Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/oRpJHRo3BitG7o3xZeBTQhR31j8.mft
File: oRpJHRo3BitG7o3xZeBTQhR31j8.mft (raw, json)
Hash identifier: ZSHwsOEduNp6SSoGCQKrcNk4XfXLaaZ15QBFKFBdMgw=
Subject key identifier: 76:2B:55:63:59:22:FA:55:13:CA:77:D3:DE:21:D3:23:B0:71:43:F2
Authority key identifier: A1:1A:49:1D:1A:37:06:2B:46:EE:8D:F1:65:E0:53:42:14:77:D6:3F
Certificate issuer: /CN=a11a491d1a37062b46ee8df165e053421477d63f
Certificate serial: 018AD3B96B3AFEF13AC65300D527EC32D1FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRpJHRo3BitG7o3xZeBTQhR31j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/oRpJHRo3BitG7o3xZeBTQhR31j8.mft
Manifest number: 0F0D
Signing time: Tue 26 Sep 2023 23:00:58 +0000
Manifest this update: Tue 26 Sep 2023 23:00:58 +0000
Manifest next update: Wed 27 Sep 2023 23:00:58 +0000
Files and hashes: 1: oRpJHRo3BitG7o3xZeBTQhR31j8.crl (hash: CvKRFTYjCWp2aAz3QAgXXgg7z/kZUMIIbBCFIgg3zmc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d3:b9:6b:3a:fe:f1:3a:c6:53:00:d5:27:ec:32:d1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11a491d1a37062b46ee8df165e053421477d63f
Validity
Not Before: Sep 26 23:00:58 2023 GMT
Not After : Sep 27 23:00:58 2023 GMT
Subject: CN=762b55635922fa5513ca77d3de21d323b07143f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:2b:5e:ba:48:b2:59:22:2b:aa:4e:a7:bd:
7f:c6:a9:95:57:99:65:74:e6:8d:1b:95:c3:34:40:
d2:5a:78:2f:8d:14:c2:b1:4f:a0:76:d3:03:46:e3:
51:34:4e:c7:3c:20:d4:5a:47:89:bd:7e:8f:28:f2:
97:cb:b7:9f:ec:b6:49:8e:e9:50:9e:80:fa:92:4d:
2e:6c:1d:cc:99:a7:19:b6:be:e5:cd:3b:5b:db:99:
2e:72:b6:c8:2f:a9:fd:57:fd:ce:05:7a:31:e1:7b:
22:22:23:0f:45:55:98:3b:3c:93:15:b3:1b:a3:ef:
50:6b:52:a0:66:3b:05:cc:8e:a3:8c:20:26:f7:51:
48:0c:0b:1b:31:16:e7:78:f1:85:ac:c5:37:ba:bd:
22:85:58:43:1d:5b:03:ab:3b:f7:bc:a5:16:fc:e4:
67:e0:71:80:fe:f7:6f:67:f4:90:6f:71:93:05:59:
b5:32:10:02:d5:f0:fa:0d:30:0f:49:91:02:86:b5:
e5:a3:4f:52:67:42:69:14:7b:01:34:f1:6f:dc:07:
58:4b:0b:f7:94:cd:b0:17:b8:3c:ab:b2:54:86:3d:
49:9a:d9:f6:d3:dd:9a:cd:79:54:c6:9d:d5:b3:c4:
33:fa:73:c5:ed:6c:ab:f3:e7:c1:8e:4f:65:66:9c:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2B:55:63:59:22:FA:55:13:CA:77:D3:DE:21:D3:23:B0:71:43:F2
X509v3 Authority Key Identifier:
keyid:A1:1A:49:1D:1A:37:06:2B:46:EE:8D:F1:65:E0:53:42:14:77:D6:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRpJHRo3BitG7o3xZeBTQhR31j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/oRpJHRo3BitG7o3xZeBTQhR31j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/609122-7bd3-4623-a96c-cda2a160d455/1/oRpJHRo3BitG7o3xZeBTQhR31j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2c:97:ed:7f:f8:4b:89:ea:51:e2:ad:16:2a:fe:c6:9b:cc:
cf:32:0b:de:b0:58:b8:52:9d:d5:b0:a6:a6:5c:3e:7d:c9:a7:
48:2a:a0:c9:f2:22:9a:8b:c0:d7:73:d2:3f:72:6c:8d:cf:08:
e0:5b:ca:0d:1a:e4:f2:c0:c7:99:12:2b:a7:f5:9a:e6:88:0c:
6c:2c:30:36:e2:4c:0d:0c:26:f0:0d:40:44:93:b7:35:a7:04:
39:b0:bc:31:c5:4b:4e:66:93:e3:31:90:e2:86:ac:8d:89:f6:
40:54:3f:fd:5f:7d:a1:d1:5a:0e:00:ed:61:6a:7f:ab:a0:05:
3f:ee:7d:2e:f2:ac:80:7e:1c:b1:c5:5b:7f:31:e6:ec:99:78:
58:c2:a8:16:fc:e9:0e:04:02:9c:b2:16:f2:61:e1:2c:5f:86:
08:4e:32:f2:f8:7f:5b:82:a4:eb:aa:2a:4f:46:5c:45:fd:ed:
b6:22:f1:ab:3e:e6:6b:23:2a:23:0e:ae:03:5c:0a:26:16:c2:
36:8a:77:ab:ac:9a:34:04:8f:b5:52:7d:77:1f:b7:ab:5b:20:
4d:77:8c:f4:21:dc:ba:9d:a7:e7:4c:93:cd:c2:e5:09:59:a9:
53:7d:74:cd:92:b6:de:74:fc:24:fc:26:bc:3f:e8:ff:d7:88:
d9:b1:37:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 12:43:02 2025 by rpki-client