Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ce3a39-5baa-4c8d-ae6f-c5593d14617b/1/_ocU-XQUakcmThHuhpWPRnj3Apg.mft
File: _ocU-XQUakcmThHuhpWPRnj3Apg.mft (raw, json)
Hash identifier: 16QJ4NZsV7RdIZonwYTBKRO8+FT92LUkeQjuK+5KtVg=
Subject key identifier: 32:45:1F:AC:33:7A:17:A3:14:1A:9A:4E:F9:C7:83:01:0E:DB:AD:2C
Authority key identifier: FE:87:14:F9:74:14:6A:47:26:4E:11:EE:86:95:8F:46:78:F7:02:98
Certificate issuer: /CN=fe8714f974146a47264e11ee86958f4678f70298
Certificate serial: 019563D1C0E8A9772581A6ACB1FE5CE5C49F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ocU-XQUakcmThHuhpWPRnj3Apg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ce3a39-5baa-4c8d-ae6f-c5593d14617b/1/_ocU-XQUakcmThHuhpWPRnj3Apg.mft
Manifest number: 0C27
Signing time: Wed 05 Mar 2025 01:00:45 +0000
Manifest this update: Wed 05 Mar 2025 01:00:45 +0000
Manifest next update: Thu 06 Mar 2025 01:00:45 +0000
Files and hashes: 1: _ocU-XQUakcmThHuhpWPRnj3Apg.crl (hash: DA+K6IUiMdAc159W+1Sb5WUeACXrPXC/wgMnH4FxkmE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:63:d1:c0:e8:a9:77:25:81:a6:ac:b1:fe:5c:e5:c4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8714f974146a47264e11ee86958f4678f70298
Validity
Not Before: Mar 5 01:00:45 2025 GMT
Not After : Mar 6 01:00:45 2025 GMT
Subject: CN=32451fac337a17a3141a9a4ef9c783010edbad2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:a7:97:3e:d5:4f:64:fe:41:d2:1f:f4:36:
53:37:aa:c7:0b:a0:1a:50:c3:d8:b6:73:2c:98:62:
0d:85:9c:d6:63:18:92:8a:6a:3a:08:b1:29:db:bd:
99:83:60:2a:46:d2:a9:6a:d5:11:91:ff:e7:af:33:
f7:75:ae:75:e5:b5:46:a7:26:5a:29:11:45:e3:d0:
27:39:2c:36:37:92:32:86:f7:cd:fe:ef:66:f5:eb:
c2:74:2a:cd:ff:65:f6:21:d3:05:83:0d:b4:2b:4e:
b1:ac:e4:78:32:8f:9a:ae:32:5f:31:7b:d4:84:35:
9f:e9:bf:40:43:73:12:4f:e2:24:f9:54:74:88:71:
1f:d8:bb:72:62:5b:be:2a:e3:e0:de:4d:c8:cb:9c:
45:cf:03:c6:d1:92:7c:4f:96:e6:df:39:9a:98:e4:
99:49:13:98:13:41:87:90:0c:70:2e:19:bd:ff:9b:
c0:6c:f7:60:3e:0f:e5:02:d8:f8:a5:06:40:3e:03:
39:0f:4b:55:50:a4:4f:6d:1a:0c:31:16:66:0c:d8:
05:c8:e5:d3:38:ec:b0:3f:41:5f:83:28:f7:43:d8:
0e:26:83:e1:4e:dc:a5:de:73:24:7c:c8:f8:5e:85:
4d:02:0e:c0:f6:8d:8c:80:1d:d3:75:6d:89:0b:37:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:45:1F:AC:33:7A:17:A3:14:1A:9A:4E:F9:C7:83:01:0E:DB:AD:2C
X509v3 Authority Key Identifier:
keyid:FE:87:14:F9:74:14:6A:47:26:4E:11:EE:86:95:8F:46:78:F7:02:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ocU-XQUakcmThHuhpWPRnj3Apg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce3a39-5baa-4c8d-ae6f-c5593d14617b/1/_ocU-XQUakcmThHuhpWPRnj3Apg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ce3a39-5baa-4c8d-ae6f-c5593d14617b/1/_ocU-XQUakcmThHuhpWPRnj3Apg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:58:89:07:19:f6:d4:fa:48:e1:20:f1:8b:bc:0b:7b:c3:c8:
00:84:0d:cb:da:07:e3:71:72:41:e1:ef:0f:1e:d5:db:8e:75:
0e:6d:07:6b:19:f0:6e:e0:5f:9b:48:92:9b:8e:e6:3e:c1:76:
39:6a:3a:51:fb:3f:4b:d9:18:af:91:73:24:c4:e7:0a:9e:4e:
43:6e:fc:2d:98:23:b9:1d:5c:ec:25:17:b4:97:80:ab:7c:0f:
f2:70:bf:88:21:8c:4d:78:62:d0:f4:17:c6:e8:ac:68:76:ec:
c0:b4:a3:5d:b4:8b:d4:1a:1f:bf:fa:6b:f8:7d:7a:9a:68:8d:
fe:8d:d4:56:b2:7b:92:e0:ee:97:13:1c:19:1b:fc:a8:56:81:
b6:20:4f:e3:76:a6:19:10:17:4b:c6:03:bc:52:cd:93:27:37:
89:81:e5:57:f7:a3:36:6b:46:74:9c:0e:4b:d8:26:11:b5:4f:
bb:93:dd:f1:e1:5a:bc:bb:a4:3b:7f:10:22:79:b8:f4:f7:78:
c7:6d:29:18:26:a1:d9:d4:e3:ad:ef:53:07:d5:c6:20:b9:d5:
d6:79:0f:e3:6e:47:e0:c9:e7:9f:3d:ba:12:dd:2f:58:55:03:
42:76:e3:d6:0a:3e:85:7e:4d:35:fa:ef:b3:fc:66:06:59:43:
df:22:2e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:26 2025 by rpki-client