Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/9dfcfb-ae2d-4c04-a400-b8edeb166d62/1/OV0LIy1YxovmwD8sFET1EDq8jKE.mft
File: OV0LIy1YxovmwD8sFET1EDq8jKE.mft (raw, json)
Hash identifier: gMDIVd3wxqXSjm8OuwfmOAV4gmhrZfKLwroE7wmUg50=
Subject key identifier: D2:2A:A8:35:2F:3B:FF:F6:32:AF:22:19:19:C4:88:88:61:4F:F1:90
Authority key identifier: 39:5D:0B:23:2D:58:C6:8B:E6:C0:3F:2C:14:44:F5:10:3A:BC:8C:A1
Certificate issuer: /CN=395d0b232d58c68be6c03f2c1444f5103abc8ca1
Certificate serial: 0194929AE544E4EC00873D6ABB1D5C748F6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OV0LIy1YxovmwD8sFET1EDq8jKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/9dfcfb-ae2d-4c04-a400-b8edeb166d62/1/OV0LIy1YxovmwD8sFET1EDq8jKE.mft
Manifest number: 1410
Signing time: Thu 23 Jan 2025 10:00:12 +0000
Manifest this update: Thu 23 Jan 2025 10:00:12 +0000
Manifest next update: Fri 24 Jan 2025 10:00:12 +0000
Files and hashes: 1: OV0LIy1YxovmwD8sFET1EDq8jKE.crl (hash: +HFNGIjKkQvNs+1BQAzEtb9sbH8m4LgniX8LHwCXZ4E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:9a:e5:44:e4:ec:00:87:3d:6a:bb:1d:5c:74:8f:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=395d0b232d58c68be6c03f2c1444f5103abc8ca1
Validity
Not Before: Jan 23 10:00:12 2025 GMT
Not After : Jan 24 10:00:12 2025 GMT
Subject: CN=d22aa8352f3bfff632af221919c48888614ff190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6d:ba:32:9e:05:af:9f:fb:97:ba:0d:15:38:
ab:7a:7a:ca:3c:d8:ea:b8:7d:5d:9f:7c:c5:6e:25:
75:a5:40:6b:62:c1:0d:a8:8f:04:34:9b:d3:9e:41:
30:e3:e3:2f:0b:3c:6b:78:45:2a:43:f4:54:7d:24:
0e:fb:bc:0c:6d:01:a2:49:51:61:59:1b:56:91:42:
03:b3:a1:04:f4:1d:0a:e1:65:2a:e5:64:10:a5:ad:
22:86:ec:92:ce:de:a7:84:5f:a7:91:97:96:b2:25:
eb:ea:6f:50:f0:8d:e6:75:a0:7b:5c:dd:a0:55:23:
37:89:4b:85:ff:7a:a4:05:d6:58:08:48:9a:01:2d:
a7:8e:ab:38:4b:b0:16:25:f4:77:1b:2d:9a:a7:80:
77:c1:25:8a:3f:51:a0:04:6f:e5:34:66:8f:e5:6f:
3f:bd:65:d0:1b:d5:08:cf:07:b0:64:44:2c:b5:92:
97:8f:38:35:7f:96:9a:24:fb:f2:a4:f2:b7:67:63:
fe:ad:4c:ea:e2:52:70:84:66:86:7a:aa:3c:20:6a:
c6:62:65:0f:45:d7:ad:f3:35:ad:2c:9a:9a:96:0b:
9b:56:71:5d:ae:07:e8:2c:bd:31:ef:ed:14:51:84:
de:20:cd:b5:75:fa:97:20:db:01:a6:da:79:b6:b5:
f9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2A:A8:35:2F:3B:FF:F6:32:AF:22:19:19:C4:88:88:61:4F:F1:90
X509v3 Authority Key Identifier:
keyid:39:5D:0B:23:2D:58:C6:8B:E6:C0:3F:2C:14:44:F5:10:3A:BC:8C:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OV0LIy1YxovmwD8sFET1EDq8jKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9dfcfb-ae2d-4c04-a400-b8edeb166d62/1/OV0LIy1YxovmwD8sFET1EDq8jKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/9dfcfb-ae2d-4c04-a400-b8edeb166d62/1/OV0LIy1YxovmwD8sFET1EDq8jKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5e:70:be:71:46:c3:b2:f8:29:76:cf:23:9f:ca:db:72:0c:
5e:34:ec:5f:aa:8d:86:f5:95:be:cf:1d:4a:23:c8:83:b0:55:
f0:e6:08:ac:59:ca:a1:f3:75:6b:91:5f:d5:8e:66:98:da:b8:
7b:ba:a5:b0:92:5a:28:ab:4e:21:1a:8a:67:12:97:82:61:ff:
61:3b:31:5e:53:2c:c9:ee:9e:28:0a:54:bd:6b:5f:c1:ec:9c:
ff:22:a7:34:94:cb:11:8b:3a:38:e8:da:a7:26:3d:4a:93:63:
c8:51:fd:9d:46:65:4a:e0:76:db:fc:5f:36:86:0b:0d:c7:29:
ab:f8:79:71:c8:22:dd:31:00:5b:b0:47:95:83:b1:36:1f:96:
3a:6d:e4:56:3f:c4:06:42:fe:31:d3:43:b0:4d:cf:35:76:8a:
00:e8:7f:e7:05:42:5d:b2:8c:80:40:6b:dc:72:8a:e8:61:31:
cb:20:e7:a5:5b:cf:0f:4e:f2:5e:af:3e:2f:41:79:5f:44:c2:
db:62:7b:86:71:c9:99:bd:97:3b:6d:a5:84:09:e3:30:fe:5d:
3f:25:5c:d8:1e:a5:5f:d8:56:a7:89:09:e6:1d:b7:aa:ac:4b:
44:f9:6e:b5:df:ed:67:5d:4a:89:c3:7a:f3:c0:eb:c2:5c:2d:
fb:63:24:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:51:11 2025 by rpki-client