Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
File: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft (raw, json)
Hash identifier: QiexwvMwOR2NLP+1XEBaW4KZJV2IRZCvAylvEcl0dRY=
Subject key identifier: E7:80:C5:7E:A2:41:05:6E:F6:F8:57:89:CF:81:69:31:EE:4D:78:9B
Authority key identifier: 3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
Certificate issuer: /CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Certificate serial: 0195E00FC20AFD78EC421BD8F2420C1E4D29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 04:01:23 +0000
Manifest this update: Sat 29 Mar 2025 04:01:23 +0000
Manifest next update: Sun 30 Mar 2025 04:01:23 +0000
Files and hashes: 1: O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl (hash: WZHMrlQ9l97vLU1JId8nlRtIW9Mo5Q/bU5xMNdJ2r1Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:c2:0a:fd:78:ec:42:1b:d8:f2:42:0c:1e:4d:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b9736aa24cda1893ac5c5dd0effd6ecafd94fe1
Validity
Not Before: Mar 29 04:01:23 2025 GMT
Not After : Mar 30 04:01:23 2025 GMT
Subject: CN=e780c57ea241056ef6f85789cf816931ee4d789b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:a7:3f:ac:27:ba:13:6b:fd:f3:60:07:4b:
9c:e0:ac:f8:d0:c1:1d:3a:84:e2:e2:ac:1c:3a:45:
78:50:45:6e:0a:f8:72:33:06:80:98:61:e2:84:3c:
c9:0f:d0:89:db:13:59:13:cf:e1:3c:ef:25:89:56:
1a:37:bb:d7:b6:d1:51:08:a4:08:9c:90:5a:ae:7b:
eb:1d:5b:ff:11:07:00:28:b7:36:96:5e:36:5e:eb:
54:c3:55:04:2c:75:7f:cd:10:7a:6e:52:11:05:74:
99:f1:77:ca:25:09:5d:85:00:91:03:38:88:83:08:
8e:94:2e:dd:62:2f:f9:cc:a9:98:32:66:d6:57:63:
d8:14:38:7c:47:d5:0c:3a:bf:c0:aa:0d:49:62:cf:
33:b1:79:bb:a6:2b:d0:0b:ab:b9:48:ca:20:30:e1:
cc:ee:ed:09:9b:5b:cb:ad:8e:e1:de:9c:ed:cf:44:
a3:a6:d2:19:e0:3e:9f:c9:97:3b:f2:5a:9c:9a:04:
fd:16:f1:d3:e5:1f:28:e7:f7:58:1f:59:71:37:dc:
20:52:b5:fc:e7:b8:40:7a:f7:c9:93:9f:23:d3:f9:
da:90:66:46:0f:22:96:4f:21:9c:b5:92:85:e4:7f:
48:9f:80:81:d9:84:1b:00:03:7b:84:40:56:c7:71:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:80:C5:7E:A2:41:05:6E:F6:F8:57:89:CF:81:69:31:EE:4D:78:9B
X509v3 Authority Key Identifier:
keyid:3B:97:36:AA:24:CD:A1:89:3A:C5:C5:DD:0E:FF:D6:EC:AF:D9:4F:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/d5e3a2-800a-40de-adac-5b3f0a0159cd/1/O5c2qiTNoYk6xcXdDv_W7K_ZT-E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:11:d9:53:28:4e:17:fd:34:81:5f:f0:19:e9:e9:87:fc:9e:
91:4f:9a:63:79:20:97:20:b1:7c:dd:c7:53:55:11:dd:a6:ec:
48:8c:c5:7e:52:7f:f1:0f:c5:5a:88:89:80:82:46:15:f0:ff:
ac:e4:75:27:9c:d5:86:62:8b:1f:f2:da:da:6e:66:9c:81:9b:
51:75:97:de:d0:8b:a9:0e:34:94:4a:32:6e:68:49:67:be:20:
1a:74:18:d0:f4:7a:c8:e1:1e:10:8d:da:84:b8:6f:c7:7f:a4:
18:19:aa:8b:d9:b6:35:50:a3:db:ed:a8:48:62:b9:8c:35:70:
a6:64:00:af:e7:37:74:58:3e:4c:e6:8d:68:1d:38:bb:7f:b3:
38:13:83:e7:39:00:39:29:71:d3:3f:5d:b2:fb:46:11:c7:b4:
bc:f7:0a:a3:0f:ef:94:36:df:c4:2e:f8:57:9f:8f:af:ef:22:
d1:ba:90:88:5c:f8:27:9a:cc:44:61:7a:2d:64:06:b5:f5:21:
aa:67:ab:04:59:68:08:37:af:5a:85:d2:a2:c4:f1:c5:07:d4:
ea:d9:b3:46:01:18:13:15:97:ad:f2:f9:fc:b4:3c:ef:a2:5f:
a4:f7:ac:a1:25:4c:96:0d:ba:8f:61:57:a4:00:bb:c2:7a:19:
c3:81:31:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:28:50 2025 by rpki-client