Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
File: OmqMuD6zZTfKf_csW07WqNKtpMQ.mft (raw, json)
Hash identifier: w7OlQ0oZP8C6f1B3emZdK1Wg4WsbMEBqLt4Ak9DIPhE=
Subject key identifier: 44:CD:4B:E3:DD:02:EF:A9:DF:84:3A:31:03:35:45:9A:1B:7D:A5:3D
Authority key identifier: 3A:6A:8C:B8:3E:B3:65:37:CA:7F:F7:2C:5B:4E:D6:A8:D2:AD:A4:C4
Certificate issuer: /CN=3a6a8cb83eb36537ca7ff72c5b4ed6a8d2ada4c4
Certificate serial: 0194BD178B1D0922969E465BBFAA96ECC2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmqMuD6zZTfKf_csW07WqNKtpMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
Manifest number: 0B8B
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: OmqMuD6zZTfKf_csW07WqNKtpMQ.crl (hash: 3lBpJ0+Ct5QoGpeBWTkO1C82Wex7Wm81btANUTIIkRA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8b:1d:09:22:96:9e:46:5b:bf:aa:96:ec:c2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6a8cb83eb36537ca7ff72c5b4ed6a8d2ada4c4
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=44cd4be3dd02efa9df843a310335459a1b7da53d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:fc:46:58:dc:0b:1d:c0:2b:90:b7:97:9c:
73:2d:8e:2c:03:40:b0:02:2f:61:87:fc:48:8c:a4:
d1:a9:66:a3:65:cd:ec:47:07:1c:8c:5c:c0:74:9e:
88:d8:a5:99:e9:f4:cf:5a:aa:22:60:68:f6:85:7e:
c8:b3:2a:c5:30:e9:1e:3e:5b:57:e9:8e:a4:9d:b1:
cd:9c:fb:59:50:ce:8d:01:f5:fb:f0:49:a6:fe:ce:
be:4c:ac:ad:0c:9d:9b:64:9b:86:ab:68:09:26:65:
a2:8f:45:3c:d4:24:d7:4d:22:b3:48:c0:ef:46:05:
92:8d:ac:1f:79:14:3a:13:e8:26:7e:ee:4f:14:8d:
eb:87:67:64:85:34:13:e7:48:09:14:92:86:66:b6:
58:bc:a5:84:69:3f:99:ca:01:86:24:df:63:6e:c3:
95:08:cb:13:63:d4:19:5c:c7:03:13:36:18:10:b0:
43:ce:3a:b3:65:b2:fe:1d:e5:8e:a7:56:b3:cb:0a:
6a:99:71:b5:2c:cb:08:63:4a:8d:cf:bc:b1:75:8d:
87:7f:fb:4d:a4:e4:af:7c:a0:58:4d:a0:e2:99:13:
d7:94:36:ef:b3:32:bd:ab:05:05:e9:71:04:c6:19:
44:8c:c5:66:83:a1:27:d8:e2:84:a7:8e:cd:bb:7f:
c5:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:CD:4B:E3:DD:02:EF:A9:DF:84:3A:31:03:35:45:9A:1B:7D:A5:3D
X509v3 Authority Key Identifier:
keyid:3A:6A:8C:B8:3E:B3:65:37:CA:7F:F7:2C:5B:4E:D6:A8:D2:AD:A4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmqMuD6zZTfKf_csW07WqNKtpMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8f73d4-560d-4193-a7bb-3e37bacdae0d/1/OmqMuD6zZTfKf_csW07WqNKtpMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e1:89:08:cd:1c:88:91:4c:9f:d0:a6:29:e6:e3:9f:36:69:
fe:6b:38:28:ef:bf:11:35:5a:0e:03:09:5c:ae:80:fb:a3:70:
77:74:cb:6f:76:81:99:eb:a2:24:24:9b:ff:d2:a5:9c:fb:79:
df:6f:83:2b:35:55:d7:3e:cf:80:04:f3:7c:08:69:43:df:1b:
79:61:a9:f4:7a:a9:b9:36:be:bb:49:db:3f:69:95:45:a1:2e:
e3:5e:f8:ab:98:5e:14:8f:69:2d:8c:67:dd:11:23:ff:92:cf:
ba:a9:55:cb:61:41:26:99:e1:9b:41:87:7b:d5:00:3f:95:ed:
52:d2:76:09:f1:f1:b3:e9:b3:7c:25:4f:cd:c2:88:ec:89:d2:
6f:65:62:19:3d:18:a0:7e:ea:0a:ba:74:63:b2:3f:76:ce:c6:
82:96:08:cd:9b:c1:9a:b2:7f:31:84:2e:47:d2:e2:c2:3b:ad:
1d:0c:ee:e1:a4:86:b3:76:3e:65:db:35:78:98:e1:5e:6b:30:
cb:bc:c3:8a:7e:26:dd:a5:22:14:0e:a5:4f:8d:65:e0:77:45:
e3:23:2e:df:08:f6:d7:32:19:1a:1e:94:78:6a:df:1a:e6:bf:
5e:e0:59:d9:00:73:b1:6d:df:15:2a:a3:ff:1f:3e:a6:1b:95:
d7:12:b6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 04:42:40 2025 by rpki-client