Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/09034a-3a1e-4f74-aace-ae122389b860/1/OOPMFkov6UC8NtwwxKMI9GcHm_0.mft
File: OOPMFkov6UC8NtwwxKMI9GcHm_0.mft (raw, json)
Hash identifier: 10ZDHqrRnBngh/35Gtp3lb33FUGVLWojoyRVOV1drC4=
Subject key identifier: BF:6C:FD:15:2E:BE:AA:E9:EA:B3:0C:53:86:08:E3:8F:06:13:F7:4A
Authority key identifier: 38:E3:CC:16:4A:2F:E9:40:BC:36:DC:30:C4:A3:08:F4:67:07:9B:FD
Certificate issuer: /CN=38e3cc164a2fe940bc36dc30c4a308f467079bfd
Certificate serial: 01840D2E25FDBDE7686408731E04EFA4D5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOPMFkov6UC8NtwwxKMI9GcHm_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/09034a-3a1e-4f74-aace-ae122389b860/1/OOPMFkov6UC8NtwwxKMI9GcHm_0.mft
Manifest number: 27
Signing time: Tue 25 Oct 2022 03:27:18 +0000
Manifest this update: Tue 25 Oct 2022 03:27:18 +0000
Manifest next update: Wed 26 Oct 2022 03:27:18 +0000
Files and hashes: 1: OOPMFkov6UC8NtwwxKMI9GcHm_0.crl (hash: fUQ5ecTbOYTpskh0kv9RCWhfpSry6NLoSjXIuweEYIM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0d:2e:25:fd:bd:e7:68:64:08:73:1e:04:ef:a4:d5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38e3cc164a2fe940bc36dc30c4a308f467079bfd
Validity
Not Before: Oct 25 03:27:18 2022 GMT
Not After : Oct 26 03:27:18 2022 GMT
Subject: CN=bf6cfd152ebeaae9eab30c538608e38f0613f74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:70:94:83:fe:13:6e:f8:64:68:d0:e9:8f:51:
4c:6e:ed:22:96:e5:4a:89:10:15:3c:92:33:bf:b8:
f3:a0:e8:7f:8a:7c:b2:c5:1c:4e:c8:6b:14:78:f5:
6e:27:9d:32:24:dc:34:8d:fd:97:3b:3b:41:1d:1f:
ff:85:ba:d5:ba:50:44:48:8f:b5:56:83:c5:e6:64:
3e:8e:c7:f5:ca:0c:d9:9c:aa:9c:de:85:86:71:47:
66:5e:3d:0d:30:70:a0:c4:28:51:63:46:ff:08:43:
8c:e8:72:0e:1e:f9:61:35:d5:29:9d:e0:46:69:24:
9f:81:ce:fc:30:d0:d2:b2:3c:a9:9c:50:36:2a:ac:
aa:97:c2:05:bf:5c:64:46:e4:a1:ac:d0:6f:ce:fe:
30:55:61:04:97:3b:9f:ab:71:16:db:e0:04:bf:3d:
7e:a7:ee:3d:98:40:03:26:bc:6a:5c:0c:3c:e7:95:
93:19:7c:88:ac:8e:2e:b8:cb:06:88:e7:19:1b:2e:
fb:60:8e:c3:47:64:f8:f6:9c:bb:d1:ca:fd:12:0b:
b7:7f:14:8e:c1:b2:bd:ba:27:78:fa:e1:ab:c2:e1:
d8:b2:f0:71:f6:40:85:1c:72:c5:80:98:73:e6:53:
c5:9e:bd:5e:10:07:a5:3f:cf:88:fe:43:12:11:8f:
7b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6C:FD:15:2E:BE:AA:E9:EA:B3:0C:53:86:08:E3:8F:06:13:F7:4A
X509v3 Authority Key Identifier:
keyid:38:E3:CC:16:4A:2F:E9:40:BC:36:DC:30:C4:A3:08:F4:67:07:9B:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOPMFkov6UC8NtwwxKMI9GcHm_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/09034a-3a1e-4f74-aace-ae122389b860/1/OOPMFkov6UC8NtwwxKMI9GcHm_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/09034a-3a1e-4f74-aace-ae122389b860/1/OOPMFkov6UC8NtwwxKMI9GcHm_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a7:7a:51:ec:fb:19:53:7a:f1:bf:3c:7f:8f:4f:85:43:94:
79:e1:87:3d:68:c0:38:2e:08:83:e2:f6:aa:d5:c0:9f:55:4d:
c4:cb:28:b0:8c:e8:12:84:a6:79:53:c8:7f:64:7a:0b:2d:37:
bd:1c:35:d0:88:b9:83:6b:d7:eb:2a:71:7f:01:0c:54:b7:e5:
f6:d7:01:15:9a:e8:b8:c7:9c:09:c7:c5:67:4a:49:e7:e3:c5:
9b:91:ab:4f:6b:b7:91:e3:09:2d:fa:35:ca:2d:d0:1e:7e:17:
fb:d1:2f:f9:0f:99:fb:6b:8d:f4:d1:e0:c7:18:96:3b:79:b4:
cb:ce:fe:1c:4b:a3:d7:2c:42:36:19:f2:c4:14:a6:64:9a:45:
d8:64:ca:6f:39:f1:28:6d:f9:06:c5:39:45:d7:73:f8:6d:dd:
a1:83:f5:0e:a9:6e:3c:29:59:f2:40:b3:04:2c:6e:33:75:8c:
a9:12:39:51:3b:b0:34:5d:56:30:8b:cb:75:ea:61:11:81:f1:
ed:7d:dc:4e:39:81:ab:9f:6e:34:d3:8e:ae:62:17:94:e2:4a:
d2:d0:2a:e6:33:e5:3b:31:bc:76:54:0b:e2:ef:20:2b:64:7b:
cb:16:1f:2a:ff:c7:76:82:c7:7f:d3:7c:d3:17:e2:9e:b9:01:
cb:d9:ef:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:50 2025 by rpki-client