Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/6587d8-5898-45a4-a5e3-d642e4b081bd/1/OnTgfC3vyhS_LWx6FdWpMw0JN0g.mft
File: OnTgfC3vyhS_LWx6FdWpMw0JN0g.mft (raw, json)
Hash identifier: tdI5DYP4r4JANX+v8vgYl5B6Rk51gLl2fgYciolfVpo=
Subject key identifier: 63:B5:95:89:A3:15:EF:E4:29:C2:D2:3B:F5:08:C7:19:AC:5B:14:57
Authority key identifier: 3A:74:E0:7C:2D:EF:CA:14:BF:2D:6C:7A:15:D5:A9:33:0D:09:37:48
Certificate issuer: /CN=3a74e07c2defca14bf2d6c7a15d5a9330d093748
Certificate serial: 0194BCE0ADC647787E6FF1F6180C2D133B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OnTgfC3vyhS_LWx6FdWpMw0JN0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/6587d8-5898-45a4-a5e3-d642e4b081bd/1/OnTgfC3vyhS_LWx6FdWpMw0JN0g.mft
Manifest number: 03A6
Signing time: Fri 31 Jan 2025 15:00:28 +0000
Manifest this update: Fri 31 Jan 2025 15:00:28 +0000
Manifest next update: Sat 01 Feb 2025 15:00:28 +0000
Files and hashes: 1: OnTgfC3vyhS_LWx6FdWpMw0JN0g.crl (hash: f+HI45zoxxhwxZBzN1E1ue8Mi+wiG6sYIZYI3H/ZOGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ad:c6:47:78:7e:6f:f1:f6:18:0c:2d:13:3b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a74e07c2defca14bf2d6c7a15d5a9330d093748
Validity
Not Before: Jan 31 15:00:28 2025 GMT
Not After : Feb 1 15:00:28 2025 GMT
Subject: CN=63b59589a315efe429c2d23bf508c719ac5b1457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2f:d5:f6:66:e7:8e:28:0a:af:76:61:a8:dd:
6f:5f:e5:c3:9e:51:58:49:3a:e5:64:bc:e1:39:7e:
f3:af:ec:a9:fd:f6:8b:e6:d9:37:f3:6b:15:fc:ee:
c7:e3:5d:67:dd:39:7c:7d:07:91:22:2e:78:0e:30:
51:62:df:63:91:05:6c:7b:5a:fd:46:b3:00:26:9a:
ee:ad:85:65:b2:71:c8:5e:cd:cc:7b:29:2b:11:1d:
14:49:b3:14:22:6b:66:d5:1f:3c:2c:6e:23:33:6b:
41:0e:b1:58:2a:1a:68:42:90:8d:57:df:2e:9d:98:
c7:12:31:74:1a:d2:ef:91:58:df:72:a4:f4:f2:ae:
e3:49:d2:5c:e8:54:05:21:42:55:a1:82:7c:24:00:
04:ca:cf:91:6c:60:1b:80:10:ae:53:75:21:82:95:
51:1c:08:8a:11:b0:fd:96:6f:b5:0c:83:30:85:76:
87:21:a9:1c:8d:79:d7:b4:ed:15:03:d8:49:b1:54:
83:46:46:06:37:77:55:9a:aa:5d:66:12:8c:90:0c:
4f:91:32:1f:f7:c5:fa:f5:e3:f1:4c:14:c2:d8:f3:
6d:97:86:d5:e2:68:05:1d:74:0e:3a:ee:47:a6:56:
cd:b8:14:43:0b:4f:fd:55:65:2b:06:3e:72:d0:fe:
2c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B5:95:89:A3:15:EF:E4:29:C2:D2:3B:F5:08:C7:19:AC:5B:14:57
X509v3 Authority Key Identifier:
keyid:3A:74:E0:7C:2D:EF:CA:14:BF:2D:6C:7A:15:D5:A9:33:0D:09:37:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OnTgfC3vyhS_LWx6FdWpMw0JN0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/6587d8-5898-45a4-a5e3-d642e4b081bd/1/OnTgfC3vyhS_LWx6FdWpMw0JN0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/6587d8-5898-45a4-a5e3-d642e4b081bd/1/OnTgfC3vyhS_LWx6FdWpMw0JN0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ce:01:58:20:2c:c1:60:8a:7e:7b:55:b6:b4:f2:ee:f3:87:
0f:0d:23:28:73:19:b9:95:66:07:e0:fe:13:61:25:f4:6d:af:
72:02:2c:71:f1:2d:57:e3:40:c3:59:95:c8:5b:60:15:55:ee:
77:c8:09:38:63:f1:8a:aa:e3:de:aa:64:64:4c:8e:5d:fe:0f:
9b:1c:59:00:af:09:41:8a:f9:9c:26:6c:07:29:aa:65:90:f8:
4d:92:d5:93:8b:a8:37:96:be:9d:c2:15:3b:c1:aa:7b:dd:64:
66:72:f2:92:6c:21:46:7f:44:3a:b0:87:ef:6c:0e:ec:55:6e:
55:b2:79:4f:d8:90:a4:cc:51:3f:9b:58:6d:4b:e4:6a:c6:cf:
f1:a3:f4:63:80:7b:eb:9f:7a:c5:61:f7:ac:03:0e:da:a4:01:
0e:42:ed:04:81:af:b7:ac:fd:5a:0c:38:7f:2c:0e:09:b7:e8:
47:4e:c2:d3:45:b2:7a:79:fa:57:f7:f1:77:0b:26:2e:1f:4c:
1a:bf:61:ff:d5:35:dc:7e:2e:1b:9b:ce:bc:f4:f1:7f:f2:57:
0f:0d:a1:81:0d:c7:e4:43:9b:e6:b0:3e:5a:14:5b:58:1e:16:
4c:ea:db:22:da:8b:65:d8:6a:d1:f1:22:70:7c:3c:7d:ec:74:
b9:63:20:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:38:27 2025 by rpki-client