Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
File: oDXttQZCEUQxra7YvFBeaFWcrUo.mft (raw, json)
Hash identifier: U9xPxIXPOl9JL3Nrl46LLq9qybk3a6qHl5pX+Wmt1sU=
Subject key identifier: EF:CE:69:02:5E:C6:67:97:37:8F:D7:DB:24:46:76:E2:40:80:0B:87
Authority key identifier: A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
Certificate issuer: /CN=a035edb50642114431adaed8bc505e68559cad4a
Certificate serial: 0194BC0525A502DA936B68438E7315406CD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
Manifest number: 0139
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: oDXttQZCEUQxra7YvFBeaFWcrUo.crl (hash: Gy3A1EIULHMOr8CXs2GuY6ZCljolOo3XTBV4kbL+YN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:25:a5:02:da:93:6b:68:43:8e:73:15:40:6c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a035edb50642114431adaed8bc505e68559cad4a
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=efce69025ec66797378fd7db244676e240800b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:0a:33:04:80:df:65:8b:df:3f:fd:92:50:
9d:4d:95:2d:85:c2:e4:69:d4:8c:01:53:92:cd:99:
66:0a:30:ee:0b:00:f4:d8:6e:46:6b:cc:1a:09:02:
f0:1e:20:71:c8:d0:27:e8:3f:d9:f1:7a:69:d8:6a:
50:ff:81:61:00:9f:ab:ac:9c:51:eb:a9:a2:43:e7:
96:d4:d1:94:14:c5:d2:ae:4b:c0:b5:bf:5b:82:0b:
b6:a6:62:df:41:cd:27:8b:4f:75:35:95:dd:e1:a2:
b1:75:43:9b:2b:50:bb:a1:79:ea:e0:d4:cf:e0:8f:
b6:8f:62:bc:e1:30:89:d5:25:f0:6b:27:d9:b0:a1:
a0:61:44:e6:95:a3:6e:7c:63:ca:d6:1c:f0:51:66:
8c:ad:e8:92:7f:a4:5f:d0:fd:4b:40:e8:6b:e2:99:
e8:4d:42:fb:39:bb:7b:eb:52:48:23:a2:4b:30:48:
ba:d3:8a:fb:22:9e:86:53:e1:1b:8b:75:c4:47:48:
4f:18:83:dd:8e:8d:5b:41:90:3a:d4:00:17:0c:45:
de:46:34:e3:75:b9:1d:bc:f4:a2:31:08:5e:76:c0:
22:9f:cf:b5:29:6f:0d:c9:dd:5c:26:0e:1f:a8:c1:
5c:0b:a9:7f:bf:20:d7:67:29:78:4c:71:0d:4f:36:
02:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:CE:69:02:5E:C6:67:97:37:8F:D7:DB:24:46:76:E2:40:80:0B:87
X509v3 Authority Key Identifier:
keyid:A0:35:ED:B5:06:42:11:44:31:AD:AE:D8:BC:50:5E:68:55:9C:AD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDXttQZCEUQxra7YvFBeaFWcrUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/213983-fcd5-42d5-8f15-d498aab4eb2a/1/oDXttQZCEUQxra7YvFBeaFWcrUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ce:71:08:bb:32:97:71:56:ca:c7:2f:91:be:56:e5:36:85:
c8:f2:d3:9a:aa:f6:0f:40:ee:59:95:9c:8b:0b:50:70:52:ce:
47:f3:82:aa:0b:b7:c1:f3:26:09:d7:be:cc:15:2a:d3:b9:4b:
08:a2:52:2e:05:c7:57:27:19:c1:fe:29:e8:22:a4:96:e7:ee:
ae:ca:86:e9:19:46:31:15:53:cc:33:9f:c7:b6:dd:d7:16:73:
7f:c9:5e:65:95:cf:3f:5a:1a:e8:68:e8:bb:a9:0c:77:fb:ad:
94:36:db:1e:b0:95:f1:90:3e:85:69:8c:d3:13:15:d1:ce:60:
d9:96:fe:c2:d7:f2:2e:27:f4:c2:4b:68:ad:92:d4:4c:0b:1f:
ce:d0:2c:2b:e1:0f:f1:e3:54:08:ff:fd:a0:eb:23:27:d7:27:
27:14:c2:58:ec:e4:78:63:87:89:e2:ca:42:4b:de:87:a9:e8:
32:40:4e:b2:2b:f4:fe:c5:30:de:6b:be:4a:36:64:84:d1:e2:
56:ac:e6:42:28:a6:30:e8:14:7f:a4:84:f5:f6:ce:7d:e7:8c:
ef:3d:e1:02:f9:dc:88:e2:e5:c6:7e:86:50:8f:e9:72:30:d4:
bb:d7:23:9d:24:f1:43:ef:ee:9b:50:ea:de:93:1b:df:c2:7b:
e8:0c:20:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 12:05:08 2025 by rpki-client