Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/a20777-85d9-48b8-a90d-0025fb0ba817/1/oacUNoyt3jYFUYCftnU4i271BRw.mft
File: oacUNoyt3jYFUYCftnU4i271BRw.mft (raw, json)
Hash identifier: I5w5iZLBjK8BiSDSX2MXagpQaB8opVOiQBtvhaUXCOw=
Subject key identifier: 31:1E:41:A1:5D:9F:94:E2:3D:FA:21:F6:77:99:0C:F0:47:D8:E1:BA
Authority key identifier: A1:A7:14:36:8C:AD:DE:36:05:51:80:9F:B6:75:38:8B:6E:F5:05:1C
Certificate issuer: /CN=a1a714368cadde360551809fb675388b6ef5051c
Certificate serial: 01909B71F7D86685A683697AEEE14B0847F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oacUNoyt3jYFUYCftnU4i271BRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/a20777-85d9-48b8-a90d-0025fb0ba817/1/oacUNoyt3jYFUYCftnU4i271BRw.mft
Manifest number: 1204
Signing time: Wed 10 Jul 2024 07:00:55 +0000
Manifest this update: Wed 10 Jul 2024 07:00:55 +0000
Manifest next update: Thu 11 Jul 2024 07:00:55 +0000
Files and hashes: 1: oacUNoyt3jYFUYCftnU4i271BRw.crl (hash: 3kr5Rc/Dw3JkbNOiUuKwW/sPBiZO1S2z2BcnwM2lR3g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:71:f7:d8:66:85:a6:83:69:7a:ee:e1:4b:08:47:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1a714368cadde360551809fb675388b6ef5051c
Validity
Not Before: Jul 10 07:00:55 2024 GMT
Not After : Jul 11 07:00:55 2024 GMT
Subject: CN=311e41a15d9f94e23dfa21f677990cf047d8e1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:ff:1b:56:0f:d4:70:1e:70:3d:3f:a8:ce:
e7:cc:36:12:8c:52:ac:92:a9:dc:77:67:17:f4:68:
69:91:7a:03:b2:fa:06:3e:74:1f:1e:fe:28:15:e9:
28:cb:bf:89:d7:d6:00:44:47:05:d7:78:bc:78:86:
04:52:98:77:88:9a:67:0f:b9:2a:44:c6:6d:a0:65:
59:d3:d1:9c:92:81:73:20:c8:83:79:44:8b:a3:b1:
5b:0c:6c:fa:ec:d0:10:d8:ca:b2:28:28:ca:4f:11:
44:84:12:84:ac:53:31:af:b3:04:94:fd:6d:a3:eb:
c1:57:31:97:e0:60:86:55:28:7d:73:ac:db:46:aa:
a4:9a:1d:71:26:d5:94:14:41:c7:3b:64:3f:6f:94:
39:1b:db:22:ce:a6:4b:6b:e2:70:f6:75:82:5d:8a:
5a:3a:c1:20:aa:4d:b3:be:a4:4b:72:d8:68:14:27:
0a:75:7e:a1:77:3a:94:b2:41:0b:b9:d3:52:f7:76:
cd:69:92:7f:5b:f2:c2:8a:90:30:7f:d0:3f:0e:1c:
80:12:23:70:15:c1:85:4e:a5:82:10:ac:66:ad:ce:
73:3e:67:d5:79:2b:52:62:cb:e5:59:c3:f9:5f:9a:
7c:b0:22:fd:e4:0a:8c:de:8e:80:7c:4c:d0:d8:6f:
41:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1E:41:A1:5D:9F:94:E2:3D:FA:21:F6:77:99:0C:F0:47:D8:E1:BA
X509v3 Authority Key Identifier:
keyid:A1:A7:14:36:8C:AD:DE:36:05:51:80:9F:B6:75:38:8B:6E:F5:05:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oacUNoyt3jYFUYCftnU4i271BRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a20777-85d9-48b8-a90d-0025fb0ba817/1/oacUNoyt3jYFUYCftnU4i271BRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/a20777-85d9-48b8-a90d-0025fb0ba817/1/oacUNoyt3jYFUYCftnU4i271BRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:8c:84:90:0d:87:e1:49:82:c2:cf:af:cc:2d:bd:06:86:cf:
3a:3a:b8:72:39:39:f6:87:15:88:40:b2:93:75:68:a2:b9:47:
e6:fd:96:4c:9b:1e:87:e5:b0:71:26:c9:29:9a:d4:bf:cd:21:
9f:b5:77:88:e6:bc:3f:b3:48:32:d5:5e:9d:ff:7f:fd:da:25:
a5:a7:61:19:6a:cd:7d:33:26:3a:c1:5e:5e:1a:01:2f:c5:65:
d6:3f:56:25:9c:1b:f6:c8:82:4d:f1:3b:0c:9f:64:55:98:91:
9d:b7:3f:57:13:cf:99:49:55:e3:3b:43:34:d1:78:93:e1:14:
23:a8:a9:36:94:42:07:3c:3e:8f:f7:2b:e9:74:6b:82:9e:e2:
8c:fb:e7:07:9c:bc:f4:21:43:73:5e:77:b8:28:0c:38:9d:2e:
9a:3f:38:ac:93:fd:f5:4a:13:a3:5e:3a:36:07:72:9b:52:72:
46:16:51:ee:eb:04:9f:b0:09:f9:10:ea:dd:44:7c:94:b7:24:
fb:bc:a1:79:c3:fd:d0:ac:62:5e:f4:f9:64:16:dd:9c:00:f9:
d4:0b:c6:7a:eb:8e:62:6b:a0:f2:e6:f8:ab:54:09:a1:c8:2f:
86:13:d9:d0:9d:ab:97:0c:1e:df:42:26:81:80:8f:e7:b5:a0:
13:6e:62:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:46 2025 by rpki-client