Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
File: 0phnd6RO0JQPKaeVx19Fpi9EuzM.mft (raw, json)
Hash identifier: RaGcwbK7QRmbmwQtHGZ4NfBXofnev6YGXVgrd+VljEM=
Subject key identifier: 36:2D:EE:9D:A1:64:5F:64:76:69:B6:E2:64:9B:3F:82:C1:52:81:29
Authority key identifier: D2:98:67:77:A4:4E:D0:94:0F:29:A7:95:C7:5F:45:A6:2F:44:BB:33
Certificate issuer: /CN=d2986777a44ed0940f29a795c75f45a62f44bb33
Certificate serial: 0194BBCE841485D37BB4C44D646B5E91C65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0phnd6RO0JQPKaeVx19Fpi9EuzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
Manifest number: 0414
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: 0phnd6RO0JQPKaeVx19Fpi9EuzM.crl (hash: AymLNnAdFw032jEx9DSAik6WGOGDAp74k7pwlyLVsWo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:84:14:85:d3:7b:b4:c4:4d:64:6b:5e:91:c6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2986777a44ed0940f29a795c75f45a62f44bb33
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=362dee9da1645f647669b6e2649b3f82c1528129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:74:0f:2d:88:17:24:77:69:21:aa:95:d4:
79:a8:45:4e:c2:86:40:e9:23:53:f6:ce:13:7f:b6:
92:14:8f:1b:56:ca:13:8d:72:4a:eb:38:44:13:6f:
82:b4:43:b9:b1:42:4e:18:9b:90:73:e5:07:a5:1e:
1d:df:e3:88:d9:e8:1b:82:15:89:71:85:bd:f0:4d:
88:76:44:27:ce:08:59:4e:54:7c:a7:11:5a:87:d7:
cd:3a:59:44:d5:44:30:a8:ca:b3:c7:19:93:79:53:
89:09:81:af:92:7b:39:5b:3c:09:d3:44:5f:fc:e6:
f5:3c:2c:09:fa:c3:a6:c3:0f:4a:86:b2:43:63:8d:
71:37:2e:33:90:b5:85:39:05:01:89:fc:ce:16:79:
9e:3b:fa:0e:27:88:8c:bc:39:7b:a3:ed:39:d2:03:
c0:b1:f0:f7:60:00:fd:4d:ca:fa:1e:c8:8f:ca:af:
00:04:c8:55:e5:2e:f0:cb:e9:0b:68:d1:35:00:06:
6a:bc:c3:58:32:30:c6:88:8a:f9:6e:f3:23:53:a6:
82:32:26:c6:b0:93:5e:c8:b1:d7:ea:e6:59:ba:73:
c4:f1:b6:88:5f:13:df:1e:4e:9d:ba:6e:3c:a4:23:
4b:2c:ea:18:a7:84:f0:fe:07:b3:24:76:be:01:28:
16:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2D:EE:9D:A1:64:5F:64:76:69:B6:E2:64:9B:3F:82:C1:52:81:29
X509v3 Authority Key Identifier:
keyid:D2:98:67:77:A4:4E:D0:94:0F:29:A7:95:C7:5F:45:A6:2F:44:BB:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0phnd6RO0JQPKaeVx19Fpi9EuzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9773dc-d8e8-480d-98f2-c00cbc1492bf/1/0phnd6RO0JQPKaeVx19Fpi9EuzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:49:56:80:e4:07:e5:a8:a3:0c:de:e7:3b:ab:e5:e2:de:a8:
a2:3f:85:fc:9e:5a:36:f1:e9:05:1b:59:62:c8:02:f3:ec:de:
6a:27:57:c6:69:27:74:06:20:e8:4d:51:4e:e5:5e:37:6e:17:
3f:86:81:04:2b:d1:06:82:ac:22:cb:c1:d3:c5:26:85:d0:1d:
e1:9e:34:51:23:e2:df:a4:85:f8:31:81:f9:3f:54:95:8e:2c:
1b:a4:32:d3:c1:3a:1d:15:04:59:d5:5d:22:ce:28:98:33:7e:
c1:7f:d9:ac:5c:b8:b7:66:5d:53:2b:79:1f:42:1a:fb:db:17:
1f:36:2a:76:30:6f:2b:f3:e4:ad:cb:83:86:48:85:c2:03:1f:
31:f4:59:7b:3f:99:51:98:6c:92:b0:e5:b2:b3:54:fd:b0:06:
32:62:fa:9f:f1:00:18:62:c8:ca:49:3f:3d:af:74:ac:84:d2:
82:34:96:24:4b:b7:e4:5f:fe:4d:bf:84:1d:4e:1a:67:94:84:
7b:b5:6b:63:7f:07:62:d5:eb:a3:92:3f:ea:d8:e0:61:29:23:
f1:2c:b1:61:c1:44:2f:e9:60:92:01:b0:48:e5:f2:a4:23:51:
03:a0:40:ca:eb:03:9d:c8:53:38:10:7e:3a:d3:09:47:aa:2b:
76:33:1d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:52:02 2025 by rpki-client