Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
File: Of-PwW6S-8wHnYDWvj197fHQZo8.mft (raw, json)
Hash identifier: kER7EG0Z9O1CEgj/A688Ui9M4sNzhC4DFKWjzHOEJ4A=
Subject key identifier: 33:EF:FC:09:91:26:3C:70:A8:76:40:A7:35:F8:31:D7:0A:34:1C:68
Authority key identifier: 39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
Certificate issuer: /CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Certificate serial: 0194BBCE18226E0CA407092CD896492BF8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
Manifest number: 08A2
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: Of-PwW6S-8wHnYDWvj197fHQZo8.crl (hash: x1Lg4nzKoFQ9kE1HBTo3e1BOgvFQwqN6yRHKDa0K0TE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:18:22:6e:0c:a4:07:09:2c:d8:96:49:2b:f8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ff8fc16e92fbcc079d80d6be3d7dedf1d0668f
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=33effc0991263c70a87640a735f831d70a341c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b4:ac:60:b3:33:c4:e7:c2:12:8a:34:1a:f5:
95:c0:ec:b1:c8:36:9d:57:1e:c8:7b:66:e8:14:8a:
f8:1b:74:77:48:60:39:41:09:c3:1f:30:9f:1f:16:
94:03:3a:6c:eb:9b:b3:b5:7b:4c:02:43:bf:8a:be:
5d:2e:06:57:89:42:55:a4:66:d5:b6:10:45:b5:9d:
c0:0f:f3:0d:7f:3a:d7:27:65:2b:99:3b:40:c4:f5:
b5:91:98:14:d9:4d:03:27:4d:b7:3e:06:c2:0a:a9:
18:eb:72:29:10:b8:f4:50:c5:79:95:76:00:55:14:
2f:6f:1d:25:73:76:52:fd:a2:0f:9f:85:71:c6:0a:
f9:6e:8f:0a:77:0a:a3:89:7a:7d:e3:ac:9c:9d:0b:
46:dd:f0:f9:ea:79:6c:96:06:f3:87:aa:1e:c9:69:
26:f0:9c:a9:ec:35:80:23:c2:6e:c1:29:d9:83:7d:
f2:40:b6:4f:dc:6e:60:77:ff:f7:1c:e4:de:3e:cc:
e3:57:5b:96:50:8b:b9:5e:f5:dd:52:03:3d:69:94:
ab:2e:f9:94:fd:b1:e2:cd:49:4d:61:8a:cf:34:3d:
ec:3c:ae:c6:88:83:ea:98:95:c4:f2:40:40:4c:bc:
12:37:fc:c1:db:6f:51:16:cf:68:2a:37:20:f4:5f:
5d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EF:FC:09:91:26:3C:70:A8:76:40:A7:35:F8:31:D7:0A:34:1C:68
X509v3 Authority Key Identifier:
keyid:39:FF:8F:C1:6E:92:FB:CC:07:9D:80:D6:BE:3D:7D:ED:F1:D0:66:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Of-PwW6S-8wHnYDWvj197fHQZo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/779139-5751-47fc-96ad-f0170754854a/1/Of-PwW6S-8wHnYDWvj197fHQZo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a1:7f:72:25:c3:f0:f5:ad:a8:4b:53:c9:86:d2:61:dd:c2:
cd:f3:80:7c:a7:b4:15:e5:17:f9:e5:c6:1c:8d:5b:81:db:f3:
8b:93:ce:2f:21:b5:bd:8a:d1:6c:67:7e:5d:55:fe:0e:ce:b8:
99:e1:f7:af:43:fd:e2:56:0e:11:9c:0c:89:30:b8:0f:97:02:
b8:4d:22:ac:26:7f:90:84:62:6f:c1:81:79:21:4a:4b:30:7a:
9b:7a:f8:5c:d2:45:4f:0e:27:71:66:8b:db:5a:bc:73:88:82:
6b:28:77:e7:3a:d8:1f:58:fc:c9:61:b7:19:fc:b6:92:ba:38:
fb:6b:a4:c3:45:04:ad:84:c0:3e:a5:26:8a:34:84:08:38:a5:
e4:ad:2e:49:28:6d:58:cf:be:b3:6b:83:12:53:11:42:6e:16:
de:a8:ae:81:50:ab:60:75:ce:91:3f:84:1d:05:76:66:3a:d3:
59:bf:53:46:1a:ee:dd:66:51:c2:9e:8c:0c:9e:79:23:bb:98:
76:60:79:d1:2c:8d:73:66:8b:34:66:b7:e2:b9:3b:66:1b:29:
3d:5f:b5:6c:2b:ba:d4:85:11:13:bd:80:f9:2c:48:e2:96:13:
4b:ce:d2:2d:8a:94:29:69:07:bf:2f:40:9e:10:dc:4a:4a:c7:
e4:ca:f1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:05:17 2025 by rpki-client