Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/532747-30eb-44c2-84e1-20ddee5fa3b9/1/O2zWG8gjrh8ol5A817eJWEe3Jsg.mft
File: O2zWG8gjrh8ol5A817eJWEe3Jsg.mft (raw, json)
Hash identifier: B9z4t6uzUJAfIKG8Rn/NA1CxvINXdQzvh2jMwUk+kuY=
Subject key identifier: 77:D7:81:E8:36:42:10:D6:4C:0B:38:64:A1:07:F2:B7:91:F2:A1:4E
Authority key identifier: 3B:6C:D6:1B:C8:23:AE:1F:28:97:90:3C:D7:B7:89:58:47:B7:26:C8
Certificate issuer: /CN=3b6cd61bc823ae1f2897903cd7b7895847b726c8
Certificate serial: 0194D4B22BB0722996FC9DB789FDFF76F98B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2zWG8gjrh8ol5A817eJWEe3Jsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/532747-30eb-44c2-84e1-20ddee5fa3b9/1/O2zWG8gjrh8ol5A817eJWEe3Jsg.mft
Manifest number: 021E
Signing time: Wed 05 Feb 2025 06:00:33 +0000
Manifest this update: Wed 05 Feb 2025 06:00:33 +0000
Manifest next update: Thu 06 Feb 2025 06:00:33 +0000
Files and hashes: 1: O2zWG8gjrh8ol5A817eJWEe3Jsg.crl (hash: WOOynr1wC2/rd6IHKDXqAFsAtezP+pyA2DJJV6WLyqk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d4:b2:2b:b0:72:29:96:fc:9d:b7:89:fd:ff:76:f9:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b6cd61bc823ae1f2897903cd7b7895847b726c8
Validity
Not Before: Feb 5 06:00:33 2025 GMT
Not After : Feb 6 06:00:33 2025 GMT
Subject: CN=77d781e8364210d64c0b3864a107f2b791f2a14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:87:a5:bb:72:0e:f0:77:2a:47:ab:8c:3b:
59:c3:a1:60:d8:da:52:c2:12:dd:bc:52:17:14:e6:
db:83:00:77:7a:fb:b8:07:39:8e:b5:df:71:26:02:
44:55:30:f3:61:3e:e3:2c:ea:e9:30:36:10:39:c4:
75:ee:c5:3a:4b:94:57:e6:26:2c:2b:b9:79:d7:2c:
00:16:d9:e4:20:77:1c:ff:e7:fb:b8:b8:44:e6:25:
02:7d:4c:9a:c1:c0:9e:e2:ac:32:2a:4b:e8:63:5a:
f8:0c:6f:64:70:8b:f9:81:0d:6f:9b:2f:1c:2a:a2:
5c:cd:94:4c:5f:f8:0f:8c:0a:1f:e6:b9:79:a8:7a:
e3:06:1f:7b:24:e2:0b:96:ce:00:f5:35:8d:ea:fd:
70:87:ac:c4:46:04:79:37:1d:55:4e:ee:54:44:08:
ed:6b:52:2a:03:a6:5d:2b:10:13:0d:91:0d:d9:8c:
e3:45:66:a1:9e:3b:e1:d1:e0:e9:c3:64:6b:e0:0a:
a9:01:5b:3c:30:b4:8f:8e:83:50:a3:22:11:82:1c:
63:83:bb:0e:34:a7:08:6c:8b:22:6e:c5:2e:a7:03:
12:0d:db:9a:39:c7:2b:d9:5f:69:f4:f4:a8:db:4f:
3b:0d:0d:d2:0f:70:0a:49:b2:fd:f8:21:f7:e0:e3:
66:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D7:81:E8:36:42:10:D6:4C:0B:38:64:A1:07:F2:B7:91:F2:A1:4E
X509v3 Authority Key Identifier:
keyid:3B:6C:D6:1B:C8:23:AE:1F:28:97:90:3C:D7:B7:89:58:47:B7:26:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2zWG8gjrh8ol5A817eJWEe3Jsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/532747-30eb-44c2-84e1-20ddee5fa3b9/1/O2zWG8gjrh8ol5A817eJWEe3Jsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/532747-30eb-44c2-84e1-20ddee5fa3b9/1/O2zWG8gjrh8ol5A817eJWEe3Jsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4c:5d:39:39:10:d8:e6:2a:a9:5b:73:8d:a1:6f:92:8d:f2:
5a:1e:a7:ac:a3:99:16:8d:86:4a:0c:b5:df:ca:81:04:e8:5e:
ce:fb:46:7d:35:5c:13:07:32:1b:d5:aa:13:6d:9e:86:92:67:
58:f3:b2:58:7d:e6:f1:81:d8:17:59:c4:8b:fa:f0:dc:2c:dd:
86:ee:4b:8d:ef:2b:ba:36:55:0c:13:7b:d6:8b:84:be:e6:74:
bb:4d:45:b8:d5:0e:29:76:08:95:d1:11:35:0a:70:d9:72:f4:
26:ad:c9:53:a1:bc:35:d8:3f:f6:b0:ce:9d:8f:34:17:df:8f:
cc:89:98:99:d3:6d:f1:02:0d:16:21:e0:e3:5d:aa:09:b9:a0:
67:ff:34:f3:76:f8:76:b6:6d:af:f0:1f:b5:1e:2d:21:74:ba:
07:0a:81:90:20:bf:ff:9c:2a:41:af:31:2a:95:27:47:76:7e:
e8:9f:8f:3a:6f:c7:6e:5c:1e:88:70:13:f8:28:38:c5:94:0c:
2e:63:4a:38:31:9b:bb:09:e0:20:44:c3:4a:4f:09:80:97:0c:
e7:bc:55:46:c7:ec:78:53:17:b9:c1:29:3b:81:89:58:db:1a:
8f:db:5a:75:f8:a2:fd:f7:93:da:2b:b4:81:ff:4b:bc:c6:79:
36:d7:9b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:18:54 2025 by rpki-client