Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d0bb11-7e7f-4b6e-98f0-0194c9bef472/1/r3OSLFEhuimq6kvQmPrvo4iCGOk.mft
File: r3OSLFEhuimq6kvQmPrvo4iCGOk.mft (raw, json)
Hash identifier: 3HKDCrW30eO++/h811hBfGQjCMLffBCa5rRFx21D71g=
Subject key identifier: C0:E4:8C:60:75:C9:26:EF:75:34:9D:19:26:B4:0B:A0:7D:8A:83:4B
Authority key identifier: AF:73:92:2C:51:21:BA:29:AA:EA:4B:D0:98:FA:EF:A3:88:82:18:E9
Certificate issuer: /CN=af73922c5121ba29aaea4bd098faefa3888218e9
Certificate serial: 0182C4158D15739AACD2FE3B72FCE0B92237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3OSLFEhuimq6kvQmPrvo4iCGOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d0bb11-7e7f-4b6e-98f0-0194c9bef472/1/r3OSLFEhuimq6kvQmPrvo4iCGOk.mft
Manifest number: 08EA
Signing time: Mon 22 Aug 2022 05:45:22 +0000
Manifest this update: Mon 22 Aug 2022 05:45:22 +0000
Manifest next update: Tue 23 Aug 2022 05:45:22 +0000
Files and hashes: 1: r3OSLFEhuimq6kvQmPrvo4iCGOk.crl (hash: hI8hFainTV5mEio8AkId74Nsgr/ENAkzE3LPmZbF8go=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c4:15:8d:15:73:9a:ac:d2:fe:3b:72:fc:e0:b9:22:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af73922c5121ba29aaea4bd098faefa3888218e9
Validity
Not Before: Aug 22 05:45:22 2022 GMT
Not After : Aug 23 05:45:22 2022 GMT
Subject: CN=c0e48c6075c926ef75349d1926b40ba07d8a834b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:32:98:52:80:47:df:bd:28:e7:ee:61:8e:
87:63:34:11:4f:0c:9c:d6:75:72:0f:14:54:91:da:
b1:60:50:36:59:04:3d:d4:7d:a0:84:25:65:e5:8c:
f4:a0:58:87:16:27:06:41:01:82:6f:0d:30:11:2a:
b6:07:39:d0:1a:7b:97:5b:d4:91:49:a2:de:e4:74:
b5:77:78:e8:6d:54:14:f8:6b:81:6d:51:7b:30:07:
3c:02:68:a7:81:ed:fc:6b:f9:4a:f8:83:6b:03:fe:
2a:61:16:85:84:95:e4:25:7b:6f:a2:03:12:9a:8c:
e5:74:e2:62:6b:ac:18:72:87:2c:52:47:30:0c:d9:
40:f3:dc:01:2d:17:43:04:33:5d:67:93:d0:bc:b6:
43:f6:97:42:5d:17:c3:f6:3a:ba:e3:5f:be:5b:3f:
5e:5b:33:0a:a5:0f:65:30:72:00:38:20:6d:cd:d6:
31:0b:de:9f:c8:92:0d:b5:54:14:32:89:e9:f3:cb:
ff:ca:fb:8d:1f:d6:be:30:86:6f:6c:3d:8f:a9:58:
c4:46:a8:94:7f:46:70:c7:0f:4f:df:96:a4:21:a0:
83:1e:4e:9d:ff:f4:a5:30:de:71:1c:73:19:09:d4:
6f:cf:b2:f9:79:45:2e:5f:3e:31:db:9f:0a:3a:e0:
9f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E4:8C:60:75:C9:26:EF:75:34:9D:19:26:B4:0B:A0:7D:8A:83:4B
X509v3 Authority Key Identifier:
keyid:AF:73:92:2C:51:21:BA:29:AA:EA:4B:D0:98:FA:EF:A3:88:82:18:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3OSLFEhuimq6kvQmPrvo4iCGOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d0bb11-7e7f-4b6e-98f0-0194c9bef472/1/r3OSLFEhuimq6kvQmPrvo4iCGOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d0bb11-7e7f-4b6e-98f0-0194c9bef472/1/r3OSLFEhuimq6kvQmPrvo4iCGOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:99:e5:b1:1c:e3:84:6d:ee:69:59:58:17:b4:87:0d:df:4f:
08:cb:5d:a4:22:27:b4:33:0d:f8:5d:0e:9e:7e:12:cf:41:32:
a7:b9:10:4a:8b:90:af:91:24:83:cf:b2:76:9c:4e:e7:e3:9f:
73:a7:d1:8b:0c:06:e1:02:96:d3:62:06:33:dd:a5:e8:11:58:
84:1a:30:15:52:76:28:b6:3b:a4:8b:ff:81:58:98:3b:55:67:
48:e6:a8:82:61:bb:87:09:f6:51:a1:cc:47:db:57:20:45:65:
27:71:04:bc:86:5b:fc:30:0c:57:d6:bc:f5:b4:86:45:d5:64:
0e:87:1b:bf:d7:38:43:79:7d:cc:3e:12:5d:e6:a5:d2:23:92:
9d:27:1f:98:b0:40:69:0b:b7:f3:fd:06:5e:c5:a8:d9:00:80:
74:6b:6f:da:f8:05:16:9f:01:a9:2a:7a:39:01:6e:31:69:ea:
b4:47:94:88:57:00:a2:24:3b:b7:91:80:a2:74:e2:2f:4a:7b:
80:d4:1e:26:89:dc:d6:d3:6b:bf:b8:0e:63:49:f6:31:ab:53:
33:35:64:46:39:16:dc:5c:2e:e7:cd:a9:d0:fd:dd:09:f9:14:
df:1c:7f:a7:4c:e3:83:21:01:25:db:1f:06:b6:85:9b:e0:2d:
ed:ea:8f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:28 2025 by rpki-client