Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/658cd6-40a8-4718-bde7-51d9a9962a41/1/OMBEsdme4jTNSlUDFD5BSfBykRc.mft
File: OMBEsdme4jTNSlUDFD5BSfBykRc.mft (raw, json)
Hash identifier: BJVqPok27ExxBeOFAXVvy1Zf8i1xdR+qT1C+xM6viaM=
Subject key identifier: CE:CA:F8:C9:92:42:88:92:95:BD:13:E0:7C:A3:D5:7D:C0:3B:6F:00
Authority key identifier: 38:C0:44:B1:D9:9E:E2:34:CD:4A:55:03:14:3E:41:49:F0:72:91:17
Certificate issuer: /CN=38c044b1d99ee234cd4a5503143e4149f0729117
Certificate serial: 112E6BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OMBEsdme4jTNSlUDFD5BSfBykRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/658cd6-40a8-4718-bde7-51d9a9962a41/1/OMBEsdme4jTNSlUDFD5BSfBykRc.mft
Manifest number: 08C2
Signing time: Mon 28 Mar 2022 04:43:05 +0000
Manifest this update: Mon 28 Mar 2022 04:43:05 +0000
Manifest next update: Tue 29 Mar 2022 04:43:05 +0000
Files and hashes: 1: OMBEsdme4jTNSlUDFD5BSfBykRc.crl (hash: CF0uDwH22ZVltEH6ywnqpFjKL7Moj7DZ7Dswy3ZOxw4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288254925 (0x112e6bcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38c044b1d99ee234cd4a5503143e4149f0729117
Validity
Not Before: Mar 28 04:43:05 2022 GMT
Not After : Mar 29 04:43:05 2022 GMT
Subject: CN=cecaf8c99242889295bd13e07ca3d57dc03b6f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5c:92:f4:67:48:b5:db:52:38:a2:6b:56:52:
8e:c2:1f:2b:1b:f6:e9:5e:58:10:a4:e4:ce:67:a0:
c9:dc:03:fa:5a:2e:22:14:7b:84:11:c7:e3:e2:5d:
da:7e:b3:fe:ff:d0:98:48:66:03:85:13:0a:75:d8:
c0:3c:51:e0:47:2d:62:77:09:cf:5e:b9:d7:9d:39:
8f:d8:8d:bd:09:06:6d:a7:c2:c2:24:9a:2f:44:e8:
3b:9a:23:a4:36:31:f2:ff:2a:f9:61:99:97:b2:c8:
97:6a:e6:de:52:de:63:9a:af:aa:60:3e:4c:14:b7:
db:1a:a6:4d:9f:be:a7:e1:43:5c:26:da:79:1b:4b:
ca:3f:2a:66:a0:67:d3:11:51:c3:2e:f0:f4:11:68:
d5:9b:03:e5:22:f3:6b:24:99:72:da:54:94:54:e6:
6a:99:5b:82:0d:bd:c3:b2:43:f5:86:14:e9:2d:7a:
e6:81:d8:d4:de:e3:59:cb:c7:54:16:53:4b:04:4b:
85:7a:31:19:fb:2b:44:0b:93:d3:9d:38:e4:11:7f:
85:d8:04:b1:ae:9d:a1:31:96:3a:ab:3f:fe:95:e9:
5f:d5:d8:f8:b4:15:f2:7d:a7:0b:eb:9c:cd:4c:c0:
d2:ff:0a:fd:67:20:be:16:a1:78:5e:58:c7:2f:70:
f1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CA:F8:C9:92:42:88:92:95:BD:13:E0:7C:A3:D5:7D:C0:3B:6F:00
X509v3 Authority Key Identifier:
keyid:38:C0:44:B1:D9:9E:E2:34:CD:4A:55:03:14:3E:41:49:F0:72:91:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OMBEsdme4jTNSlUDFD5BSfBykRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/658cd6-40a8-4718-bde7-51d9a9962a41/1/OMBEsdme4jTNSlUDFD5BSfBykRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/658cd6-40a8-4718-bde7-51d9a9962a41/1/OMBEsdme4jTNSlUDFD5BSfBykRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:71:29:4f:14:b9:63:de:ac:6a:3f:72:9d:34:5a:e7:7f:5d:
25:e5:92:15:83:50:b2:6b:7f:d0:b2:c2:4e:99:f9:a9:78:8b:
95:a7:61:fc:42:53:5f:21:28:e7:ba:8e:f3:df:b2:8e:37:82:
a3:3b:7f:0d:d7:7c:ce:e7:fd:a8:15:ad:3d:09:bd:42:40:7f:
98:14:d1:d2:63:2e:60:e6:b2:9a:6f:5a:20:29:f9:fb:36:26:
75:36:f4:a8:b8:7f:b2:88:77:a0:e9:6d:81:68:7f:8a:57:23:
3f:c7:8f:e0:8f:ab:74:0a:1e:2b:db:a5:30:4d:10:21:0b:2a:
30:fa:e5:2e:59:51:c1:7a:98:32:d2:5f:7e:1c:9d:51:57:38:
41:a8:1f:63:83:e8:de:18:3d:2a:bf:8c:4e:65:b5:7b:bd:49:
2c:0a:d3:dd:c6:13:10:8d:12:76:74:65:5f:ee:8c:90:95:e4:
33:0f:d7:7a:73:90:75:75:c4:42:86:13:d0:d1:ec:81:d9:b6:
09:df:46:b8:46:30:09:e5:0e:4a:9f:39:8e:de:0d:bc:84:0c:
c0:9b:48:ce:58:20:03:fe:0b:cd:b8:09:20:fc:1f:aa:ee:40:
21:b5:8f:7f:24:03:c3:75:0e:3d:02:c8:bb:1d:67:ce:f2:20:
d8:73:76:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:13:49 2025 by rpki-client