Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
File: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft (raw, json)
Hash identifier: jr/6QHasjw2Fpf2dn/48UwOcNFsR7ofDfRHR1C8vGX4=
Subject key identifier: F7:54:59:B2:46:DE:47:55:CA:70:91:D6:85:6B:01:05:67:42:F5:34
Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Certificate serial: 0194BD1752D7F7DB45534CA0D261894EBD33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: 0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl (hash: FQJotBcbnzC0HAbJtoeQQ66PLqNVM/N5UOOHxkdqfvc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:52:d7:f7:db:45:53:4c:a0:d2:61:89:4e:bd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=f75459b246de4755ca7091d6856b01056742f534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:06:26:58:10:77:54:b8:7c:c3:14:c5:3f:62:
05:7e:68:53:69:a8:72:89:66:47:0d:37:6d:a1:76:
23:36:f6:ff:29:54:28:ee:24:5d:f3:a8:d6:b2:fd:
50:e4:e5:3c:24:4e:8c:14:d3:ec:02:d7:9f:4c:62:
20:63:c3:a4:e1:78:cf:32:ec:e4:fe:3c:45:4b:d3:
15:b9:6c:42:c4:66:bc:76:99:41:02:a1:a3:fa:33:
9c:9d:9e:dc:21:26:38:e2:c4:bd:12:70:5a:6e:5b:
98:33:38:fc:c6:2e:3f:04:0c:5c:64:72:d0:87:72:
1c:52:10:e0:26:2e:d8:8c:6d:81:ac:23:11:0d:a8:
7e:5e:ea:e9:d0:78:9d:20:2a:70:e6:4b:e2:47:62:
93:ec:a8:20:b7:15:1b:2c:fb:07:47:6b:40:eb:9a:
26:ed:7d:9a:4f:48:8a:bd:b7:9a:a3:81:0f:ce:16:
bb:58:de:92:7b:93:a6:47:f0:b6:68:24:2e:31:be:
85:f7:f1:dd:c7:86:24:8c:c4:fd:5c:94:cb:0f:60:
ee:11:6d:33:91:1d:ff:a8:00:3a:db:db:b1:2c:64:
cd:76:7d:e6:3e:a8:d8:e7:75:2f:a3:7d:a8:c6:25:
c5:79:95:97:7e:64:8c:cf:79:64:c1:94:29:53:e3:
9d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:54:59:B2:46:DE:47:55:CA:70:91:D6:85:6B:01:05:67:42:F5:34
X509v3 Authority Key Identifier:
keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:77:64:e2:8d:9c:55:db:88:74:cd:15:bc:e8:fe:4f:b1:a0:
1b:e0:54:05:c6:e4:1d:cd:a8:36:46:af:85:40:76:ea:be:80:
30:45:96:2b:37:c9:c6:38:88:9b:a8:8c:7f:e8:ce:6f:d1:7f:
1a:1d:8c:22:f8:5d:b8:7d:f3:fb:76:a7:7f:46:8f:a8:46:48:
04:47:88:77:9b:10:05:b7:2f:03:51:5a:87:11:73:ad:80:27:
98:d3:48:88:e4:8a:5b:46:0c:c6:6b:15:12:29:b5:fb:e8:a8:
bd:87:0b:1b:96:40:6e:b2:ac:6d:a1:fe:1e:83:bb:91:48:f9:
21:e8:fc:6b:42:8c:dc:1a:8f:a5:4e:6c:cf:1b:24:47:bc:e5:
f1:59:c4:74:8f:c1:32:d9:f2:d8:7c:ee:74:64:0b:d8:0b:3c:
79:a3:09:17:2e:bf:b6:ea:12:63:9e:f6:82:09:7d:07:3a:ad:
41:76:da:15:1f:16:ce:07:2f:0b:e6:61:c9:c8:dd:a0:0c:08:
29:e2:7c:20:67:bc:68:cb:7d:b3:03:e8:6d:34:4f:3d:ae:f9:
dc:2d:ec:83:56:d9:98:28:a0:5e:79:76:c6:f9:02:6c:a9:e9:
67:2a:69:b7:2a:5f:c7:ce:04:b3:71:af:12:03:01:38:82:0c:
1e:bb:2f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:45 2025 by rpki-client