Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.mft
File: ooinzLTItWvoPCxXZZ3A2W6VZig.mft (raw, json)
Hash identifier: XIscKn9CcyVLBar9xgDdkDlqsTkSd17qote3nU/bIdU=
Subject key identifier: D1:52:D8:86:60:2F:4A:17:70:EC:EE:7F:E1:2A:5B:C5:86:18:DC:47
Authority key identifier: A2:88:A7:CC:B4:C8:B5:6B:E8:3C:2C:57:65:9D:C0:D9:6E:95:66:28
Certificate issuer: /CN=a288a7ccb4c8b56be83c2c57659dc0d96e956628
Certificate serial: 0194BBCE99392DCFC105F6D508668F194848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ooinzLTItWvoPCxXZZ3A2W6VZig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.mft
Manifest number: 06F1
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: ooinzLTItWvoPCxXZZ3A2W6VZig.crl (hash: 4Cqp1Kj12YGGhu1sIqvIR7U0YDsJse+yRUAw2omn8bU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:99:39:2d:cf:c1:05:f6:d5:08:66:8f:19:48:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a288a7ccb4c8b56be83c2c57659dc0d96e956628
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=d152d886602f4a1770ecee7fe12a5bc58618dc47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:05:88:3e:4e:be:98:51:38:b1:7c:15:b9:
d9:fc:48:17:71:3d:f4:37:6a:e3:c3:cd:98:60:45:
9d:a9:d1:67:c6:78:44:77:be:6e:ff:34:2b:a9:5f:
96:bc:18:7e:ef:60:40:a9:4d:38:c6:64:d9:49:39:
2b:60:ce:5e:d4:a6:75:5c:fd:80:b7:ac:06:20:db:
14:c1:ba:22:43:31:10:ad:08:7c:c9:ca:49:77:9a:
ad:60:6c:22:c9:19:5d:cc:e0:8b:b3:7f:5d:95:cf:
93:95:8e:9c:4c:04:d9:c6:c6:67:0f:b9:7e:4e:68:
1d:c6:b5:52:43:57:53:4e:85:52:9c:68:b9:3e:cc:
95:79:b9:bd:94:36:ca:ff:ed:bb:9a:43:00:9d:72:
3c:ee:27:5a:f2:66:14:e6:52:77:dc:82:4a:1d:7d:
ef:ad:56:b8:3e:2b:6a:bf:88:2b:9c:c2:b2:6d:08:
a8:52:04:67:7f:0b:a0:f8:0f:37:f4:d3:c9:74:77:
bc:e4:2d:bd:5f:78:0b:de:23:01:92:55:dd:cd:9a:
d9:f0:8a:a8:d8:1f:c4:53:fa:78:98:ce:8b:d5:ef:
bc:c2:7e:27:f0:4f:f4:29:9e:35:f7:1f:60:76:82:
20:d9:21:af:45:67:aa:9f:d0:a0:e9:a0:f2:ef:2b:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:52:D8:86:60:2F:4A:17:70:EC:EE:7F:E1:2A:5B:C5:86:18:DC:47
X509v3 Authority Key Identifier:
keyid:A2:88:A7:CC:B4:C8:B5:6B:E8:3C:2C:57:65:9D:C0:D9:6E:95:66:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ooinzLTItWvoPCxXZZ3A2W6VZig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/8f6128-139d-4416-b506-26677f8a5055/1/ooinzLTItWvoPCxXZZ3A2W6VZig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:27:19:52:ec:bd:5d:ce:5f:39:96:cd:19:92:1c:40:8b:00:
f3:56:92:1c:18:97:48:5e:b7:a4:f3:d4:43:76:2b:b4:50:ee:
78:40:b8:29:09:de:5b:f9:77:65:55:46:8c:25:49:6d:3f:9b:
c1:9e:12:eb:a9:68:9c:40:0b:7b:00:b0:6f:98:3a:86:ab:92:
b6:10:8a:c7:e5:b3:48:46:62:db:46:ed:ea:b5:a4:c0:af:9c:
dc:7c:f3:8a:0f:4d:de:b8:17:ff:1f:90:5b:4c:1e:72:42:d5:
57:62:d4:0f:aa:54:a9:7b:ad:b6:dd:cb:84:ca:fd:02:11:f2:
04:15:bb:28:3c:7c:6a:6c:d6:2c:af:38:13:37:d6:03:b3:bd:
f0:cb:61:c0:b8:4f:2b:d7:9e:87:1d:98:32:1e:e0:75:05:94:
6a:ef:4a:0c:e7:df:71:7a:3c:2e:08:f6:16:e7:32:4f:41:b0:
80:1a:4d:4a:0c:3a:5e:89:f2:be:af:73:ee:78:b9:c0:36:60:
fe:c5:ab:0f:5c:93:96:ce:bf:5d:c7:00:f8:3a:2b:fe:2a:de:
3e:08:cb:cf:ef:60:5d:32:ec:f3:de:40:de:17:db:29:32:f9:
6d:a8:7c:db:d6:a2:01:75:96:b9:e1:52:92:62:7c:74:21:1e:
6b:a4:ca:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:01:19 2025 by rpki-client