5b:57:78:e8:b0:2b:4a:a4:39:80:93:22:8a:39:af:9a:ae:b4:
89:e6:45:94:b8:5c:c1:7a:cc:74:0f:96:c8:2a:51:ea:35:a5:
13:8a:e5:fb:5a:68:28:05:54:d3:b2:e3:8f:a7:95:4e:b5:38:
d3:ee:4b:c9:2a:a1:01:9d:8b:8b:94:13:31:9a:96:b3:e0:b9:
6b:de:01:61:da:53:e8:cd:e7:41:5c:5e:9d:57:3c:1b:07:50:
1c:0c:27:91:a2:f0:1b:03:a4:f1:6d:f3:ea:c8:7e:ab:0b:cf:
5c:13:15:aa:15:ea:1f:0c:b3:41:cc:fe:30:32:8b:0d:a0:df:
78:15:bd:ee:14:67:08:43:5e:65:50:59:b7:e9:c4:5d:f5:c7:
72:32:d5:d4:fd:62:5e:9e:c9:42:23:25:cb:3b:ac:9c:f8:c3:
b3:5f:c6:59:00:c5:b5:70:91:fc:12:41:97:7a:46:b9:d4:5c:
b6:55:64:47:9a:7e:b1:86:a3:fd:55:36:91:6e:a5:c7:fd:b5:
ed:2b:a4:a7:9a:25:c6:d5:5e:44:60:3c:ef:09:4b:cd:d1:c0:
6e:5e:bb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:43:45 2025 by rpki-client