Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7d82a1-4e1b-46d7-83bb-211b62485666/1/o2ApslnXf2dY38twYITlGk7WP-0.mft
File: o2ApslnXf2dY38twYITlGk7WP-0.mft (raw, json)
Hash identifier: zAMtjpW1zdyS+ID3PDVyETmvoLMNnBAUcfg85N7Os90=
Subject key identifier: B7:73:4E:39:2C:5A:FD:C1:C6:FB:2A:30:FC:96:A6:25:FD:D8:94:22
Authority key identifier: A3:60:29:B2:59:D7:7F:67:58:DF:CB:70:60:84:E5:1A:4E:D6:3F:ED
Certificate issuer: /CN=a36029b259d77f6758dfcb706084e51a4ed63fed
Certificate serial: 0194BBCE7626374A111BA1BA186C06A58D93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2ApslnXf2dY38twYITlGk7WP-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7d82a1-4e1b-46d7-83bb-211b62485666/1/o2ApslnXf2dY38twYITlGk7WP-0.mft
Manifest number: 0799
Signing time: Fri 31 Jan 2025 10:00:57 +0000
Manifest this update: Fri 31 Jan 2025 10:00:57 +0000
Manifest next update: Sat 01 Feb 2025 10:00:57 +0000
Files and hashes: 1: o2ApslnXf2dY38twYITlGk7WP-0.crl (hash: 3qXqCFULVIlEOx3kZDI5c/fTqKR7Pjx4UfGHFaCTfcY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:76:26:37:4a:11:1b:a1:ba:18:6c:06:a5:8d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36029b259d77f6758dfcb706084e51a4ed63fed
Validity
Not Before: Jan 31 10:00:57 2025 GMT
Not After : Feb 1 10:00:57 2025 GMT
Subject: CN=b7734e392c5afdc1c6fb2a30fc96a625fdd89422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b1:78:ce:e7:7c:51:86:ae:3f:40:e6:95:29:
07:57:e4:7f:f5:46:20:97:73:bc:dc:ab:0f:2c:fe:
68:7b:b9:e9:5f:b0:93:17:03:a2:76:b8:38:be:c3:
38:3d:56:7c:b9:b3:7d:13:17:4f:e2:ca:2c:79:fb:
be:63:01:f3:8d:b5:f2:01:b5:41:60:de:e9:0b:4f:
55:0e:5c:bc:5e:8d:78:1a:b7:c7:24:97:67:eb:c3:
b8:09:8d:7e:5a:fe:0e:d9:ab:75:85:d5:7b:ba:fb:
33:25:81:8f:03:54:10:ea:1b:bf:54:2f:29:bd:91:
64:d6:3b:0b:8c:87:4b:eb:3f:85:1f:3a:51:65:65:
29:6d:1d:44:bc:27:df:0a:86:c9:81:fb:4f:02:58:
24:4d:50:0d:e8:d7:a6:a4:e9:76:b4:5f:ba:83:99:
d4:14:72:3f:23:fe:c0:50:6e:75:b3:df:7d:8d:49:
b0:5e:91:52:7a:bb:c2:cc:91:cb:16:20:7d:91:bc:
41:bd:ea:03:5d:07:32:01:ef:b0:4b:f7:80:f9:e2:
7b:3a:32:27:4c:1c:42:7e:b1:1e:43:f6:ff:cc:65:
ad:de:03:54:25:d2:07:04:cc:c8:34:9a:d3:8c:10:
a7:6c:3e:86:df:0d:de:52:f9:cb:58:3d:47:67:d7:
9c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:73:4E:39:2C:5A:FD:C1:C6:FB:2A:30:FC:96:A6:25:FD:D8:94:22
X509v3 Authority Key Identifier:
keyid:A3:60:29:B2:59:D7:7F:67:58:DF:CB:70:60:84:E5:1A:4E:D6:3F:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2ApslnXf2dY38twYITlGk7WP-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d82a1-4e1b-46d7-83bb-211b62485666/1/o2ApslnXf2dY38twYITlGk7WP-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7d82a1-4e1b-46d7-83bb-211b62485666/1/o2ApslnXf2dY38twYITlGk7WP-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:7e:2e:cc:f4:d2:f4:c9:6e:64:16:a7:75:1e:8d:82:0c:d9:
fb:d2:20:09:70:8e:7d:09:ac:89:cc:37:d1:48:9f:9f:b5:9e:
86:31:eb:72:f4:77:fb:0e:46:b7:d0:c6:55:47:7a:dc:61:cc:
52:2a:83:6a:79:0b:6a:18:a7:c0:16:3f:ce:85:30:f1:e2:85:
b5:4b:b5:d0:69:30:e6:91:57:04:31:ec:6d:76:f4:d7:5b:14:
96:6c:c6:67:42:8b:0d:de:6e:46:ed:bb:17:2f:48:08:77:de:
8f:dc:fa:2b:e7:b8:cb:d7:c0:bf:02:37:0d:3b:aa:16:92:2b:
99:21:e3:5b:8a:8e:70:7b:dd:b3:d5:4b:f3:98:6b:77:93:76:
d1:d8:4c:a2:16:9e:83:97:68:c0:f6:33:27:81:ed:f2:33:4a:
1c:a7:a9:30:bf:47:36:7e:8c:39:93:ce:70:ea:e7:56:1d:78:
85:3b:b9:ac:0a:5b:78:ab:c3:10:ae:7f:a5:e1:99:98:ef:b8:
25:f2:06:f7:26:0c:60:00:7d:1f:50:bc:23:e5:26:2a:93:28:
4c:57:67:be:40:e2:79:a1:ff:d9:1c:6a:b0:68:b6:bb:79:fe:
de:8c:d1:c4:bb:f8:92:29:ff:31:f4:6c:02:72:ce:c3:06:13:
eb:99:b3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:12 2025 by rpki-client