Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
File: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft (raw, json)
Hash identifier: qHqddwyKIFUw5xC1l8NFspP32FfoyPdWrq0YaxtXBpY=
Subject key identifier: DF:67:B6:E4:96:C4:8E:F4:93:1C:97:0B:E0:18:13:C5:94:0E:96:A3
Authority key identifier: D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
Certificate issuer: /CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Certificate serial: 0194BBCE849B3ADB2396984B9CF3AF230C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
Manifest number: 0836
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: 0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl (hash: w86S1SEEkIaIsB7jHYzDiO5lXez/O3nOxJ/mM30QrpQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:84:9b:3a:db:23:96:98:4b:9c:f3:af:23:0c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2897b335382f8224f5d890e31b386321c6bb3ed
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=df67b6e496c48ef4931c970be01813c5940e96a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:62:ec:77:c5:d0:3d:03:94:e9:d3:d6:01:7d:
cd:21:28:eb:cd:db:a3:c3:ce:5c:4e:6c:a7:d2:2c:
ce:22:9b:56:b4:29:ed:c4:a6:14:53:e8:3b:0c:7b:
d0:f8:89:83:52:06:c4:62:3a:81:30:c7:52:c0:c4:
44:81:58:f7:36:52:46:5f:98:33:21:7d:b9:f6:a2:
48:af:80:f3:ad:bc:23:91:20:bf:94:00:0c:ba:93:
3a:87:27:26:54:7c:a8:c0:2f:e8:6a:0f:e9:df:23:
65:4b:5b:6f:26:54:3a:f1:a7:b1:78:d4:b1:4a:36:
56:da:78:2f:e6:d2:e7:a3:7c:c8:fb:85:99:b3:c0:
bd:49:7c:f2:6e:9b:3e:8c:16:ac:26:01:80:de:13:
f4:48:b1:76:64:3e:27:3d:19:44:f8:bc:5f:f1:70:
48:05:0f:35:45:0f:78:16:7f:2c:02:59:3f:a0:f6:
ba:c9:dd:0c:77:2a:f7:da:08:61:c1:b4:70:f1:bf:
8f:c7:98:c8:78:48:87:8f:e9:b2:c4:64:c7:2c:29:
35:76:cf:7c:cc:f7:2b:d2:6e:84:82:62:6e:0a:22:
de:2b:d8:60:42:c1:dc:2c:97:de:ce:0d:89:2e:e1:
9d:64:b5:ae:40:05:2d:b7:c0:db:b0:f4:cb:29:dc:
5f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:67:B6:E4:96:C4:8E:F4:93:1C:97:0B:E0:18:13:C5:94:0E:96:A3
X509v3 Authority Key Identifier:
keyid:D2:89:7B:33:53:82:F8:22:4F:5D:89:0E:31:B3:86:32:1C:6B:B3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ol7M1OC-CJPXYkOMbOGMhxrs-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4de805-d5dc-46f7-b397-5b5332af1851/1/0ol7M1OC-CJPXYkOMbOGMhxrs-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:96:50:a8:9b:b1:aa:f6:31:fd:6f:bd:b4:b5:2f:bf:47:a3:
ab:34:4b:23:1e:7d:cc:db:70:71:99:ed:f9:e0:2b:8b:a4:9c:
42:2e:b5:3a:47:4a:55:04:10:c9:d7:ee:b7:96:b1:19:7d:c4:
ee:4a:7c:4b:fd:5f:2c:68:d8:e7:88:0a:eb:47:eb:be:a7:2f:
ae:d7:76:f6:fd:57:ac:f5:10:32:de:44:f4:78:b3:74:fb:31:
f4:bd:74:40:c5:78:6d:91:70:75:a2:47:07:9f:03:96:7c:37:
26:d5:b7:eb:af:d2:59:20:ae:d0:b4:bf:84:2c:a1:e8:32:f4:
35:2c:3b:f0:94:50:54:9d:f3:9c:bd:65:ea:73:48:19:8d:04:
c7:3a:e9:4a:3f:99:de:6e:ea:0f:fc:76:c1:9f:17:4f:f6:dc:
c2:f3:35:62:9e:7a:fb:f1:b9:94:dc:28:94:77:64:a7:3e:0c:
64:93:7a:90:89:70:e4:ac:71:17:e1:0e:16:d7:70:86:5b:32:
01:3e:3e:45:2f:0b:26:de:86:df:7a:2e:d1:d9:78:96:45:c6:
1c:c3:86:ae:4b:6d:bc:27:e2:ea:ab:ad:7d:e0:7a:99:f9:e8:
86:87:97:7d:cf:8a:6f:dd:b0:c0:1a:bb:87:a2:e6:f1:06:c9:
a3:a2:4c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:20:30 2025 by rpki-client