Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
File: O1HtwFDk-YX73VeMzgKtyIDGyKc.mft (raw, json)
Hash identifier: cItzgezZ/Yd82k4njXorIHciC9NCIXiPRStFvjmJEFE=
Subject key identifier: 93:70:C6:F2:DA:B2:21:9D:16:F7:76:E3:3B:8A:10:5E:17:C7:46:E0
Authority key identifier: 3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7
Certificate issuer: /CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7
Certificate serial: 0194BBCE1FD4880D650449DB5F2A60D534FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
Manifest number: 0B84
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: O1HtwFDk-YX73VeMzgKtyIDGyKc.crl (hash: ZiWxXi6zfwxP3kNB38DSMB7m+LGCyduH6ce2nfbjefI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1f:d4:88:0d:65:04:49:db:5f:2a:60:d5:34:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b51edc050e4f985fbdd578cce02adc880c6c8a7
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=9370c6f2dab2219d16f776e33b8a105e17c746e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:8e:45:6b:23:08:31:be:85:32:ce:08:24:
7e:28:88:10:be:48:15:b8:59:7f:f1:83:e3:bf:86:
bf:ff:22:03:77:58:92:5f:f7:50:07:35:27:6c:6e:
9d:e3:ff:4c:aa:f4:ba:ee:6a:28:f1:62:db:20:c4:
c2:0d:e5:d9:75:d6:a7:42:1d:ec:a5:cb:3f:60:0c:
d8:3a:e8:af:95:21:2a:69:72:b5:65:af:a4:9a:44:
6b:67:ec:cd:8b:44:08:83:d4:17:63:c9:93:00:ee:
87:9e:cb:12:5f:3a:d3:63:8a:c7:b8:b5:c5:07:d7:
cb:76:13:e8:25:b7:f3:47:f3:d9:b8:07:53:b0:c8:
67:f7:bb:86:89:f2:5a:be:36:77:c1:70:ba:05:72:
68:55:30:c8:73:52:8e:1b:8e:a8:e3:df:63:8e:ae:
28:5f:b9:fe:35:30:38:46:5d:0c:e0:09:78:dd:01:
29:b6:03:df:45:31:55:aa:31:d4:c7:f2:6a:0f:78:
79:dd:69:99:3b:fd:56:20:58:f1:6a:67:61:fe:f4:
ea:c6:20:38:4f:7c:88:db:a2:a6:5b:59:19:59:7b:
6d:84:26:d3:d8:f4:5a:20:56:f7:7e:4d:66:54:ea:
b8:00:d6:f3:a8:c3:1e:bf:a7:2d:99:ef:28:f9:21:
ed:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:70:C6:F2:DA:B2:21:9D:16:F7:76:E3:3B:8A:10:5E:17:C7:46:E0
X509v3 Authority Key Identifier:
keyid:3B:51:ED:C0:50:E4:F9:85:FB:DD:57:8C:CE:02:AD:C8:80:C6:C8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1HtwFDk-YX73VeMzgKtyIDGyKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/ca71c8-13ba-471b-af98-bcca61e39cc3/1/O1HtwFDk-YX73VeMzgKtyIDGyKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:aa:7d:48:15:d2:3a:09:b6:b5:ef:77:b4:d0:f0:3c:0d:04:
7c:99:c4:13:fa:1d:bb:84:0e:d3:82:ef:83:71:9d:98:19:f3:
f1:ef:b3:5c:43:40:55:bc:b9:0d:d4:11:8d:20:99:bf:0d:53:
20:44:56:46:44:62:ee:44:ae:61:24:13:b7:8f:67:46:0e:bf:
3e:2d:3b:d0:ea:74:e5:d4:2a:77:e1:88:f9:0e:11:c4:3b:eb:
fa:f9:42:fb:d4:c2:5a:31:9f:22:e9:ca:42:b6:3f:4b:78:1e:
2f:ac:06:7d:03:2e:c6:cc:dd:37:18:b6:0f:97:33:82:41:ba:
2e:58:bf:63:1e:6e:19:45:08:25:c0:7d:e9:b1:01:18:3a:da:
d1:a9:8f:7a:b3:05:cd:85:7c:63:8a:aa:a2:dd:fb:1e:44:fa:
9a:b9:33:72:c9:5e:ee:6b:97:2e:33:a9:d7:d4:5a:23:ab:70:
1e:b9:ae:72:9c:e1:e0:e8:ba:31:56:4f:83:5c:13:55:c4:d7:
25:6c:e0:fb:44:00:59:8d:44:59:58:75:dc:4b:58:07:64:5d:
47:d3:f8:d4:5c:30:0c:0f:84:85:9e:2c:d8:85:12:67:8b:04:
8b:4b:66:01:1c:bf:81:f6:2c:f1:e1:ce:4c:a5:08:ad:1b:2f:
c8:9c:61:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:59:59 2025 by rpki-client