Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
File: owVfB71HqGR4w79HOSVzrNU9Y24.mft (raw, json)
Hash identifier: XBX3Un601h7k4sB4StYuR6v28qmhHiGNAUvuN0fFDYA=
Subject key identifier: B0:9E:7E:66:58:00:87:72:2E:99:4F:6F:B2:32:1D:8B:E1:5D:A9:C5
Authority key identifier: A3:05:5F:07:BD:47:A8:64:78:C3:BF:47:39:25:73:AC:D5:3D:63:6E
Certificate issuer: /CN=a3055f07bd47a86478c3bf47392573acd53d636e
Certificate serial: 0194BC3C58F8F36A02FCA3D4B2919370882F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: owVfB71HqGR4w79HOSVzrNU9Y24.crl (hash: 4VZi3yH2ycIGZn42yCd0BipQdrQlk6dVvT7Nzw1fDG4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:58:f8:f3:6a:02:fc:a3:d4:b2:91:93:70:88:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3055f07bd47a86478c3bf47392573acd53d636e
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=b09e7e66580087722e994f6fb2321d8be15da9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:dd:08:63:ae:d8:04:49:61:61:4f:9f:f8:91:
b7:db:ff:16:9a:b2:a1:b7:cd:c9:e1:70:72:59:55:
7a:73:5e:53:4d:6f:9f:38:5c:b7:89:38:39:14:8b:
fa:1c:eb:35:b8:4b:58:16:96:ae:ab:cc:5c:4e:6a:
a4:62:70:d9:09:71:f4:87:4a:e1:4c:4d:94:ff:32:
81:ee:45:7c:98:3d:84:cb:61:c5:d3:dc:74:e0:a4:
d9:bd:ab:fd:dd:02:4d:ff:6c:07:fe:1b:3a:c1:0e:
aa:63:fd:db:94:c1:16:2e:ec:db:b1:6d:5c:c1:03:
53:80:03:14:30:24:aa:5a:a0:97:f1:d0:18:58:6e:
80:fc:f4:bb:a5:3d:52:96:55:98:b3:9a:bc:95:93:
50:43:79:11:e4:2b:b2:00:50:61:c2:c8:62:aa:0f:
7f:65:39:4d:95:57:a0:65:61:21:44:41:dc:c6:14:
fd:41:e4:a5:9d:56:18:d0:bb:ae:35:c7:38:cc:ff:
b0:51:bc:ea:e3:d7:e9:44:68:f8:3b:eb:a4:1a:a7:
43:8f:31:e4:86:c2:80:67:46:f9:bf:8b:43:7a:08:
9c:67:e3:fa:37:86:34:d2:91:e4:de:3d:46:e8:5d:
c5:b7:78:22:e6:38:c7:38:fa:78:12:6c:af:33:bd:
32:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9E:7E:66:58:00:87:72:2E:99:4F:6F:B2:32:1D:8B:E1:5D:A9:C5
X509v3 Authority Key Identifier:
keyid:A3:05:5F:07:BD:47:A8:64:78:C3:BF:47:39:25:73:AC:D5:3D:63:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owVfB71HqGR4w79HOSVzrNU9Y24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9d0bf-6d51-408f-b7ae-a3aad1178cd4/1/owVfB71HqGR4w79HOSVzrNU9Y24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f0:33:86:e3:75:94:bd:c8:6d:92:b0:c2:78:db:81:52:48:
55:9a:0e:8d:c7:4a:f1:27:dd:e6:65:2a:52:47:a2:70:2d:e3:
0e:18:97:fa:59:36:61:6c:23:03:a4:e3:27:26:34:3f:b7:2b:
39:9c:22:5d:a5:c3:70:e3:75:85:f7:55:97:65:fa:5b:93:a7:
6f:92:5e:ee:e8:22:6d:23:3f:84:76:aa:41:b7:6a:72:81:d2:
e4:06:22:d4:81:07:b0:2b:5a:86:d5:37:d7:27:48:3e:a8:78:
5b:b1:46:41:45:ea:c0:e2:21:3f:c0:98:ac:a9:cf:17:9c:42:
9f:da:6f:bc:20:70:3c:af:6f:67:1b:ff:26:c7:0c:99:df:b9:
1d:78:31:44:eb:c0:37:14:79:0c:5f:1d:ca:72:d3:06:4c:de:
f7:af:ec:52:e8:fd:cf:ae:d7:aa:e7:1c:36:d2:b2:dd:70:6d:
46:cf:8a:0e:4b:d3:0b:29:07:6a:94:d8:53:4d:38:42:c5:8a:
a2:e1:29:30:92:56:a1:89:af:85:a8:4f:ce:f4:18:4c:72:f2:
98:8a:13:03:36:57:97:60:3f:85:27:0d:d4:25:97:d3:c3:ad:
32:b1:4b:f8:bc:d9:e6:4a:54:66:d2:5c:c5:cf:4f:dd:29:01:
c2:ac:da:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:46:49 2025 by rpki-client