Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
File: oLNzv45HcndefI_F-9Mpze5Eoyw.mft (raw, json)
Hash identifier: xYfXldp0dzQaAtQdo3Ln7FFAWYwrRIOrwGMp6K0zrXk=
Subject key identifier: A3:08:6E:D3:1D:5B:EB:0E:DD:3C:CD:F0:BA:59:2A:56:40:71:30:F2
Authority key identifier: A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
Certificate issuer: /CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Certificate serial: 0194BC72EC2B903CA2871660B62403619BF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: oLNzv45HcndefI_F-9Mpze5Eoyw.crl (hash: BLku8FboYV61V3J21XwooqxZDT9jm3bDYGzZHJKoTzA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ec:2b:90:3c:a2:87:16:60:b6:24:03:61:9b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0b373bf8e4772775e7c8fc5fbd329cdee44a32c
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=a3086ed31d5beb0edd3ccdf0ba592a56407130f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:08:df:3b:0c:da:c6:e9:10:0f:d5:01:bc:
db:08:36:62:29:5e:4b:29:ab:5f:6c:cb:8b:27:d4:
7c:1e:ff:8d:bc:8a:b2:e5:81:7f:88:2c:f3:25:d4:
46:11:2c:0f:75:82:92:a0:17:00:42:32:7f:1f:20:
47:61:9c:27:72:fc:82:42:7f:51:d8:cf:46:f7:df:
90:4a:ae:da:a4:4c:53:0e:78:c1:9a:11:46:08:28:
12:21:51:bb:28:3d:59:08:5b:a8:7c:75:5a:8c:e0:
d6:2f:3d:38:fc:fa:89:44:f7:b5:07:84:2b:ad:81:
9d:0b:b5:14:32:a2:08:2f:76:d6:6d:03:74:d6:f0:
22:3d:b9:d0:76:51:93:35:1f:e6:74:c1:9b:82:87:
74:f9:50:30:6a:ee:dc:36:c2:19:57:cd:3c:b8:21:
16:44:f7:b7:2c:c5:58:28:7c:22:ba:0b:49:09:25:
a4:b7:55:a9:1c:5b:12:92:f9:39:ab:5d:29:f1:4f:
83:7f:b7:54:cc:fc:7f:05:93:8b:50:de:29:70:78:
4c:c4:64:9a:f8:39:e1:46:d1:71:05:64:23:3e:5a:
d8:2e:e3:2f:93:00:2d:26:dc:05:1e:40:d6:89:e0:
1b:96:0f:e0:1e:5f:01:28:8a:71:32:13:85:5d:a5:
12:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:08:6E:D3:1D:5B:EB:0E:DD:3C:CD:F0:BA:59:2A:56:40:71:30:F2
X509v3 Authority Key Identifier:
keyid:A0:B3:73:BF:8E:47:72:77:5E:7C:8F:C5:FB:D3:29:CD:EE:44:A3:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oLNzv45HcndefI_F-9Mpze5Eoyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/407213-b264-4853-9343-ee5585ae13b7/1/oLNzv45HcndefI_F-9Mpze5Eoyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:9c:30:8e:48:4f:ed:ab:ac:e8:7f:af:c2:60:ae:aa:1b:c2:
66:e1:0b:44:5a:36:40:e2:17:96:aa:ea:8d:69:f5:36:0a:5c:
c1:62:a6:fa:aa:8a:32:08:c6:e6:12:75:ed:4e:68:89:6a:26:
7c:d8:2c:93:fd:db:4c:88:83:f9:00:e7:14:8d:f8:31:f6:26:
9a:34:77:59:56:37:f6:91:3b:19:6f:e2:b5:3d:a8:5c:78:11:
64:58:34:51:b0:bd:ad:9e:78:58:79:f7:86:20:5e:6b:33:23:
1f:a1:09:f1:54:03:1e:72:c5:07:31:3c:45:2a:7a:f8:db:ac:
7c:b8:2d:07:59:aa:3b:f3:00:92:61:09:1f:53:c4:a8:01:5e:
47:0a:71:b8:26:45:a8:39:e1:b5:de:0b:1f:76:6c:0f:b4:b6:
df:1b:64:eb:9a:43:d5:92:0c:fb:c8:99:dc:77:5f:5b:ad:9d:
db:9c:28:a5:fa:e2:5f:cf:25:58:56:57:c9:7b:e1:2e:4b:ab:
9d:f6:76:10:f0:7d:0c:76:0e:e4:cf:88:2a:63:c0:be:e7:f6:
ae:7e:eb:54:ed:e9:21:9c:de:43:d0:22:64:75:d6:e7:67:df:
90:d0:17:8e:2a:51:ef:11:41:c7:0f:d0:04:eb:5a:1b:26:7e:
1f:68:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:19:41 2025 by rpki-client