Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
File: O5pBDtUm-GwybZG2KApEGhbAxnY.mft (raw, json)
Hash identifier: RNtTPYezn6EqsKw4VIkg7vcWOPRc6QJL98/QQNUE/+g=
Subject key identifier: 22:06:7B:47:73:8D:DA:25:32:F1:89:DD:D6:D5:3A:6C:F7:2B:0A:BA
Authority key identifier: 3B:9A:41:0E:D5:26:F8:6C:32:6D:91:B6:28:0A:44:1A:16:C0:C6:76
Certificate issuer: /CN=3b9a410ed526f86c326d91b6280a441a16c0c676
Certificate serial: 0194BC3C77360850B14CFED1743EF3E8D06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5pBDtUm-GwybZG2KApEGhbAxnY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
Manifest number: 0594
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: O5pBDtUm-GwybZG2KApEGhbAxnY.crl (hash: 95P9gc8TE2W/8ki9y9QDR+QoAQw26/sk6utFzrd0pnk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:77:36:08:50:b1:4c:fe:d1:74:3e:f3:e8:d0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9a410ed526f86c326d91b6280a441a16c0c676
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=22067b47738dda2532f189ddd6d53a6cf72b0aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:82:5c:4b:ad:7a:1a:5c:2d:41:e7:57:d3:
ec:9c:e8:15:27:6a:3f:4c:b5:ea:19:18:1b:be:d7:
a9:78:13:9e:32:e0:db:84:10:d2:41:d2:67:4f:e4:
7c:4f:1c:96:9e:bd:51:c8:18:2a:3d:90:f0:49:e8:
3b:a7:08:5a:bb:02:37:8a:fe:e9:65:f1:76:21:1e:
35:96:dc:57:07:eb:0f:60:6f:38:1d:8d:68:97:43:
60:b2:a8:de:2c:fa:04:27:5a:09:67:66:0b:93:53:
29:87:fc:c5:05:c6:12:cc:ec:8d:9b:4b:80:33:32:
8a:b4:78:ff:6c:d8:d7:2f:82:c4:3c:4e:cd:c7:9c:
55:29:de:98:9b:c4:da:a8:52:df:6a:9c:ad:5c:01:
8a:87:84:1f:e7:1d:98:44:5c:8b:f6:4e:02:81:98:
db:84:27:16:c5:0f:2b:6a:01:75:dc:c4:0b:55:c2:
50:03:de:fc:7a:29:46:47:f7:d0:e8:a6:33:2e:75:
ec:c6:5a:e8:a0:32:d8:ce:68:a5:15:da:2e:12:db:
47:d2:75:8e:0b:b0:a8:b7:d6:d2:e9:53:c2:4b:be:
dd:68:ff:87:29:99:47:54:40:76:17:4b:1c:28:38:
f9:c1:05:57:d8:1b:34:f9:ed:ae:7a:42:76:ce:57:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:06:7B:47:73:8D:DA:25:32:F1:89:DD:D6:D5:3A:6C:F7:2B:0A:BA
X509v3 Authority Key Identifier:
keyid:3B:9A:41:0E:D5:26:F8:6C:32:6D:91:B6:28:0A:44:1A:16:C0:C6:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5pBDtUm-GwybZG2KApEGhbAxnY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/5e8e04-e6ea-4d59-b2f7-df0a6dc282a0/1/O5pBDtUm-GwybZG2KApEGhbAxnY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a8:af:2a:e9:6d:a5:e2:f5:2f:80:f3:0f:8a:63:e0:49:40:
3d:38:00:93:6b:3c:0a:d6:0d:1f:5e:b1:ee:da:25:25:de:75:
73:e5:0d:17:71:80:d1:65:c1:73:7b:1c:4b:f6:f7:52:b6:5f:
20:75:6f:49:ba:c3:48:c1:cb:52:e9:09:af:72:9b:47:ac:9b:
60:18:be:d2:9b:ce:0b:42:bd:27:11:8b:ac:ba:c2:8d:bb:21:
57:cd:cf:a5:7d:e8:50:80:24:b3:dd:03:e6:09:67:87:9c:e2:
b9:02:c0:d5:9d:4f:85:bd:7d:36:a0:25:ab:c7:1e:bb:7c:86:
75:45:c7:e6:71:69:84:f5:ea:8e:e4:cd:a0:30:64:ba:9c:37:
33:a3:7e:85:d9:91:11:8f:0a:41:be:e5:bb:b4:ea:4f:0d:73:
09:7f:8c:ab:71:86:1b:1f:fe:8f:9f:89:f9:4c:30:0a:a7:98:
ab:db:9d:76:aa:57:a3:25:02:d3:3b:b1:c1:14:51:fd:fb:ec:
12:7e:8a:85:52:b1:86:ed:b8:96:58:52:be:42:c9:8d:c3:c9:
7b:fd:f9:94:c0:c6:85:c0:dc:0b:6d:9c:7f:7d:52:df:76:1b:
51:33:8e:6e:80:a3:6b:86:b5:bc:89:bd:c2:62:f2:69:2a:41:
c9:65:62:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:43 2025 by rpki-client