Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
File: OoLcXHHOpyxlsCahJnifOIZXC6Y.mft (raw, json)
Hash identifier: QlfyeAscfPeoH0rmkCUP8r1ius70qLI/BS00hJ/aq0Q=
Subject key identifier: D6:14:B2:C3:1F:43:E0:B8:60:4F:D3:08:8C:C1:E1:7A:6F:E9:C0:BA
Authority key identifier: 3A:82:DC:5C:71:CE:A7:2C:65:B0:26:A1:26:78:9F:38:86:57:0B:A6
Certificate issuer: /CN=3a82dc5c71cea72c65b026a126789f3886570ba6
Certificate serial: 0194BBCDDB73C49E6AB73913300808A566E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: OoLcXHHOpyxlsCahJnifOIZXC6Y.crl (hash: SYhL2W3tbxyVMR7E+eHEDBnKMpIsz86Cm59WBIde1N8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:db:73:c4:9e:6a:b7:39:13:30:08:08:a5:66:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a82dc5c71cea72c65b026a126789f3886570ba6
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=d614b2c31f43e0b8604fd3088cc1e17a6fe9c0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:42:55:89:c7:d0:34:39:15:4d:30:15:62:
b2:d6:77:78:21:97:ee:0f:04:fa:aa:74:a5:18:d9:
5f:ee:20:59:48:9b:c7:8e:c6:7d:02:c0:d7:f1:75:
45:60:3a:2c:f5:b2:4e:a6:b2:48:2c:1a:ff:68:78:
94:4e:98:c0:95:b3:3b:43:0e:00:34:0f:41:32:af:
92:5c:a8:05:c5:9e:9f:f2:df:be:68:99:83:86:41:
5b:9b:dd:ee:78:32:20:a6:ee:ed:ce:4e:b2:94:ce:
23:3d:e2:b5:8f:d2:6a:52:0f:9b:ee:28:85:98:18:
9e:d9:ab:33:b8:59:10:6b:b1:a6:c2:ed:16:5a:a5:
10:5d:e8:23:39:8a:f9:cf:71:81:0f:90:1e:33:c4:
b5:b1:60:a1:2e:7b:91:6f:a3:04:2c:f8:cf:2c:c4:
3b:74:be:a9:96:57:7d:09:a9:6a:a9:a7:03:67:b7:
e5:22:16:aa:23:8f:d3:b7:02:fa:f1:44:a0:69:15:
00:55:4a:2d:ac:f3:b8:d7:01:be:39:fe:8d:9f:36:
35:9b:aa:14:8f:2b:2b:d0:bb:21:00:e3:8e:58:4c:
02:e1:2b:9c:7c:b6:7e:49:04:c1:02:85:fb:c8:94:
20:1a:66:76:c7:14:f2:b6:1e:ad:0f:a9:4e:d1:ec:
e4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:14:B2:C3:1F:43:E0:B8:60:4F:D3:08:8C:C1:E1:7A:6F:E9:C0:BA
X509v3 Authority Key Identifier:
keyid:3A:82:DC:5C:71:CE:A7:2C:65:B0:26:A1:26:78:9F:38:86:57:0B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoLcXHHOpyxlsCahJnifOIZXC6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d5958c-14ca-41d5-8d42-dc1fab439e30/1/OoLcXHHOpyxlsCahJnifOIZXC6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:77:18:e3:7b:08:09:c1:03:27:be:bb:4f:64:91:a1:3d:ec:
0a:7e:01:59:49:6c:4e:2c:5c:4d:cf:fc:30:7f:21:ed:4a:29:
52:72:60:35:c6:36:a1:ec:04:a0:a7:e4:cc:25:c3:53:e4:72:
5b:77:52:d8:d7:94:21:9f:82:f3:19:46:42:a7:1b:6f:39:61:
93:8b:e0:ce:54:17:58:ec:58:32:83:40:10:a2:11:a8:03:a9:
8b:75:30:3a:be:00:31:10:c6:0b:95:89:a8:da:d6:59:03:14:
67:55:14:03:8c:5a:a0:b0:b9:cf:bf:be:8f:0c:d1:7d:7f:dc:
e4:ba:90:5c:f7:36:4a:d0:57:90:c8:4f:83:8f:13:3e:84:c5:
be:15:6a:96:13:01:10:cb:9e:cb:79:f8:c6:90:57:a4:9b:9f:
8d:21:76:d4:97:1c:56:ab:e7:73:1e:86:b8:f9:a3:d2:66:4f:
b6:cf:5a:70:a9:4f:a1:67:1b:8b:18:39:4b:91:cf:14:ca:54:
b8:e4:9f:ef:62:c9:23:46:56:c1:1e:e5:2b:8b:64:3f:8f:19:
02:a2:1d:34:d8:25:e2:1d:1a:41:f7:43:ea:13:87:58:50:06:
13:d6:6e:1a:95:4e:3b:78:b6:61:38:33:91:63:66:f1:84:28:
b9:4b:50:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:18 2025 by rpki-client