Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/11265d-80a8-448d-bfc6-b0ebb6bd00c7/1/oD8_d4YxqgT8MVRTySFzR9FjjnQ.mft
File: oD8_d4YxqgT8MVRTySFzR9FjjnQ.mft (raw, json)
Hash identifier: sqhgqkwcbQ4curHBrQlj33vt9MTzs4DsXijnLuPaya8=
Subject key identifier: C0:22:10:57:A8:D4:4B:FD:86:90:BB:9F:CF:CF:94:05:E8:A5:25:A5
Authority key identifier: A0:3F:3F:77:86:31:AA:04:FC:31:54:53:C9:21:73:47:D1:63:8E:74
Certificate issuer: /CN=a03f3f778631aa04fc315453c9217347d1638e74
Certificate serial: 0194BBCE034A1EDB854290EFDF9CCF42E43D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oD8_d4YxqgT8MVRTySFzR9FjjnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/11265d-80a8-448d-bfc6-b0ebb6bd00c7/1/oD8_d4YxqgT8MVRTySFzR9FjjnQ.mft
Manifest number: 092D
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: oD8_d4YxqgT8MVRTySFzR9FjjnQ.crl (hash: mCnVG28JGkfTXHYONCD+PjC2WfCiYtgilSw5pZPWCPM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:03:4a:1e:db:85:42:90:ef:df:9c:cf:42:e4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a03f3f778631aa04fc315453c9217347d1638e74
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=c0221057a8d44bfd8690bb9fcfcf9405e8a525a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:4b:5a:10:20:5c:63:2f:6f:c6:32:19:47:69:
ca:bc:85:2f:34:52:0d:9d:39:1f:ea:5b:9a:23:08:
98:ac:4e:8e:29:b4:6c:c4:e7:90:b6:aa:26:b5:f2:
a6:e3:0d:b2:a7:e6:34:3a:e7:ab:1a:ce:96:8d:d2:
69:50:80:1f:9a:58:8d:44:3d:87:a1:67:38:16:57:
28:39:fa:4c:0a:ac:0f:15:10:c0:a9:5b:0b:36:28:
7a:19:02:05:fc:f5:d0:d6:ab:04:57:d6:ba:21:78:
98:55:e3:23:10:67:54:fc:7f:01:3b:5c:96:ec:ee:
77:6e:88:a6:8f:16:28:e5:df:28:91:6f:18:81:9d:
62:49:58:21:0c:ce:d0:12:b5:44:8e:78:50:fa:a6:
2d:c1:b5:92:96:46:01:d2:c4:f9:c1:31:28:4b:1d:
29:89:82:d9:7f:e2:3c:d6:2c:85:0f:89:59:27:db:
71:a3:fd:f3:93:08:e8:a9:4d:9f:95:19:14:a5:90:
36:bc:55:34:d8:fe:1a:3b:d3:85:eb:08:94:e6:b4:
67:64:3c:e0:69:f7:bd:61:a1:11:e7:ed:bb:8a:49:
ef:bb:51:10:dc:fd:d1:06:44:3b:ef:70:b4:06:b3:
c4:fc:6a:20:3c:4c:24:52:45:68:c4:1b:3f:61:e3:
15:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:22:10:57:A8:D4:4B:FD:86:90:BB:9F:CF:CF:94:05:E8:A5:25:A5
X509v3 Authority Key Identifier:
keyid:A0:3F:3F:77:86:31:AA:04:FC:31:54:53:C9:21:73:47:D1:63:8E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oD8_d4YxqgT8MVRTySFzR9FjjnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/11265d-80a8-448d-bfc6-b0ebb6bd00c7/1/oD8_d4YxqgT8MVRTySFzR9FjjnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/11265d-80a8-448d-bfc6-b0ebb6bd00c7/1/oD8_d4YxqgT8MVRTySFzR9FjjnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:22:95:3b:39:63:07:ef:80:ce:08:c1:c6:ec:58:06:ec:03:
61:42:b1:5f:3d:75:e9:9c:b3:01:d2:63:6b:47:f6:d5:3c:64:
30:63:31:85:89:81:b0:00:d2:e2:c0:de:e0:89:2e:55:3a:01:
e4:ac:53:d3:14:71:83:67:e1:c1:5c:40:6f:b3:00:6d:96:83:
ba:ee:0d:07:80:d4:4d:32:05:92:c9:bf:03:fb:3d:a3:19:be:
72:ec:a8:19:e6:9e:7e:0f:cf:e0:56:81:bb:17:ce:72:79:f1:
79:c0:a1:17:e5:11:92:a5:6b:d5:33:1e:4d:5c:0d:e8:c0:9f:
bc:79:20:74:73:b9:de:5f:1a:d9:c6:71:9d:6b:84:28:77:8e:
0c:28:62:2b:fb:bc:ee:5e:1d:c5:df:96:b9:81:6e:2f:fd:ef:
02:7f:30:34:97:22:7a:44:7c:df:01:97:98:9d:e2:92:74:40:
a7:46:82:69:10:21:55:06:01:bd:e1:81:4e:57:bc:76:56:f4:
fa:66:52:93:f9:3a:bb:4a:9a:62:c8:8c:86:df:1f:fa:59:cc:
68:55:b0:56:ca:5f:6e:92:90:d7:9e:7e:7f:bf:ca:35:5b:e5:
c8:9b:4d:e9:f9:40:4a:c1:57:b0:7c:4c:2a:f2:8d:ed:06:2a:
db:08:28:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:47:15 2025 by rpki-client