Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
File: o_60EOB9CI-2UbkTdJuBJX47mVI.mft (raw, json)
Hash identifier: SWDTiWGkuPtuSPGCS+tAsIKNvmS/Kc0RDrheaV5Or/c=
Subject key identifier: 0D:36:52:AE:E8:9C:59:F5:F6:F0:89:4E:03:0D:F5:20:15:94:98:21
Authority key identifier: A3:FE:B4:10:E0:7D:08:8F:B6:51:B9:13:74:9B:81:25:7E:3B:99:52
Certificate issuer: /CN=a3feb410e07d088fb651b913749b81257e3b9952
Certificate serial: 0194BBCDE92F7525AF181F51256C742A9A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o_60EOB9CI-2UbkTdJuBJX47mVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
Manifest number: 0E74
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: o_60EOB9CI-2UbkTdJuBJX47mVI.crl (hash: G3NSR2ijD2SplLu73fYOL7lIsyXFBaHmBA8uZz5bzcQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e9:2f:75:25:af:18:1f:51:25:6c:74:2a:9a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3feb410e07d088fb651b913749b81257e3b9952
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=0d3652aee89c59f5f6f0894e030df52015949821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:3a:8f:63:b7:dd:ba:4b:8b:c0:0e:90:37:
ce:f7:91:f3:0b:bd:c9:a1:4e:b2:57:42:af:f4:3a:
a7:af:7b:c4:ab:1a:41:5b:b9:f9:a6:e0:ce:24:1a:
85:59:ff:25:fe:df:bb:48:cb:53:d1:83:8f:33:8a:
e4:42:dc:8b:8f:6c:80:fa:4e:20:8c:75:88:ca:8c:
fc:3d:52:16:55:d6:da:37:7f:45:ca:ff:87:f6:8e:
98:e5:c4:7e:e3:87:c8:96:c3:66:ca:ff:d1:fe:b1:
d7:ca:6d:9e:d6:c2:1d:10:d9:0f:25:57:fa:5e:29:
d7:80:85:af:8d:4b:c5:04:f6:e9:5d:a6:11:cf:34:
c5:85:b1:3b:91:5b:20:a3:15:c5:4d:ab:98:0c:d4:
e4:20:f4:5b:85:bc:c1:2e:20:a8:5e:9c:ad:c6:9c:
8f:1e:4c:52:88:4d:d1:a0:6a:6a:61:9d:e2:ec:df:
14:ff:b7:47:a8:f5:e3:a7:81:88:9d:de:4f:d1:5f:
8b:d9:dd:2a:c6:6e:fc:e2:ef:b0:6d:f8:5b:db:68:
99:2f:ac:52:d3:65:6a:c2:ef:34:c6:7f:8e:4b:a9:
61:aa:a9:f5:05:2b:52:af:bb:e5:5a:3f:ec:bd:f9:
df:db:2a:45:29:11:2b:ea:30:b3:15:5e:0b:14:44:
40:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:36:52:AE:E8:9C:59:F5:F6:F0:89:4E:03:0D:F5:20:15:94:98:21
X509v3 Authority Key Identifier:
keyid:A3:FE:B4:10:E0:7D:08:8F:B6:51:B9:13:74:9B:81:25:7E:3B:99:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o_60EOB9CI-2UbkTdJuBJX47mVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9f068a-17f4-4311-8bbc-234b322a0cfe/1/o_60EOB9CI-2UbkTdJuBJX47mVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:78:21:d9:ca:5a:0e:ab:fb:54:3a:7e:e3:e3:da:2d:d1:2a:
0b:28:7d:94:64:2f:e8:27:85:1b:51:bb:73:36:e7:63:cf:39:
06:0d:f2:f5:c7:5c:d3:86:7c:82:3b:d9:47:56:a9:ed:82:75:
30:71:4e:22:de:79:59:a9:66:26:50:95:ea:4c:76:3a:0a:a3:
2f:82:2d:03:7e:24:cb:0c:c6:a1:56:03:6d:3c:65:a7:86:70:
64:4e:0c:a3:bf:ec:24:20:bd:ed:c1:ab:02:45:a6:41:be:28:
6b:85:92:6f:a0:14:79:2a:ef:95:81:d3:68:73:30:03:eb:58:
96:0e:68:11:34:1c:28:71:50:87:7b:03:e0:7c:fd:ad:f2:fd:
a1:64:4c:ed:4e:8d:cd:ef:d1:e6:60:36:d9:8d:a0:7d:4d:11:
2e:6d:c5:64:9d:79:41:cd:fd:99:44:83:08:09:9b:2f:c7:44:
2f:6b:09:5c:82:a0:94:3a:d2:00:d2:83:b5:7f:34:28:cb:bf:
85:c0:7d:50:0a:d6:d1:a4:f8:62:3d:2d:e2:05:b5:9b:49:dd:
09:31:21:c1:c1:fe:8f:58:3e:62:aa:e5:2a:29:25:1d:38:b1:
2b:b3:6f:a9:aa:bd:59:77:ec:53:d2:fb:61:3b:26:b8:2e:61:
cb:07:2d:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:11 2025 by rpki-client