Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ce7b21-064f-4730-a60d-e8f43970abb2/1/ox7Xn9wxa5PUv1m_JKlWJOphrT4.mft
File: ox7Xn9wxa5PUv1m_JKlWJOphrT4.mft (raw, json)
Hash identifier: N4lf3EZWy/eG1HkgHgP8SdVPdEaijpBMKX2c9Rx7VH0=
Subject key identifier: F3:D2:05:0E:2D:03:E8:D0:BF:E7:2A:16:FA:97:88:0E:E6:1D:D2:FD
Authority key identifier: A3:1E:D7:9F:DC:31:6B:93:D4:BF:59:BF:24:A9:56:24:EA:61:AD:3E
Certificate issuer: /CN=a31ed79fdc316b93d4bf59bf24a95624ea61ad3e
Certificate serial: 01909C846D681A9417F858A79F36116BD9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ox7Xn9wxa5PUv1m_JKlWJOphrT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ce7b21-064f-4730-a60d-e8f43970abb2/1/ox7Xn9wxa5PUv1m_JKlWJOphrT4.mft
Manifest number: 11
Signing time: Wed 10 Jul 2024 12:00:42 +0000
Manifest this update: Wed 10 Jul 2024 12:00:42 +0000
Manifest next update: Thu 11 Jul 2024 12:00:42 +0000
Files and hashes: 1: ox7Xn9wxa5PUv1m_JKlWJOphrT4.crl (hash: 0LtmQVGyT1YJhD5q2KxPdAoa5Ywdqwy6c5OrEo5pTQE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9c:84:6d:68:1a:94:17:f8:58:a7:9f:36:11:6b:d9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a31ed79fdc316b93d4bf59bf24a95624ea61ad3e
Validity
Not Before: Jul 10 12:00:42 2024 GMT
Not After : Jul 11 12:00:42 2024 GMT
Subject: CN=f3d2050e2d03e8d0bfe72a16fa97880ee61dd2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:68:dc:40:58:1e:84:db:c9:42:4f:f2:71:35:
80:c9:a8:c1:17:0a:39:bb:c5:31:b2:e0:11:92:1d:
99:29:2b:a9:75:54:9f:8c:52:32:23:83:0d:e4:8a:
08:63:e2:f9:be:6d:0d:3f:6e:9c:b0:37:1a:23:40:
7e:8f:5b:53:23:41:eb:47:82:5c:d3:1f:fb:91:0f:
20:b5:2f:e6:51:34:b2:5b:58:23:ed:4c:82:39:60:
1a:4b:30:04:6f:98:6d:21:2d:5c:77:fd:e2:bd:a6:
33:d2:55:3b:80:00:4f:6f:91:1d:25:35:53:01:ec:
e6:d5:d1:7f:ba:04:f4:56:b5:f5:ce:87:50:7d:8e:
d3:6f:d4:5d:af:8c:40:f8:75:a0:0e:32:ca:38:5c:
08:48:9f:4f:fa:4b:27:ab:ce:1c:1d:67:08:ae:24:
3f:26:ed:f0:11:48:1b:d2:da:4c:b2:ab:6b:a2:fa:
ec:09:ec:c8:36:79:f7:49:de:38:da:7c:6e:46:c5:
5d:1a:73:96:c3:5a:24:0c:06:77:07:f2:1c:5a:35:
94:49:0d:b8:31:30:2c:e4:0c:ee:ec:21:ce:02:fa:
a8:02:a7:34:15:c7:ad:d1:e5:62:2c:1c:85:01:e0:
99:36:4f:3d:28:94:c9:92:a7:84:17:a2:94:23:38:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D2:05:0E:2D:03:E8:D0:BF:E7:2A:16:FA:97:88:0E:E6:1D:D2:FD
X509v3 Authority Key Identifier:
keyid:A3:1E:D7:9F:DC:31:6B:93:D4:BF:59:BF:24:A9:56:24:EA:61:AD:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ox7Xn9wxa5PUv1m_JKlWJOphrT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ce7b21-064f-4730-a60d-e8f43970abb2/1/ox7Xn9wxa5PUv1m_JKlWJOphrT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ce7b21-064f-4730-a60d-e8f43970abb2/1/ox7Xn9wxa5PUv1m_JKlWJOphrT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a0:e3:5d:8c:a2:5e:1c:1c:93:04:d1:1e:95:b9:f4:0c:e0:
