Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft
File: oGqOPGol1GOfOUWtFszF6Yo6kqY.mft (raw, json)
Hash identifier: o5u1GPDD6yEvYUB+NuLa0/oxa2wqXRf13+S7mOr/El0=
Subject key identifier: 19:D1:77:BB:DD:0F:50:AA:4A:82:4A:95:83:8A:8C:25:A4:C1:73:AA
Authority key identifier: A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6
Certificate issuer: /CN=a06a8e3c6a25d4639f3945ad16ccc5e98a3a92a6
Certificate serial: 0194BBCE31AB9D6CB4F84AA6382EA95BF869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:39 +0000
Manifest this update: Fri 31 Jan 2025 10:00:39 +0000
Manifest next update: Sat 01 Feb 2025 10:00:39 +0000
Files and hashes: 1: oGqOPGol1GOfOUWtFszF6Yo6kqY.crl (hash: DrjQYOvKwg44jdAMdZkcxoISP7IIksE0OrzeCXj0y8g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:31:ab:9d:6c:b4:f8:4a:a6:38:2e:a9:5b:f8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06a8e3c6a25d4639f3945ad16ccc5e98a3a92a6
Validity
Not Before: Jan 31 10:00:39 2025 GMT
Not After : Feb 1 10:00:39 2025 GMT
Subject: CN=19d177bbdd0f50aa4a824a95838a8c25a4c173aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4f:73:7b:2e:d6:1f:c1:0f:20:66:fe:84:0e:
69:65:2f:b5:7f:dc:f9:37:48:dc:cf:0e:b3:9f:18:
8f:7d:c2:61:0b:6b:6f:a7:bf:2c:5c:a0:ad:94:97:
1b:ef:13:85:a2:8b:94:16:57:02:0d:3b:e0:34:27:
2c:1c:ae:57:d7:3c:49:d1:b2:d1:22:18:09:27:08:
d9:18:a1:aa:0f:bf:b0:d9:ef:ab:51:0f:39:60:db:
9c:87:a2:6a:64:e5:e4:64:73:1c:b9:36:ae:0f:3a:
8f:7f:cc:29:dc:aa:60:5c:b0:ba:6f:60:ed:d4:b3:
ec:b9:2a:5c:5d:9b:bf:c0:d1:77:94:6f:8b:67:c3:
e7:46:6f:24:48:5f:8c:1e:32:0b:0b:de:df:0b:a7:
8c:a0:9e:9e:0e:1e:af:90:dd:a6:55:50:fa:9a:e3:
cb:6b:17:16:15:23:01:8b:49:94:a9:da:6a:c2:10:
99:c0:1d:70:59:4f:19:58:3f:fc:9c:ee:f7:f6:0c:
69:93:f1:9b:d1:d5:d7:d1:52:32:94:81:7c:9d:4f:
38:1c:42:f7:de:17:9e:7e:cc:40:10:7a:0b:01:e5:
4b:e1:8b:84:26:a5:29:7d:84:0e:4b:a8:5e:fa:33:
49:da:ed:7e:2c:97:af:4f:b9:21:eb:e6:99:4d:50:
ea:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:D1:77:BB:DD:0F:50:AA:4A:82:4A:95:83:8A:8C:25:A4:C1:73:AA
X509v3 Authority Key Identifier:
keyid:A0:6A:8E:3C:6A:25:D4:63:9F:39:45:AD:16:CC:C5:E9:8A:3A:92:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGqOPGol1GOfOUWtFszF6Yo6kqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d24305-c551-450d-b697-9ac2d536f12d/1/oGqOPGol1GOfOUWtFszF6Yo6kqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:17:4f:3f:75:58:8f:a8:0b:44:b5:70:72:37:2d:c6:a8:31:
1d:c6:0a:93:3d:46:61:db:5d:b4:50:db:c8:67:df:c7:d1:ba:
6c:30:29:dc:88:e1:b8:14:4c:d7:3a:34:1d:ab:c0:0d:96:8f:
44:c1:94:3e:45:7b:2a:ed:b8:dc:36:32:05:7b:b8:d2:1c:ec:
01:8c:9f:84:cb:fc:35:19:1f:95:1f:6d:24:28:32:f5:38:7a:
41:f0:80:ab:5f:d6:77:c8:a6:3f:df:b9:7a:c7:f7:62:9e:29:
2c:4a:f0:34:cb:29:12:41:47:a7:e8:53:8e:8a:00:ff:8d:08:
67:27:6b:b5:49:2a:db:b1:08:cd:bd:a3:88:78:b3:63:01:c2:
18:4b:86:2e:c6:18:f7:78:93:e9:e9:29:9e:db:66:7f:28:9b:
55:2c:eb:9d:cd:2b:58:3c:e0:72:09:4d:59:5b:53:d5:05:03:
94:0f:f2:c6:a1:e9:24:1b:95:01:42:96:9c:2f:3b:48:31:0b:
00:b4:bc:be:29:da:ac:b1:23:e7:47:66:28:2f:22:a0:8b:b7:
1c:b0:4b:ae:57:86:61:5b:bd:96:a8:c3:a8:9a:3e:7a:3a:5a:
ad:dd:9b:ae:dc:ca:db:15:1c:45:29:ec:c2:f4:34:54:1b:58:
1d:83:ad:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:20 2025 by rpki-client