Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9f2497-4064-416a-804e-75c660b0702f/1/aO6OfkIFOVOcTuiTOr04wCTjvVs.mft
File: aO6OfkIFOVOcTuiTOr04wCTjvVs.mft (raw, json)
Hash identifier: 11u9jRFEZ1WHXzyhOoxVC6wkWWrTvY8Qx5NdnjnLznA=
Subject key identifier: 26:C0:15:F4:DC:AC:98:66:3F:5D:69:DA:A5:A0:CF:7F:0C:C4:F2:B1
Authority key identifier: 68:EE:8E:7E:42:05:39:53:9C:4E:E8:93:3A:BD:38:C0:24:E3:BD:5B
Certificate issuer: /CN=68ee8e7e420539539c4ee8933abd38c024e3bd5b
Certificate serial: 0194D4E8CFF8C352EA418A579BABFE30B0A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aO6OfkIFOVOcTuiTOr04wCTjvVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9f2497-4064-416a-804e-75c660b0702f/1/aO6OfkIFOVOcTuiTOr04wCTjvVs.mft
Manifest number: 0E26
Signing time: Wed 05 Feb 2025 07:00:14 +0000
Manifest this update: Wed 05 Feb 2025 07:00:14 +0000
Manifest next update: Thu 06 Feb 2025 07:00:14 +0000
Files and hashes: 1: aO6OfkIFOVOcTuiTOr04wCTjvVs.crl (hash: +XJsI2JUfXCw25/FMLBU0p1Z01YD6cqpuG8KHeLdRfM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d4:e8:cf:f8:c3:52:ea:41:8a:57:9b:ab:fe:30:b0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ee8e7e420539539c4ee8933abd38c024e3bd5b
Validity
Not Before: Feb 5 07:00:14 2025 GMT
Not After : Feb 6 07:00:14 2025 GMT
Subject: CN=26c015f4dcac98663f5d69daa5a0cf7f0cc4f2b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:eb:ba:67:95:d4:62:fe:7e:9d:87:a0:5c:
73:9c:1d:72:8c:39:d2:ad:16:76:a3:70:8b:99:4d:
ff:97:67:6b:ef:c8:e8:33:80:7c:3a:1b:2c:86:ad:
cc:18:6b:11:f8:eb:95:53:0b:fc:58:13:cd:f2:c6:
c9:c2:e6:dd:03:d5:2b:03:09:ca:80:92:6c:ec:ed:
1e:fb:61:a7:20:5b:da:22:5a:b8:af:c2:72:f7:fb:
b8:11:15:50:b5:ad:87:2a:c7:2d:4b:ca:0e:f5:e3:
f0:64:7e:45:2c:52:b4:0e:82:68:2b:b1:be:9c:20:
4e:6d:b2:80:53:3e:96:b4:34:12:e9:1c:e3:a4:a3:
76:69:9e:49:ca:6a:c8:92:f8:33:77:f1:93:94:1f:
f5:68:ee:a0:33:96:26:3c:8f:ca:94:fb:c9:2d:4d:
87:d2:4e:b4:c5:a5:72:f4:e1:52:2d:fd:ee:99:fe:
1c:57:b8:b9:b2:0d:0e:54:c7:a2:b4:57:8f:0b:2d:
7f:83:c6:ce:bc:49:63:d1:18:4d:10:37:ab:98:9e:
39:3e:db:ee:07:3f:a3:f4:35:40:0b:48:09:25:3c:
a1:ce:06:f5:1c:3b:66:e5:f6:cd:ef:83:86:fe:6a:
ac:08:e7:3e:57:3c:ab:5b:0a:ba:cb:5e:b9:45:8d:
4d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C0:15:F4:DC:AC:98:66:3F:5D:69:DA:A5:A0:CF:7F:0C:C4:F2:B1
X509v3 Authority Key Identifier:
keyid:68:EE:8E:7E:42:05:39:53:9C:4E:E8:93:3A:BD:38:C0:24:E3:BD:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aO6OfkIFOVOcTuiTOr04wCTjvVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9f2497-4064-416a-804e-75c660b0702f/1/aO6OfkIFOVOcTuiTOr04wCTjvVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9f2497-4064-416a-804e-75c660b0702f/1/aO6OfkIFOVOcTuiTOr04wCTjvVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ff:aa:27:5c:de:45:2d:c9:9b:9d:c8:d6:90:8c:0b:91:59:
77:b9:8e:93:c2:e5:f7:60:a0:e8:7b:07:16:73:bd:b4:0b:b6:
81:a0:ec:cf:d3:33:ea:7a:3d:7a:af:52:d5:7a:75:f7:02:a9:
b8:e3:c0:34:c7:6b:d2:98:45:b1:16:f7:2d:05:3c:6e:27:95:
ab:18:5f:47:d7:6e:07:f7:d3:25:0e:1f:2f:4d:90:cb:be:07:
a2:26:7f:2e:96:0e:d1:e1:59:d0:54:cf:88:d7:ec:04:3d:a0:
e3:b5:e0:d2:8f:13:47:8c:56:93:c4:82:e9:05:de:aa:ef:f5:
eb:b0:dc:8a:24:45:2e:a6:98:5a:6d:79:d0:ff:64:31:55:81:
b6:82:67:a9:39:73:ff:10:c8:59:5e:7d:42:cd:e2:0f:84:e5:
83:3d:13:e9:df:de:f7:b9:08:54:12:45:a3:fd:d7:6c:22:ce:
56:c7:fa:cc:ad:e2:35:b4:1b:57:f8:1e:48:a1:78:8a:3d:72:
97:d3:25:08:de:1e:a7:db:f3:0b:2c:72:23:aa:9e:d9:8b:23:
0e:d1:44:35:2b:6a:e5:72:5d:65:10:3d:81:ee:bf:50:16:3d:
d2:fa:ac:17:72:bb:9d:c5:25:7c:89:24:bb:0e:3c:23:6e:28:
ea:61:5e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:25:14 2025 by rpki-client