02:93:07:a3:c2:a1:76:4f:9d:a3:06:f6:e1:6c:30:77:d4:f5:
6d:e1:ea:58:a2:26:2a:84:d9:25:47:48:d7:68:d9:03:31:d5:
49:f5:6c:c6:25:0f:db:ca:a8:f5:d4:e2:6a:b4:3b:0d:dc:9e:
38:73:37:ae:54:08:91:fa:73:5f:c0:93:59:fd:d3:e3:d9:c1:
52:25:8a:03:1b:c2:5c:d4:1b:73:5e:a3:41:a1:37:35:2c:b4:
4f:cd:1e:d7:17:8b:20:c4:98:0a:3d:68:7d:db:3a:57:a2:d5:
a8:42:ad:61:24:64:dc:12:7c:67:88:f1:9a:04:f4:19:26:98:
aa:3e:0e:f0:c9:a7:1e:86:ae:0f:28:b0:40:ad:2c:69:82:0d:
26:51:2f:e6:7e:7b:74:e6:a0:be:3a:dd:bd:4a:12:71:eb:05:
59:40:0c:fa:81:8a:7a:f7:76:2e:45:7a:38:e9:af:e2:43:88:
42:fc:6d:70:c8:58:3f:1c:97:30:ba:ed:dd:d9:d4:02:89:43:
5b:57:be:92:ef:bf:59:8f:92:c8:79:ba:9e:8c:a7:3f:2f:b6:
86:83:22:35:5f:f1:76:97:87:19:cb:93:88:33:1b:80:d9:f6:
67:4e:08:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZCchG1oGpQX+FinnzYRa9m0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMWVkNzlmZGMzMTZiOTNkNGJmNTliZjI0YTk1NjI0ZWE2
MWFkM2UwHhcNMjQwNzEwMTIwMDQyWhcNMjQwNzExMTIwMDQyWjAzMTEwLwYDVQQD
EyhmM2QyMDUwZTJkMDNlOGQwYmZlNzJhMTZmYTk3ODgwZWU2MWRkMmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WjcQFgehNvJQk/ycTWAyajBFwo5
u8UxsuARkh2ZKSupdVSfjFIyI4MN5IoIY+L5vm0NP26csDcaI0B+j1tTI0HrR4Jc
0x/7kQ8gtS/mUTSyW1gj7UyCOWAaSzAEb5htIS1cd/3ivaYz0lU7gABPb5EdJTVT
Aezm1dF/ugT0VrX1zodQfY7Tb9Rdr4xA+HWgDjLKOFwISJ9P+ksnq84cHWcIriQ/
Ju3wEUgb0tpMsqtrovrsCezINnn3Sd442nxuRsVdGnOWw1okDAZ3B/IcWjWUSQ24
MTAs5Azu7CHOAvqoAqc0Fcet0eViLByFAeCZNk89KJTJkqeEF6KUIzjaJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPSBQ4tA+jQv+cqFvqXiA7mHdL9MB8GA1UdIwQY
MBaAFKMe15/cMWuT1L9ZvySpViTqYa0+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3g3WG45d3hhNVBVdjFtX0pLbFdKT3BoclQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jZTdiMjEtMDY0Zi00NzMwLWE2MGQt
ZThmNDM5NzBhYmIyLzEvb3g3WG45d3hhNVBVdjFtX0pLbFdKT3BoclQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jZTdiMjEtMDY0Zi00NzMwLWE2MGQtZThmNDM5NzBhYmIy
LzEvb3g3WG45d3hhNVBVdjFtX0pLbFdKT3BoclQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN6DjXYyi
XhwckwTRHpW59AzgApMHo8Khdk+dowb24Wwwd9T1beHqWKImKoTZJUdI12jZAzHV
SfVsxiUP28qo9dTiarQ7DdyeOHM3rlQIkfpzX8CTWf3T49nBUiWKAxvCXNQbc16j
QaE3NSy0T80e1xeLIMSYCj1ofds6V6LVqEKtYSRk3BJ8Z4jxmgT0GSaYqj4O8Mmn
HoauDyiwQK0saYINJlEv5n57dOagvjrdvUoScesFWUAM+oGKevd2LkV6OOmv4kOI
QvxtcMhYPxyXMLrt3dnUAolDW1e+ku+/WY+SyHm6noynPy+2hoMiNV/xdpeHGcuT
iDMbgNn2Z04IwA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 05:02:20 2025 by rpki-client