Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1f38-07c3-4154-af89-75d4ec96871a/1/Op3YmTGwIUoRZnsb1qqDG65ba4A.mft
File: Op3YmTGwIUoRZnsb1qqDG65ba4A.mft (raw, json)
Hash identifier: vh/CNIj2kH3QrzxQNAMr9yX3VXn9OODbbScUwnqg5kc=
Subject key identifier: 60:E4:D2:AC:F8:2D:2F:5D:2C:5F:E9:D4:D3:EF:BF:7C:C8:A0:69:F3
Authority key identifier: 3A:9D:D8:99:31:B0:21:4A:11:66:7B:1B:D6:AA:83:1B:AE:5B:6B:80
Certificate issuer: /CN=3a9dd89931b0214a11667b1bd6aa831bae5b6b80
Certificate serial: 01938A087F98DE6936481D98BC52721D6072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Op3YmTGwIUoRZnsb1qqDG65ba4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1f38-07c3-4154-af89-75d4ec96871a/1/Op3YmTGwIUoRZnsb1qqDG65ba4A.mft
Manifest number: 112E
Signing time: Tue 03 Dec 2024 01:00:32 +0000
Manifest this update: Tue 03 Dec 2024 01:00:32 +0000
Manifest next update: Wed 04 Dec 2024 01:00:32 +0000
Files and hashes: 1: Op3YmTGwIUoRZnsb1qqDG65ba4A.crl (hash: RmCqNdrx2M1CHRwwYRJiaC76yesAS5vM4YHwzj5Kqsw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8a:08:7f:98:de:69:36:48:1d:98:bc:52:72:1d:60:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a9dd89931b0214a11667b1bd6aa831bae5b6b80
Validity
Not Before: Dec 3 01:00:32 2024 GMT
Not After : Dec 4 01:00:32 2024 GMT
Subject: CN=60e4d2acf82d2f5d2c5fe9d4d3efbf7cc8a069f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:4c:3d:1b:d5:87:c7:11:8b:42:ed:c0:0b:
21:0b:95:93:b3:6a:41:66:bf:11:96:5e:8f:8d:1f:
b9:8f:80:37:c6:ad:4f:66:03:92:15:a1:d2:83:56:
45:6f:1f:d0:41:2d:3a:90:f6:48:5e:9c:87:6a:04:
e6:f9:a1:63:15:d0:bf:19:2e:6c:17:d0:2f:15:c1:
df:32:5b:14:ac:e5:02:6d:a3:e2:da:7f:9e:b1:a2:
ac:7b:b3:fc:1b:26:00:46:c7:10:ee:b6:71:93:ae:
da:b7:19:23:fb:9f:f3:ad:41:0a:f7:52:15:9d:84:
a0:52:94:c2:c9:95:b6:8d:15:7f:bd:5c:2c:3a:99:
29:d2:f3:5f:3e:5f:80:61:ac:81:77:6c:67:79:ee:
18:4c:34:a7:4f:96:63:85:78:db:d0:ab:33:ca:f3:
12:f7:b2:74:0b:88:67:ce:3f:b2:96:cb:54:25:af:
50:bb:91:9f:e3:bd:4d:a9:f8:22:77:66:39:3c:1f:
55:c0:d5:94:e0:d6:62:7f:7b:1d:0c:86:ea:59:2c:
3d:8b:cf:97:7f:10:9b:1d:2b:d3:b0:f2:15:6c:07:
dd:bc:0a:bd:3d:d0:4a:a0:48:d5:a2:4f:b5:97:2e:
f5:36:ec:ad:9e:7e:65:d4:69:14:46:96:e7:c8:80:
2c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E4:D2:AC:F8:2D:2F:5D:2C:5F:E9:D4:D3:EF:BF:7C:C8:A0:69:F3
X509v3 Authority Key Identifier:
keyid:3A:9D:D8:99:31:B0:21:4A:11:66:7B:1B:D6:AA:83:1B:AE:5B:6B:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Op3YmTGwIUoRZnsb1qqDG65ba4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1f38-07c3-4154-af89-75d4ec96871a/1/Op3YmTGwIUoRZnsb1qqDG65ba4A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1f38-07c3-4154-af89-75d4ec96871a/1/Op3YmTGwIUoRZnsb1qqDG65ba4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:af:12:16:d7:e4:a8:66:16:29:4f:3a:5d:98:f6:d0:30:10:
55:eb:2d:95:61:94:90:ea:e1:33:12:63:dd:0a:73:60:7f:eb:
52:b1:7f:d9:fd:d5:2a:00:14:79:85:cf:a6:5f:cd:2b:f3:47:
5a:82:c9:9a:90:5f:58:28:de:03:6f:4f:cf:2c:1b:04:44:59:
49:96:39:da:b7:9f:0e:95:1d:92:f6:4d:a1:f4:21:dc:a3:5a:
7a:63:7c:15:a0:b2:8c:85:4c:c0:fe:7b:71:30:f9:6d:f4:50:
e0:f7:0e:cb:03:8e:c5:f6:ea:45:57:ae:59:92:3f:af:08:62:
ac:28:04:8b:a4:d4:d4:3f:ed:05:7f:a7:31:b7:82:7a:0d:2e:
7b:27:6d:59:69:2d:ae:f3:1f:e2:09:fe:ad:1b:7a:1f:f2:d6:
80:3b:f7:37:38:9f:1b:05:e3:c8:1e:93:17:d2:07:97:62:7b:
19:cb:f8:b1:34:f9:39:c5:95:b7:fc:1f:16:c7:03:75:47:21:
4c:0f:ff:e7:a5:d4:3e:33:c8:62:0b:74:eb:5e:a1:84:33:3a:
ee:3c:86:bc:86:6d:a6:d8:d9:a9:10:b1:91:a3:97:7c:cb:5b:
17:b5:83:ee:c1:80:62:1a:f8:ad:2f:09:b7:82:b5:1d:8e:7a:
f7:8f:f4:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:24:32 2025 by rpki-client