Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
File: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft (raw, json)
Hash identifier: K0qrveJdN3obSglLwM3rhuEnufD/CkxIJA9hOlj09xs=
Subject key identifier: 18:D3:F7:AF:4D:70:AC:D2:9D:B9:D9:01:00:55:3F:7A:CE:70:83:21
Authority key identifier: 39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
Certificate issuer: /CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Certificate serial: 0194BBCDE2B310D3183729810BA07082EA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
Manifest number: 13F3
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl (hash: f5VMy62cFIm79Tglta2Wlk+0JDhk09e2CMLRbZ/SwQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e2:b3:10:d3:18:37:29:81:0b:a0:70:82:ea:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3968ee0b1f40cbb13a88fde4c0b1168304df2d6b
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=18d3f7af4d70acd29db9d90100553f7ace708321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:08:62:50:57:7a:10:21:3f:53:b3:99:07:
04:18:cd:b0:e7:e5:eb:7e:8e:38:e7:b3:19:c1:fc:
8e:90:e9:8f:a4:0f:3f:f2:80:ec:c8:a1:ce:03:2d:
89:d6:ab:75:f8:7f:06:bf:ef:6a:c2:51:a9:7b:d5:
cc:ea:e7:1b:b5:d4:15:6c:30:14:d1:b6:af:4f:66:
bb:12:68:10:ea:28:22:19:9d:ec:b9:29:b2:7f:67:
10:f2:0f:c5:6d:b9:29:f2:57:f4:1e:31:c8:80:62:
86:83:54:39:f6:c7:37:89:c9:f0:b4:8b:37:25:0f:
47:ff:6b:7e:5e:7d:8b:10:00:f0:ad:cc:63:3c:36:
06:ae:82:0f:e1:64:1a:90:f2:d1:9d:1d:93:a2:e3:
d8:df:e4:72:d5:c7:c1:13:b0:be:59:88:d5:32:93:
c8:24:70:5d:f5:29:21:a9:50:27:ec:3a:03:af:2f:
29:fc:b0:64:8f:3d:23:c0:ab:c2:a6:ac:4c:65:53:
12:1c:81:40:df:22:d3:00:6a:e1:68:c7:9b:fa:38:
c4:60:f4:d4:55:47:fa:4c:fc:22:dd:d1:41:73:cc:
e9:72:dd:a8:53:bd:00:fe:3c:1b:f9:d2:ad:2a:0d:
b0:d1:4c:58:d8:9a:41:6e:21:bb:76:93:8c:33:06:
51:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:D3:F7:AF:4D:70:AC:D2:9D:B9:D9:01:00:55:3F:7A:CE:70:83:21
X509v3 Authority Key Identifier:
keyid:39:68:EE:0B:1F:40:CB:B1:3A:88:FD:E4:C0:B1:16:83:04:DF:2D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9f69d4-65ef-4d5e-9c2f-7998f4bdf21c/1/OWjuCx9Ay7E6iP3kwLEWgwTfLWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:de:53:53:74:74:21:fc:cb:5e:81:c6:16:cf:7a:88:09:24:
31:4e:9d:76:f3:f7:33:8c:0d:d7:8a:4d:b5:91:0a:ec:f3:a8:
6c:3c:a7:b9:63:0c:3c:29:ac:1b:e2:21:63:70:a5:a0:65:62:
27:af:ab:48:d4:a5:54:de:89:b2:e0:aa:e4:54:c9:49:97:a6:
80:ac:e7:ad:6b:a5:91:b1:0c:38:59:cd:1f:be:21:10:4d:15:
1d:ab:9d:e4:3c:5d:80:c6:d4:84:83:a1:44:31:31:fc:38:1d:
34:d5:c6:10:92:2c:a9:15:c6:a2:df:68:e3:db:62:9b:a6:b7:
99:97:54:1a:43:90:d8:67:82:ab:67:04:5f:4f:30:ae:89:6c:
ff:ae:7d:bf:0e:a5:68:3f:ed:82:9f:e9:b9:de:9e:4f:5a:7c:
53:02:b2:0c:ee:89:29:64:fb:26:d1:74:f7:eb:ec:d0:aa:0f:
66:63:2e:60:13:97:ba:42:74:87:5d:ea:de:d7:e8:e9:74:14:
4f:33:3c:22:2f:9e:a6:dc:16:bf:ae:50:b2:0d:0a:f1:f9:1c:
58:32:cc:82:b2:eb:4c:c5:3c:88:1c:6b:57:1b:48:41:5d:24:
13:76:62:7d:68:a3:59:25:76:2e:4f:9a:ec:0f:d3:51:9b:ef:
87:56:ac:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:51 2025 by rpki-client