Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/e84060-a2d4-48a3-a096-a0b6ad671ee3/1/oTV6fQ8DLpzdSgMdUtO0BHwDlBo.mft
File: oTV6fQ8DLpzdSgMdUtO0BHwDlBo.mft (raw, json)
Hash identifier: CHTHB6mWXk9jSfNvSyKu0bwn30YR4jIC6VdEz36GQh0=
Subject key identifier: 7B:DE:85:0F:CB:D8:1D:82:AF:D4:85:11:9F:5C:AA:24:9A:74:4D:3B
Authority key identifier: A1:35:7A:7D:0F:03:2E:9C:DD:4A:03:1D:52:D3:B4:04:7C:03:94:1A
Certificate issuer: /CN=a1357a7d0f032e9cdd4a031d52d3b4047c03941a
Certificate serial: 0194BD17754C77C80103B006E9E187D20286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTV6fQ8DLpzdSgMdUtO0BHwDlBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/e84060-a2d4-48a3-a096-a0b6ad671ee3/1/oTV6fQ8DLpzdSgMdUtO0BHwDlBo.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:18 +0000
Manifest this update: Fri 31 Jan 2025 16:00:18 +0000
Manifest next update: Sat 01 Feb 2025 16:00:18 +0000
Files and hashes: 1: oTV6fQ8DLpzdSgMdUtO0BHwDlBo.crl (hash: fF4WpZlhLImqNy0zXSat1i6j/Gw0cutPTWJ8+GKeirc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:75:4c:77:c8:01:03:b0:06:e9:e1:87:d2:02:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1357a7d0f032e9cdd4a031d52d3b4047c03941a
Validity
Not Before: Jan 31 16:00:18 2025 GMT
Not After : Feb 1 16:00:18 2025 GMT
Subject: CN=7bde850fcbd81d82afd485119f5caa249a744d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:ed:c1:95:9a:cf:44:d0:04:5f:cf:47:ee:
07:e6:7c:4c:77:19:98:ca:5e:2c:07:8a:57:1b:0f:
8b:8e:0f:39:3a:87:0e:3b:3e:30:02:d7:3d:3e:f1:
60:8e:27:45:34:14:5a:8f:e7:85:17:7f:84:3d:8a:
26:6f:f8:be:f4:39:ce:f4:df:3b:47:86:d6:a7:bf:
2b:ed:0a:e3:16:00:e8:7a:94:0f:9a:b9:64:f2:3c:
af:ac:85:94:39:96:fb:eb:42:25:5f:59:ba:a5:0e:
8b:20:93:69:cd:c0:8e:ed:80:4b:73:ee:1b:d1:09:
c0:0e:04:b0:52:4b:d6:21:c1:19:91:39:2f:d6:5c:
9c:d0:19:d2:e5:0d:aa:fd:f2:c9:35:07:5e:a4:66:
2e:8b:b9:a3:b8:6d:e5:45:77:79:07:9e:7b:16:c5:
ca:7f:2f:f7:11:a8:27:2d:a2:24:9e:74:15:6f:95:
f7:e5:eb:dc:d3:ee:a7:ac:44:7e:22:b5:38:ba:3a:
83:39:6c:6f:06:2f:28:3e:b3:c5:16:8a:c6:93:5b:
64:e2:0e:c3:dd:2f:f9:34:cf:a5:31:3a:09:0b:98:
41:cf:72:52:2b:c5:e9:73:f5:f9:8f:86:17:55:e1:
e9:f3:de:16:ce:1a:31:b5:4c:93:5e:4f:87:d2:4a:
91:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:DE:85:0F:CB:D8:1D:82:AF:D4:85:11:9F:5C:AA:24:9A:74:4D:3B
X509v3 Authority Key Identifier:
keyid:A1:35:7A:7D:0F:03:2E:9C:DD:4A:03:1D:52:D3:B4:04:7C:03:94:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTV6fQ8DLpzdSgMdUtO0BHwDlBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e84060-a2d4-48a3-a096-a0b6ad671ee3/1/oTV6fQ8DLpzdSgMdUtO0BHwDlBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e84060-a2d4-48a3-a096-a0b6ad671ee3/1/oTV6fQ8DLpzdSgMdUtO0BHwDlBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:12:34:d2:db:50:72:7e:ce:30:ec:ef:2c:6d:d1:d0:4c:6d:
fd:b8:07:da:53:ca:12:86:b2:b9:58:f6:1b:b2:79:42:7e:0e:
7e:08:85:cc:fb:7a:2f:4c:06:fd:4d:71:84:2c:00:e7:30:ab:
df:c9:ee:0f:bd:40:bb:72:fa:67:87:ae:6f:a8:44:92:1e:94:
08:86:fd:3b:44:4a:dc:36:58:e8:c6:0b:8c:e6:16:fc:34:c3:
5e:70:12:94:da:93:65:79:ab:cd:36:d1:45:bb:dc:bc:b9:e2:
bd:06:b1:2f:7c:56:dc:23:ad:e8:63:7c:40:e1:bc:fd:1e:d0:
77:29:9e:cb:3b:a4:c7:b4:85:4b:32:3a:da:ff:b1:39:14:27:
cd:aa:d7:3f:4a:99:1b:5c:04:a5:7d:9d:18:7d:9a:4a:a4:39:
1b:cf:5e:51:fe:8b:e2:3e:a5:ad:ea:f8:0f:7d:9a:df:f4:57:
2d:8e:05:77:d6:e3:bf:24:e4:2d:c6:31:32:84:26:f3:80:a7:
b5:5d:30:27:3e:bc:5f:b9:04:86:8a:c1:eb:ad:df:11:2b:2c:
60:3c:c1:5a:cf:06:d9:c7:f0:1b:4a:9b:29:f2:dc:7e:36:b7:
1c:4d:89:40:41:2a:93:47:f9:52:0f:41:56:24:d3:de:3e:a3:
8a:df:10:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:56 2025 by rpki-client