Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
File: OXy939eSBtZcTugWjq9ucJAg-V0.mft (raw, json)
Hash identifier: JvrSTIg7jFxAIuG0SCyqvSg3EmXmt63iw5XGh6Z2Jzg=
Subject key identifier: 96:F2:9E:05:5B:0B:2F:C7:87:67:62:9B:32:EE:79:DB:BD:2E:7B:4A
Authority key identifier: 39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
Certificate issuer: /CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Certificate serial: 0194BBCEDE7A09C22B062141EBBDC0217F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
Manifest number: 07E9
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: OXy939eSBtZcTugWjq9ucJAg-V0.crl (hash: Mi6w8x7tManJ94KL3y3+cj6Y8bM+Jh+z4ArCmJRwOH8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:de:7a:09:c2:2b:06:21:41:eb:bd:c0:21:7f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397cbddfd79206d65c4ee8168eaf6e709020f95d
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=96f29e055b0b2fc78767629b32ee79dbbd2e7b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ce:96:7f:3d:53:05:68:84:44:ee:f7:1c:df:
cb:e4:eb:1e:7c:d8:bf:87:16:93:c9:1d:5f:ce:41:
f7:2c:52:3c:63:cf:ea:c0:a1:ff:e1:dd:42:52:e0:
d4:09:b3:c4:f4:5d:2a:9d:81:cd:3d:02:28:44:50:
ab:20:af:ff:52:79:16:bd:f2:81:90:e9:ad:45:a9:
f8:31:4c:be:8c:c5:26:03:30:78:f8:a4:a9:21:70:
46:0d:c2:a1:5f:4e:ac:fa:c0:ab:7f:fd:23:70:9b:
44:39:7d:d2:7e:fb:3a:d2:bb:72:f7:88:15:fd:d8:
59:e3:86:de:d3:34:77:88:26:60:8d:1c:2c:dd:55:
6c:f4:ae:e7:0a:42:89:d4:13:8e:99:fe:bc:c1:fd:
1a:2e:6f:2a:54:e9:f8:28:e1:74:54:44:cf:79:e5:
3b:36:2e:ca:3d:96:74:66:b6:d6:53:20:fa:3f:1f:
56:54:52:5a:74:ea:bc:fb:3c:63:f7:23:df:f9:32:
fb:13:0e:d8:b7:54:ce:0b:fd:4f:3f:3f:df:66:18:
5f:cd:5e:49:f7:7d:5d:03:0f:2d:9b:6a:33:1c:4d:
11:73:a0:19:54:f8:3f:82:8a:85:9f:26:10:24:34:
da:ec:77:78:75:af:1f:fa:ae:ed:1b:73:a4:c7:a4:
f8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F2:9E:05:5B:0B:2F:C7:87:67:62:9B:32:EE:79:DB:BD:2E:7B:4A
X509v3 Authority Key Identifier:
keyid:39:7C:BD:DF:D7:92:06:D6:5C:4E:E8:16:8E:AF:6E:70:90:20:F9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXy939eSBtZcTugWjq9ucJAg-V0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/d7a4d5-5144-4e18-887c-a6b0fde21906/1/OXy939eSBtZcTugWjq9ucJAg-V0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d0:2c:da:5b:d7:c9:72:42:f2:2a:d4:5d:e8:8d:62:a8:a6:
15:df:4e:bf:d3:70:9d:64:e1:b9:d7:56:01:3c:d8:7f:24:a7:
ef:6d:f1:c7:c1:e7:01:11:b8:5e:1e:ae:13:c1:7f:f7:3d:14:
ff:68:b4:6a:de:63:63:ee:e9:c2:7d:cf:20:b9:6e:c2:1f:d2:
bb:43:d7:1c:05:2f:ff:8d:a2:2c:c2:49:a0:f8:a8:be:44:2c:
b4:9f:64:cd:24:41:46:69:28:f6:dd:dd:f7:77:8d:e9:62:ad:
4d:1c:cc:f3:60:ff:5e:fb:c9:74:61:91:ce:36:1b:55:5a:35:
e6:bf:12:75:e4:9b:6d:e6:2e:d9:a8:c3:2b:3b:37:d8:06:54:
b7:f9:ca:5c:f8:c4:70:cb:52:f1:4d:57:61:dd:e4:65:87:e7:
45:94:02:ec:37:fd:dc:6a:28:46:e2:5b:3c:da:30:69:e8:f4:
e5:a7:91:ee:8c:6e:12:0a:bb:2b:fd:a8:2b:f0:4e:85:9e:b0:
b4:cc:ee:51:68:34:dc:bc:33:4e:95:6d:c3:79:88:05:2c:27:
3a:52:bc:52:8b:56:88:d8:b9:4f:e4:e6:87:3b:fc:a2:3f:82:
9b:5f:bd:bf:5b:aa:6c:b4:f2:af:9a:42:fd:61:cf:73:f4:9d:
dc:7b:e0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:19 2025 by rpki-client