Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
File: 1OXVJHHqh0idSKBiCEem1VbxY9s.mft (raw, json)
Hash identifier: I4revPENSI4t2m4aAvBf/h2TiA0/6sdvY75G90oHG88=
Subject key identifier: 84:D2:B8:6E:BA:DE:3F:88:56:5D:6F:62:98:C4:AC:DF:9D:58:D5:BF
Authority key identifier: D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
Certificate issuer: /CN=d4e5d52471ea87489d48a0620847a6d556f163db
Certificate serial: 0194BD17F5F5C80ADE5A7242D54B1C12A765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 16:00:51 +0000
Manifest this update: Fri 31 Jan 2025 16:00:51 +0000
Manifest next update: Sat 01 Feb 2025 16:00:51 +0000
Files and hashes: 1: 1OXVJHHqh0idSKBiCEem1VbxY9s.crl (hash: IXydDUYjZgwINEoelzl2m6N7uSaDoXRHkGsH19BgcGc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f5:f5:c8:0a:de:5a:72:42:d5:4b:1c:12:a7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e5d52471ea87489d48a0620847a6d556f163db
Validity
Not Before: Jan 31 16:00:51 2025 GMT
Not After : Feb 1 16:00:51 2025 GMT
Subject: CN=84d2b86ebade3f88565d6f6298c4acdf9d58d5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:68:48:17:c7:df:85:5f:bd:12:6d:12:a6:04:
c5:d4:cf:a2:fb:39:b8:ed:e2:7f:7f:c1:34:f7:d7:
99:be:3f:44:10:80:f7:a0:aa:c6:a7:06:d7:1d:a3:
74:53:a5:7b:8f:ed:2b:4b:98:26:de:e3:0f:b6:78:
1d:c3:86:3d:81:ee:42:22:65:92:fc:ed:18:e5:b9:
eb:e9:89:a1:03:bf:05:ae:b2:4d:84:21:f8:af:cf:
4f:55:69:30:17:b1:a4:c7:bb:c3:c2:ff:da:60:c5:
98:a2:ff:83:66:0a:15:9c:50:8f:4e:d3:34:0a:14:
37:b3:f8:64:de:e1:8d:06:73:78:55:65:5a:f3:d2:
4c:eb:c6:43:00:88:c9:16:3d:3b:ea:d6:5a:e6:86:
3e:4b:0a:ac:2e:dd:da:87:5f:0d:8d:ff:65:76:ab:
52:ed:3d:83:f8:3a:61:29:7f:cc:e8:fd:eb:ca:b4:
bf:d0:0f:14:23:cc:86:df:55:54:f0:c1:4a:53:74:
2c:a1:6e:ae:b4:26:a8:7a:0f:f4:af:7a:7a:63:c4:
e7:86:0a:f4:dc:6c:3b:cf:c0:27:3c:e5:ac:6d:b0:
5e:01:f3:a3:08:8e:b5:10:e9:61:2f:7b:8e:86:e2:
a7:b1:37:6a:14:3d:a3:87:70:6e:d9:8a:02:2d:7d:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D2:B8:6E:BA:DE:3F:88:56:5D:6F:62:98:C4:AC:DF:9D:58:D5:BF
X509v3 Authority Key Identifier:
keyid:D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:dc:93:ad:11:9c:26:28:ea:be:58:a9:9b:97:91:78:4b:85:
fa:f5:b7:3d:e5:eb:62:ff:51:f6:db:5b:7f:b9:27:1e:54:1f:
41:82:bc:3f:89:57:24:f3:9c:fd:57:21:16:07:ae:11:5a:df:
00:80:2d:c9:79:a7:cb:1e:40:63:56:02:cf:82:bd:a0:fa:0a:
d3:1b:c9:d6:d0:b0:dd:d6:d8:62:3e:d3:7b:a4:9e:aa:61:6a:
a0:41:b1:c1:05:1f:d4:3c:ce:09:03:3d:86:34:67:3b:67:a9:
15:85:b9:fc:5f:31:a9:9c:aa:9d:95:f9:99:8f:fa:1c:fd:b7:
b7:c8:90:6b:6b:47:3c:72:f3:fb:01:c7:07:8d:34:73:a1:26:
34:15:9b:eb:c6:b5:9c:d9:f8:63:72:05:4d:01:e3:fa:a6:d3:
80:0a:6c:12:20:d4:57:1c:19:1b:58:a2:9d:76:2e:46:33:fc:
6d:1a:d8:17:ae:bd:a0:0c:1d:16:40:94:a8:e0:ed:51:d3:22:
d4:88:5e:72:de:cd:73:0b:1a:3f:df:bd:77:10:da:c6:12:f2:
58:67:fe:90:7b:3e:bb:5a:17:63:6f:c6:d9:29:9f:b4:63:f3:
27:77:a2:f7:c1:0a:f5:a3:c2:2f:44:ca:70:01:36:70:b5:83:
d8:ad:55:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:07 2025 by rpki-client