Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5fd023-92ea-4a63-b7d0-e5cba2137308/1/o6jK9iF86xDdjBRvlrnXc-3YiGQ.mft
File: o6jK9iF86xDdjBRvlrnXc-3YiGQ.mft (raw, json)
Hash identifier: OLYUHueKcWbebSLpt8AW7GL3v9nSVBImrZUUoccc32U=
Subject key identifier: 3C:64:D0:C5:32:18:49:3D:CE:7D:59:D3:8D:85:24:98:21:77:4F:99
Authority key identifier: A3:A8:CA:F6:21:7C:EB:10:DD:8C:14:6F:96:B9:D7:73:ED:D8:88:64
Certificate issuer: /CN=a3a8caf6217ceb10dd8c146f96b9d773edd88864
Certificate serial: 0194BBCE455CE0CFA4632E8A5E5FFECA354A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6jK9iF86xDdjBRvlrnXc-3YiGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/5fd023-92ea-4a63-b7d0-e5cba2137308/1/o6jK9iF86xDdjBRvlrnXc-3YiGQ.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:44 +0000
Manifest this update: Fri 31 Jan 2025 10:00:44 +0000
Manifest next update: Sat 01 Feb 2025 10:00:44 +0000
Files and hashes: 1: o6jK9iF86xDdjBRvlrnXc-3YiGQ.crl (hash: 4262ClYW0Ht2PqhPH2GWZI0hJ0Wi1oNmSxq9MaM3QaU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:45:5c:e0:cf:a4:63:2e:8a:5e:5f:fe:ca:35:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a8caf6217ceb10dd8c146f96b9d773edd88864
Validity
Not Before: Jan 31 10:00:44 2025 GMT
Not After : Feb 1 10:00:44 2025 GMT
Subject: CN=3c64d0c53218493dce7d59d38d85249821774f99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1d:19:aa:bc:32:e8:64:fc:f6:77:58:e4:81:
cd:b1:c4:0e:92:5f:3e:a1:63:62:c5:34:fb:77:4a:
a2:3d:04:7c:0f:e5:41:e1:58:1d:f5:17:ca:f7:e7:
44:2f:bb:f1:06:ca:67:1c:57:e0:68:09:a5:a2:6e:
da:d1:80:4b:f4:ae:9f:65:b9:b2:7c:39:7b:88:60:
31:54:d2:39:0d:80:2c:a8:6c:f7:e0:81:e7:04:15:
96:fa:fe:57:af:56:04:2d:ec:6b:cd:e8:42:1a:85:
3e:68:98:39:b2:89:53:ee:9e:30:3b:ef:74:f1:3e:
b0:71:6e:1f:ee:49:62:0c:aa:b4:b9:38:97:a1:24:
04:10:e9:f0:e7:73:0f:a6:18:81:3b:1e:8e:54:d4:
91:aa:41:47:4c:2a:fb:11:1e:6c:4e:de:9c:65:35:
af:94:4f:46:3a:65:a6:a3:48:ad:29:65:97:6b:85:
20:e9:ea:9c:0f:18:ef:89:01:61:2b:ba:db:32:2a:
b1:4e:af:3d:90:82:86:8d:e3:0a:2b:c6:6a:c9:21:
bd:63:4c:72:09:0c:5a:7e:0b:9b:ae:f1:50:56:68:
0b:2c:b8:85:85:4f:33:77:e3:3b:39:1b:b7:c7:03:
d3:59:6e:cf:36:11:96:a1:45:12:ed:65:3f:e2:65:
c6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:64:D0:C5:32:18:49:3D:CE:7D:59:D3:8D:85:24:98:21:77:4F:99
X509v3 Authority Key Identifier:
keyid:A3:A8:CA:F6:21:7C:EB:10:DD:8C:14:6F:96:B9:D7:73:ED:D8:88:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6jK9iF86xDdjBRvlrnXc-3YiGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5fd023-92ea-4a63-b7d0-e5cba2137308/1/o6jK9iF86xDdjBRvlrnXc-3YiGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5fd023-92ea-4a63-b7d0-e5cba2137308/1/o6jK9iF86xDdjBRvlrnXc-3YiGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:11:f2:a3:08:02:e5:3c:08:05:d4:1f:33:15:fc:00:56:b7:
8d:db:e9:8e:90:b4:11:94:9e:84:76:45:41:59:0a:d7:81:1d:
78:1b:85:e2:42:c1:8d:75:6f:01:f1:67:9f:38:4a:76:a9:16:
69:a3:c4:1a:65:31:72:54:00:2b:48:0f:34:5f:29:23:b8:71:
fb:82:91:92:a3:9d:ef:b9:d7:d4:0a:26:ef:00:7b:24:32:d4:
99:30:f9:67:15:14:ff:85:63:6d:6b:09:82:75:81:8f:dc:e6:
ce:2c:5f:ce:6c:56:6a:44:14:12:e9:f9:7e:00:8b:3a:9e:01:
96:1c:d1:59:ca:33:c6:f1:8b:13:91:21:6d:8e:76:2e:eb:87:
a6:99:ce:3f:b1:b9:99:e5:ea:2d:e2:e3:c5:4f:e2:11:de:8e:
20:78:5b:4c:d2:eb:7d:41:eb:83:a1:42:22:4d:15:97:cc:6d:
6b:fe:3f:05:65:f3:db:aa:60:c4:a6:66:5c:14:d7:d4:1e:18:
19:cc:e1:c2:a7:0f:68:80:dc:88:a8:38:c3:63:b9:f6:cc:e8:
6d:35:8a:25:03:94:dd:bb:e7:ad:39:f8:44:d3:bf:94:f0:40:
30:32:1b:c5:81:17:d9:ac:ce:fe:29:a9:24:5f:b7:d0:ff:f9:
63:c1:fa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:23 2025 by rpki-client