Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
File: oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft (raw, json)
Hash identifier: IIjVkwkOZgq4eFD3J/6uRevDDYze3oJXfaD/cOkVfAc=
Subject key identifier: 0C:C5:8F:7B:8D:93:A9:3B:E1:CF:6B:B3:CA:CE:FC:F1:46:8B:4A:F6
Authority key identifier: A1:18:AA:FD:BB:CA:8D:4E:00:63:C3:11:95:FA:6C:19:4C:39:43:CB
Certificate issuer: /CN=a118aafdbbca8d4e0063c31195fa6c194c3943cb
Certificate serial: 0194BD1759BC76047661264AF7576EB4F257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
Manifest number: 034A
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl (hash: N/AKCvffvZIsHaTyqbQ5V7wGqQl3qN8YxYGczwIEAwo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:59:bc:76:04:76:61:26:4a:f7:57:6e:b4:f2:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a118aafdbbca8d4e0063c31195fa6c194c3943cb
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=0cc58f7b8d93a93be1cf6bb3cacefcf1468b4af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e2:82:0c:ce:a9:f0:43:1a:c5:c5:41:e4:f4:
d6:d6:69:26:df:21:c3:cd:cc:63:b0:45:55:a6:d7:
1a:39:98:01:db:42:42:e0:56:ca:4a:53:f2:dc:e6:
9d:3f:30:fb:f9:f9:59:7b:fe:09:c2:33:5e:80:f1:
61:08:7d:e6:e1:38:1e:5e:fa:b4:7a:0a:ba:c6:d6:
6e:70:37:76:32:9f:ec:c5:c6:ec:dc:cc:89:b5:3b:
5a:ed:1d:8d:35:2a:f3:0f:71:1c:91:88:c0:34:12:
f5:b8:7c:52:98:5d:7d:e7:98:30:ba:64:d3:79:ab:
01:c9:6b:79:68:79:8e:da:4c:e0:37:b6:9e:67:95:
ad:e8:9c:e1:f7:ab:1d:35:65:29:f1:36:fd:32:52:
27:e4:fc:f2:cf:ef:bf:2d:88:98:23:93:12:13:3c:
d4:95:0e:9f:4a:33:d5:95:77:ae:e8:61:a4:38:21:
43:29:5d:18:14:70:ac:18:90:a5:a1:93:cb:b9:7e:
ee:33:9b:41:90:3b:56:a4:75:39:77:30:6d:6a:d7:
81:04:73:a8:8b:9f:6e:d7:0f:65:ca:44:8b:64:31:
85:e8:e2:99:03:76:b6:e9:a9:80:cd:7a:0b:d6:6e:
cd:e2:dc:bd:fa:6a:d3:0a:47:94:71:a9:e5:32:28:
48:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C5:8F:7B:8D:93:A9:3B:E1:CF:6B:B3:CA:CE:FC:F1:46:8B:4A:F6
X509v3 Authority Key Identifier:
keyid:A1:18:AA:FD:BB:CA:8D:4E:00:63:C3:11:95:FA:6C:19:4C:39:43:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/465c51-78e4-4178-8585-72f21e646e8e/1/oRiq_bvKjU4AY8MRlfpsGUw5Q8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ef:2b:9b:fa:ef:f2:54:b1:8e:c2:79:92:77:cb:39:13:1c:28:
bb:80:07:92:56:3b:1d:b3:1a:fc:8e:ef:fc:95:19:01:55:dd:
5f:5e:6a:f3:4d:1e:9d:58:6b:c0:a2:b1:7d:3d:3c:b7:71:3b:
90:5a:2f:11:71:21:fb:8c:e1:92:a6:03:8e:c3:c8:c5:bd:ce:
30:94:7a:4c:4f:78:f6:a1:97:9b:5f:83:00:1f:f9:ed:f6:9a:
e5:5b:ee:39:c3:b1:6b:8e:c0:d6:cc:4f:e6:fe:51:f1:6d:ac:
21:f1:16:7c:cc:f3:2f:61:2b:ef:e0:4c:f1:44:bd:69:6c:29:
c5:7e:03:08:5d:99:be:d0:a3:84:a5:ad:83:90:0e:53:4a:5a:
34:33:21:40:58:07:72:01:d0:19:51:05:1a:0f:63:5e:b5:ba:
0e:f2:a9:86:b2:7f:1a:00:73:ee:4f:c2:4c:ef:5a:9a:fb:bd:
1b:00:82:77:1a:ae:79:2e:d1:d1:0e:d6:53:9a:ab:19:cc:51:
e0:be:0f:18:6b:ff:19:ca:d1:9d:5c:75:4c:17:e2:cb:52:73:
e7:2c:83:21:04:4a:f2:3c:03:40:4f:a0:f3:9d:b1:3c:72:20:
21:a4:e3:1c:d2:75:25:e9:8b:87:52:1f:02:c8:6b:78:27:df:
ac:ec:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:07:58 2025 by rpki-client