Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
File: obtQVKF8yU__wrwpWhW_74qQQwo.mft (raw, json)
Hash identifier: ozM27gDHWlofXSbr/wHz4DltSYVdkcexPV/ssJDOBbg=
Subject key identifier: 16:E6:98:6A:27:65:3D:5B:3B:57:C8:FC:43:5D:24:04:0A:25:C2:D9
Authority key identifier: A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A
Certificate issuer: /CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
Certificate serial: 0194BCA97F5C1D6BFF88D34A7C734F04F426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
Manifest number: 043F
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: obtQVKF8yU__wrwpWhW_74qQQwo.crl (hash: treNPoaE/NEli1wwnYH31AIutqsd3i1yBeQLrpByX/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7f:5c:1d:6b:ff:88:d3:4a:7c:73:4f:04:f4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1bb5054a17cc94fffc2bc295a15bfef8a90430a
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=16e6986a27653d5b3b57c8fc435d24040a25c2d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:3e:b5:fb:f8:15:2c:5d:94:cc:7d:4e:e1:
61:4c:74:b0:fc:52:67:17:79:96:95:d8:50:bf:7b:
59:87:2a:31:0a:5d:e2:cb:fe:68:6d:64:ec:85:c6:
f3:52:4b:92:d9:a9:3f:91:58:a4:40:b9:57:98:df:
b3:29:21:f2:5e:5f:ad:1a:f0:92:cf:f7:08:43:0b:
eb:d3:05:a6:c4:19:df:5f:73:fb:55:c2:f4:24:a9:
b3:ef:f0:4d:36:b1:c5:fc:9e:c9:e2:f5:7b:0a:ae:
63:fd:92:cb:b8:8f:7f:fe:9f:4a:71:8c:b0:fd:e8:
79:9c:4b:2d:9d:18:99:58:75:50:f2:e3:0e:b7:ed:
d2:84:82:35:0a:56:a1:64:df:42:87:88:0d:1b:78:
41:8f:4b:db:a7:a7:c1:c7:d4:e8:7a:25:ee:ee:57:
71:e4:0d:20:35:9e:5c:8d:5b:c2:2b:89:67:a5:b2:
1d:1f:85:08:16:41:3a:26:7d:35:59:8b:ab:67:bb:
c4:99:d0:5a:41:4b:8b:7a:be:f2:c7:9a:6b:e3:f9:
8a:ab:f5:90:af:17:39:bf:49:f9:e7:ce:aa:1e:e0:
6b:1a:0d:ff:43:8e:4e:85:3c:9c:93:04:db:25:3b:
f2:b2:f0:bd:3d:55:38:6e:43:d9:c5:53:81:f9:a1:
ef:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E6:98:6A:27:65:3D:5B:3B:57:C8:FC:43:5D:24:04:0A:25:C2:D9
X509v3 Authority Key Identifier:
keyid:A1:BB:50:54:A1:7C:C9:4F:FF:C2:BC:29:5A:15:BF:EF:8A:90:43:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obtQVKF8yU__wrwpWhW_74qQQwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a30c10-1c2d-478c-9cf8-72255d249c5d/1/obtQVKF8yU__wrwpWhW_74qQQwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:22:1b:6d:5c:48:cd:84:7f:d7:0b:92:d3:82:c3:42:d6:7c:
8d:8b:29:a8:be:37:14:a2:31:b6:7c:be:df:57:15:e0:b1:7d:
61:ef:e3:13:7a:60:07:60:63:e4:f3:df:dd:d9:b2:d1:e5:8d:
b1:7c:8d:6e:1d:96:ac:3e:8f:06:b4:01:17:16:69:73:bd:ab:
f7:55:6f:0c:a6:9d:f3:de:11:f0:94:6e:74:33:d0:ee:b0:22:
95:68:91:5c:b7:c1:0e:41:d6:8d:d0:0d:eb:6f:7a:97:42:ef:
54:0c:5e:fe:84:e4:a5:a0:23:2e:02:4b:23:12:c5:3f:31:93:
a9:9f:e5:53:37:c4:03:b3:08:c3:9b:e8:77:2b:e0:60:96:48:
c0:ea:d2:3d:b1:96:e8:52:b2:3f:0f:30:dd:9d:b3:86:f3:45:
34:7a:d6:6f:6c:d7:05:15:16:94:13:18:0d:4c:8b:ef:da:5f:
20:04:3e:1a:d3:bd:fb:90:43:2d:6b:ad:26:b1:b8:99:b7:76:
c8:dc:69:03:cf:32:6f:80:d7:96:47:f2:2c:39:5d:b5:34:96:
20:05:ed:3d:d4:1b:d0:8a:cf:29:c6:a7:b8:81:f7:3d:62:85:
01:ea:50:7f:ea:9e:8b:4a:2e:19:9c:c7:3f:b9:33:ba:b5:d3:
6e:3c:eb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:32:41 2025 by rpki-client