Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.mft
File: oPedxcyv8VxqShP9qLcaj7drgow.mft (raw, json)
Hash identifier: 7eyLEg3gsKW93UUk2ku8OSZnvQMcCzwJkq02desxYIo=
Subject key identifier: 23:DD:02:5D:BF:F5:8E:9C:EF:36:85:54:E0:81:E6:3D:9C:24:81:92
Authority key identifier: A0:F7:9D:C5:CC:AF:F1:5C:6A:4A:13:FD:A8:B7:1A:8F:B7:6B:82:8C
Certificate issuer: /CN=a0f79dc5ccaff15c6a4a13fda8b71a8fb76b828c
Certificate serial: 019565C0E147D1DB59529FA3E35328B29CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPedxcyv8VxqShP9qLcaj7drgow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.mft
Manifest number: 06D0
Signing time: Wed 05 Mar 2025 10:01:34 +0000
Manifest this update: Wed 05 Mar 2025 10:01:34 +0000
Manifest next update: Thu 06 Mar 2025 10:01:34 +0000
Files and hashes: 1: oPedxcyv8VxqShP9qLcaj7drgow.crl (hash: EBYnDpIPy8ygcGZy4/LuC5zKo9TzFELG+kXGlB1ywAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:65:c0:e1:47:d1:db:59:52:9f:a3:e3:53:28:b2:9c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f79dc5ccaff15c6a4a13fda8b71a8fb76b828c
Validity
Not Before: Mar 5 10:01:34 2025 GMT
Not After : Mar 6 10:01:34 2025 GMT
Subject: CN=23dd025dbff58e9cef368554e081e63d9c248192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:af:0e:7c:1f:3d:10:e7:52:1e:6e:86:c9:01:
35:30:2c:f5:74:f3:a3:9f:20:75:2d:d7:8c:67:61:
72:f8:b5:0e:f9:79:fa:24:0b:0b:3e:04:9b:90:a7:
9f:82:27:cb:1c:a4:8c:c1:ef:fe:ac:c9:93:b7:b5:
27:d4:67:82:dc:92:29:5f:57:9f:bf:fc:ca:9b:69:
35:bd:a0:77:a4:8b:f5:12:49:d0:2a:73:00:40:bc:
fc:20:3d:38:22:3a:80:50:26:6b:34:8e:62:e8:d2:
95:c9:81:43:6a:cd:16:af:24:37:5b:a6:31:54:b2:
c2:ac:f3:59:c0:97:0e:7d:b4:8a:f3:05:c0:ce:5b:
9b:71:82:36:7c:75:e3:a3:87:a5:39:0a:0a:fd:1f:
c5:b3:5f:2f:69:64:ce:9f:e3:1d:08:76:a5:49:6a:
80:bc:86:5b:8a:b4:92:b9:5b:9f:e7:58:70:4a:14:
ba:9d:af:c8:9b:fc:ae:3c:a3:82:85:40:43:61:06:
50:a3:dc:89:31:d0:dc:ae:50:fd:4e:71:8b:8e:b4:
d3:c0:e4:e9:c9:0e:ad:99:48:15:e0:77:55:ae:f8:
c4:55:70:38:f6:c5:c9:16:f5:4a:84:64:2e:77:a3:
ba:a3:24:d4:8f:89:a7:b2:35:01:93:21:f5:d4:b0:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DD:02:5D:BF:F5:8E:9C:EF:36:85:54:E0:81:E6:3D:9C:24:81:92
X509v3 Authority Key Identifier:
keyid:A0:F7:9D:C5:CC:AF:F1:5C:6A:4A:13:FD:A8:B7:1A:8F:B7:6B:82:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPedxcyv8VxqShP9qLcaj7drgow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:71:95:1d:ec:5e:1a:b5:8e:4a:3a:34:18:bf:70:09:41:bb:
23:a8:e8:fa:94:24:b2:d8:9e:0f:b1:2b:43:e0:60:0e:2c:c9:
cc:f0:db:2e:93:f2:b1:02:04:87:5d:23:ec:e5:29:5e:71:cc:
dc:41:95:7b:e7:18:ac:7b:7a:82:b2:7e:98:4b:ea:32:77:fd:
a5:f8:94:21:a3:0c:73:34:33:27:0d:18:1c:83:b5:d4:a0:83:
99:a6:c1:48:f4:c9:b8:77:59:79:b5:84:e0:3e:ce:95:87:ba:
a9:0f:e3:77:d4:fb:cd:cb:89:e9:84:04:b0:49:dc:c6:f1:27:
93:f6:09:ca:ba:6b:26:80:45:8a:c5:e9:c2:04:73:0a:83:26:
82:2c:3f:b7:87:c7:65:20:29:22:a9:37:cf:2f:49:15:2a:f3:
d9:f9:c8:48:0b:52:58:78:be:c3:53:7c:f0:a9:35:3a:c1:b6:
a0:6b:c3:b3:d8:10:b0:c7:eb:f7:3c:49:a8:99:ff:79:dd:c5:
1a:23:6a:84:6c:02:05:8a:81:74:9f:e7:79:1c:4a:22:93:a1:
cf:ff:9e:dd:73:14:5f:72:72:5d:18:93:34:2d:eb:74:56:34:
e1:62:f0:2e:1e:dc:3d:a5:b3:30:2f:4e:b0:49:29:7c:8d:c8:
16:c5:e3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:47:41 2025 by rpki-client