Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a8a87f-1f74-41af-ad70-77d486e3228f/1/Okm2Qzz-7Vvfl9mXdNmcFC4F9_k.mft
File: Okm2Qzz-7Vvfl9mXdNmcFC4F9_k.mft (raw, json)
Hash identifier: DGTJ1XfmahxaNVPjKsW9wKhQHw/61L/Ips4FCUOQphI=
Subject key identifier: A4:8D:A4:42:76:92:F8:E4:35:76:CD:FF:F5:8D:7E:CF:00:3E:DD:E4
Authority key identifier: 3A:49:B6:43:3C:FE:ED:5B:DF:97:D9:97:74:D9:9C:14:2E:05:F7:F9
Certificate issuer: /CN=3a49b6433cfeed5bdf97d99774d99c142e05f7f9
Certificate serial: 019472345F2329DCF1555B04CD1A7D249C3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Okm2Qzz-7Vvfl9mXdNmcFC4F9_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a8a87f-1f74-41af-ad70-77d486e3228f/1/Okm2Qzz-7Vvfl9mXdNmcFC4F9_k.mft
Manifest number: 01A4
Signing time: Fri 17 Jan 2025 03:00:22 +0000
Manifest this update: Fri 17 Jan 2025 03:00:22 +0000
Manifest next update: Sat 18 Jan 2025 03:00:22 +0000
Files and hashes: 1: Okm2Qzz-7Vvfl9mXdNmcFC4F9_k.crl (hash: 9ATKQ5v0iREAtiwdOCbyjIqs/XnL/T255iWj+z5BwxE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:72:34:5f:23:29:dc:f1:55:5b:04:cd:1a:7d:24:9c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a49b6433cfeed5bdf97d99774d99c142e05f7f9
Validity
Not Before: Jan 17 03:00:22 2025 GMT
Not After : Jan 18 03:00:22 2025 GMT
Subject: CN=a48da4427692f8e43576cdfff58d7ecf003edde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a2:25:0d:c6:6e:3c:98:43:21:2f:28:e9:23:
e3:a0:6e:73:f2:18:e7:0f:a2:94:35:5c:9b:90:65:
a1:b1:71:3f:78:6f:69:c3:32:c4:d4:53:e0:33:e9:
fe:1b:30:49:72:29:b3:16:66:0f:47:df:67:40:d5:
1f:aa:e5:67:74:c0:16:b6:2c:16:ea:e5:8d:bf:ef:
7f:61:5f:b1:66:c1:1a:27:c3:12:6f:d5:c7:bb:84:
fa:9d:3a:58:41:fb:24:5a:45:97:d8:75:a8:e4:34:
a6:a5:9d:c3:60:78:ab:34:b8:ab:c1:5f:9d:da:84:
b8:34:76:87:7b:4d:c5:06:db:48:60:18:74:e6:2c:
26:93:cf:b0:e7:04:5f:7f:39:82:e2:94:64:94:44:
42:ec:a6:e6:0e:a0:89:1d:c9:ab:db:1a:a8:ad:96:
66:c4:60:7c:5e:1e:27:d7:c1:14:87:5c:c7:ab:60:
96:b1:e0:f3:de:3a:b3:83:4e:5b:f2:71:6f:59:0b:
38:b9:70:8e:aa:38:02:3c:06:92:cb:b6:aa:a6:70:
d5:0a:ee:09:67:4d:48:28:91:84:4d:77:bf:0e:c6:
3c:ec:92:7e:f1:5e:db:1b:1e:2d:ed:75:06:98:5d:
b8:89:ed:9f:a9:b3:9e:f5:e0:66:b3:39:72:e5:2a:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8D:A4:42:76:92:F8:E4:35:76:CD:FF:F5:8D:7E:CF:00:3E:DD:E4
X509v3 Authority Key Identifier:
keyid:3A:49:B6:43:3C:FE:ED:5B:DF:97:D9:97:74:D9:9C:14:2E:05:F7:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Okm2Qzz-7Vvfl9mXdNmcFC4F9_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a8a87f-1f74-41af-ad70-77d486e3228f/1/Okm2Qzz-7Vvfl9mXdNmcFC4F9_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a8a87f-1f74-41af-ad70-77d486e3228f/1/Okm2Qzz-7Vvfl9mXdNmcFC4F9_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:22:51:4f:f1:a2:ce:16:a8:86:aa:99:3d:f4:17:c7:41:64:
81:ef:b9:42:df:9d:57:f1:8e:4f:a5:65:45:41:53:0a:33:62:
3a:be:d4:c2:bb:b3:9e:8f:81:0f:34:bc:e2:ab:30:87:54:c8:
ab:1f:8d:6c:d1:ea:a8:98:15:c4:b5:a2:c2:2a:50:f2:54:67:
01:7c:e3:61:80:35:72:06:5a:53:06:69:14:8f:a9:49:0e:fc:
59:66:4f:be:fe:1b:8a:25:fe:01:ae:5b:fc:e9:a6:cb:f5:34:
c7:27:27:cf:42:a0:e0:10:e9:6a:a1:c3:a3:65:14:2c:27:e3:
4a:bb:9e:71:0f:60:9c:39:6c:08:93:8f:8c:56:58:f5:11:73:
de:e7:4d:18:96:aa:4a:5d:0b:48:ee:45:ea:3d:8c:97:46:5c:
8c:ef:51:a5:dd:81:38:2e:22:d4:7e:a5:d4:fd:01:d5:9a:59:
53:9c:65:8f:dd:d4:cb:b7:af:97:27:eb:1c:47:e6:14:af:92:
df:8f:86:d3:dc:eb:74:3f:05:d7:4f:0a:b8:f8:cd:2b:fc:50:
d1:7b:95:14:7a:1f:93:95:1f:c1:5b:27:9c:19:89:b0:82:a9:
ec:7e:ce:ff:14:a4:e2:48:15:14:63:68:af:e4:4f:97:0e:b4:
91:fb:13:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:39:03 2025 by rpki-client