Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
File: OPJMluat5giBDDDZoTB8xpr5_00.mft (raw, json)
Hash identifier: 0rgzeKr4YXZLaFg6nx2ziYfnExzShzr9QEEExlnD2vg=
Subject key identifier: 5D:CA:E1:E2:EE:81:29:F7:A2:1D:85:16:8B:D7:6A:2E:EF:2E:71:AA
Authority key identifier: 38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
Certificate issuer: /CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Certificate serial: 0194BD17C34CDB2B11D0D292C50B219ED7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
Manifest number: 0AE0
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: OPJMluat5giBDDDZoTB8xpr5_00.crl (hash: +7yS4VWxQeimaUI/XuQG3qH5GNsDXbcwwsi8N4K86tg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c3:4c:db:2b:11:d0:d2:92:c5:0b:21:9e:d7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38f24c96e6ade608810c30d9a1307cc69af9ff4d
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=5dcae1e2ee8129f7a21d85168bd76a2eef2e71aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:d8:86:77:5c:ed:7c:0c:a4:e3:f3:93:98:
d0:a4:8d:55:55:a3:bd:76:12:c5:91:b7:48:6b:37:
38:b6:b2:12:49:4a:d2:61:7a:7d:2f:16:6d:f3:a8:
64:22:aa:6e:b2:67:37:a4:59:f6:d0:bf:cc:9e:be:
67:c1:cf:1e:ff:04:3f:6e:a8:3b:00:f7:55:19:e4:
80:61:c0:15:c3:d4:f5:96:cc:f1:71:16:9f:5d:df:
e8:4f:b1:45:18:ec:14:f0:15:bd:3f:b0:56:13:b4:
63:7b:60:27:11:5f:a4:0c:7a:e5:0b:e0:2b:53:11:
dd:b8:93:77:06:a2:1f:d9:3a:7a:11:5e:17:ef:48:
ab:27:0d:57:a7:c1:49:5e:42:46:a4:41:8f:ec:72:
c2:07:1f:d5:0e:ac:83:af:91:ab:51:b5:75:3c:d3:
11:c4:af:15:3b:f2:f7:2f:15:ba:00:a5:ac:fa:fd:
68:cb:0d:99:53:ce:69:4d:14:7e:e3:a1:d2:25:98:
49:04:43:eb:3e:3a:a4:60:fe:1a:15:2d:ce:b2:cc:
67:86:24:51:07:d2:af:0d:68:f5:a7:34:92:b8:50:
d7:a0:66:f3:96:fb:1d:fc:5f:4c:fd:7d:31:7f:7e:
ac:8b:55:1a:ca:ec:b7:3b:dd:56:6e:d7:68:46:b3:
cd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CA:E1:E2:EE:81:29:F7:A2:1D:85:16:8B:D7:6A:2E:EF:2E:71:AA
X509v3 Authority Key Identifier:
keyid:38:F2:4C:96:E6:AD:E6:08:81:0C:30:D9:A1:30:7C:C6:9A:F9:FF:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OPJMluat5giBDDDZoTB8xpr5_00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8af1cd-5021-463b-99a3-04e4a84a74ac/1/OPJMluat5giBDDDZoTB8xpr5_00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:31:de:1a:95:65:59:09:14:f8:f0:bd:eb:2d:59:a4:99:c5:
a6:20:af:4e:a4:cc:7e:ed:ba:cf:2b:a9:94:d5:df:40:21:7c:
5d:d8:e6:70:48:8a:6e:97:b3:2e:1f:b7:56:de:3e:e0:36:d3:
ec:eb:ef:55:c2:dd:19:06:52:e9:c6:cd:07:71:d7:7b:83:b0:
3d:80:13:de:52:90:02:71:c6:29:1c:5a:cb:cc:8a:3f:eb:8d:
3d:46:0a:e3:1d:30:38:ba:39:29:f0:05:0a:5c:a5:7d:be:0a:
fa:a8:0d:db:c0:bc:c1:f4:12:54:3e:7b:0f:db:a4:4e:83:38:
3f:83:dc:c1:ab:90:11:a7:12:02:0a:ad:5a:0d:2e:fa:b1:91:
63:62:f5:1e:5a:fe:b0:24:e7:f7:d2:b8:5e:68:32:d6:fc:d6:
9d:77:e9:68:81:70:10:87:85:a7:b1:e6:28:55:a1:c2:29:0f:
a6:9d:74:02:ed:bb:0a:21:af:ac:67:68:3c:30:1f:9b:22:e1:
b5:ac:11:40:72:1a:f7:3f:7d:e2:6e:ed:09:18:df:c3:34:65:
d8:84:22:f1:bf:3a:54:91:39:4a:14:bd:47:02:cc:70:77:d4:
c0:12:3e:b8:fa:3a:09:51:a0:80:61:d9:4e:aa:dc:d8:29:33:
73:7e:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:22:40 2025 by rpki-client