Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e7960b-e179-476d-b478-b050229ed9c6/1/obHWNaLKOPpZnU6GjzLl119GJ8I.mft
File: obHWNaLKOPpZnU6GjzLl119GJ8I.mft (raw, json)
Hash identifier: wpSSDs8RD7iBY+BO7e0CizkjtepFoN/JYjjCSerBGZM=
Subject key identifier: 53:9D:57:5C:6B:FD:EF:42:2F:88:D2:F2:C5:CF:B5:09:4D:DE:B4:A4
Authority key identifier: A1:B1:D6:35:A2:CA:38:FA:59:9D:4E:86:8F:32:E5:D7:5F:46:27:C2
Certificate issuer: /CN=a1b1d635a2ca38fa599d4e868f32e5d75f4627c2
Certificate serial: 018FB3B587463B2DB11ED8F692BD00380FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/obHWNaLKOPpZnU6GjzLl119GJ8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e7960b-e179-476d-b478-b050229ed9c6/1/obHWNaLKOPpZnU6GjzLl119GJ8I.mft
Manifest number: 039B
Signing time: Sun 26 May 2024 07:02:49 +0000
Manifest this update: Sun 26 May 2024 07:02:49 +0000
Manifest next update: Mon 27 May 2024 07:02:49 +0000
Files and hashes: 1: obHWNaLKOPpZnU6GjzLl119GJ8I.crl (hash: jKw5V76JqiFvpjZEpRU2+s7TGNnDiDitGJb5XHmSICk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b3:b5:87:46:3b:2d:b1:1e:d8:f6:92:bd:00:38:0f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1b1d635a2ca38fa599d4e868f32e5d75f4627c2
Validity
Not Before: May 26 07:02:49 2024 GMT
Not After : May 27 07:02:49 2024 GMT
Subject: CN=539d575c6bfdef422f88d2f2c5cfb5094ddeb4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:56:83:e4:a3:0a:94:f8:ed:2f:6c:b4:39:7f:
0c:e0:ca:00:49:d5:9c:05:48:af:a5:ba:1e:34:59:
21:11:8c:b0:6f:0d:66:3d:e3:59:9d:c7:b1:b8:c9:
c6:6c:8d:51:c5:5a:a2:86:85:e9:b1:99:44:86:42:
97:c5:14:9c:fc:b8:47:ec:21:b2:2d:46:cf:e1:f8:
5f:c3:dc:53:f9:12:07:55:9b:8c:da:42:51:0c:be:
71:10:f9:dc:24:92:db:d2:ca:f4:d7:a1:35:5e:08:
65:02:38:fa:88:6c:9e:93:24:3d:af:ac:8a:32:62:
e8:bc:06:e1:eb:03:10:a1:c9:1d:46:50:30:48:c6:
c7:96:32:65:9e:6b:bb:a8:5d:51:f1:d6:82:23:67:
f6:d0:e0:84:9d:6e:e7:dc:68:8e:f6:92:01:3b:c4:
a7:f1:5a:1e:33:0a:16:3b:49:06:50:d2:f0:04:6f:
fc:0a:15:ea:ce:7b:1c:8c:5d:35:11:b2:5a:85:bf:
76:6a:44:a6:bf:05:10:0c:85:0c:e2:e4:7b:cb:39:
ef:38:8a:14:b2:85:91:f4:74:fd:77:cd:e1:d6:b9:
6c:4d:45:45:f9:da:25:3f:97:7d:22:31:cf:16:e7:
bf:57:a9:95:21:89:70:51:ec:08:33:9e:67:2d:b6:
b3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9D:57:5C:6B:FD:EF:42:2F:88:D2:F2:C5:CF:B5:09:4D:DE:B4:A4
X509v3 Authority Key Identifier:
keyid:A1:B1:D6:35:A2:CA:38:FA:59:9D:4E:86:8F:32:E5:D7:5F:46:27:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/obHWNaLKOPpZnU6GjzLl119GJ8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e7960b-e179-476d-b478-b050229ed9c6/1/obHWNaLKOPpZnU6GjzLl119GJ8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e7960b-e179-476d-b478-b050229ed9c6/1/obHWNaLKOPpZnU6GjzLl119GJ8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:70:e7:f3:60:c7:e0:77:ae:5c:df:72:54:a1:7f:55:6d:fd:
01:4d:30:18:03:d0:e9:2c:23:07:e6:1c:88:d8:c8:0d:7c:03:
ed:65:13:86:d2:86:55:8b:92:d3:bf:85:cf:9e:cd:0a:ee:89:
de:c1:0a:43:74:70:02:60:c4:58:8d:5a:3c:64:43:7c:65:d4:
0d:77:a8:a1:8e:67:6f:86:ba:f4:c4:13:8f:b3:97:e3:8e:3d:
d9:fe:50:1b:e2:05:54:f6:ae:55:30:f5:67:f8:53:fe:7d:6c:
ef:ab:09:ae:f6:68:bb:12:06:52:56:94:18:26:98:12:d8:6d:
39:0e:c6:a8:a5:bd:2b:05:68:4b:3e:5c:ba:f9:72:08:af:b4:
24:1b:13:80:2e:c4:b0:68:a1:8a:be:d4:4c:3e:70:b1:49:a0:
90:89:9d:16:25:1c:06:02:79:ab:04:a4:6b:80:0a:6f:45:73:
e4:a0:67:39:b9:07:77:34:e9:fe:c4:b6:6e:cd:9a:cf:4b:bd:
06:09:e9:1a:09:85:0b:54:72:89:cb:22:1c:18:b0:00:33:4b:
8f:05:ad:e5:7f:49:9e:a8:bb:79:18:2b:a7:ff:c1:48:36:2a:
11:5c:e7:c0:3a:fb:b8:8d:65:a3:88:eb:0d:7a:67:c8:2f:07:
ff:5c:1c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:40 2025 by rpki-client