Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
File: O4RSPDky4tGYBGI0uWLg3FGr9YY.mft (raw, json)
Hash identifier: ozr/KK714yLLr34y7Au3UwkADax1vR2LoltKfsT/k4Q=
Subject key identifier: C8:B9:2F:B9:4F:66:19:B2:83:61:B7:03:59:2A:D3:39:EF:A5:0B:AE
Authority key identifier: 3B:84:52:3C:39:32:E2:D1:98:04:62:34:B9:62:E0:DC:51:AB:F5:86
Certificate issuer: /CN=3b84523c3932e2d198046234b962e0dc51abf586
Certificate serial: 0195E159EE87E16D2A75D22430D9A7301EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4RSPDky4tGYBGI0uWLg3FGr9YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 10:02:02 +0000
Manifest this update: Sat 29 Mar 2025 10:02:02 +0000
Manifest next update: Sun 30 Mar 2025 10:02:02 +0000
Files and hashes: 1: O4RSPDky4tGYBGI0uWLg3FGr9YY.crl (hash: /ELH0nTXmiavXhmB+4dJ0UwjJ4J1oQ0YxwZmlww4wlA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:ee:87:e1:6d:2a:75:d2:24:30:d9:a7:30:1e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b84523c3932e2d198046234b962e0dc51abf586
Validity
Not Before: Mar 29 10:02:02 2025 GMT
Not After : Mar 30 10:02:02 2025 GMT
Subject: CN=c8b92fb94f6619b28361b703592ad339efa50bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:ad:bd:a4:3d:49:ce:23:a6:95:a9:9d:fe:
5c:ed:10:0d:47:d0:37:8b:9c:40:ba:4f:45:98:6d:
77:40:e2:94:82:4d:95:3d:36:15:1a:24:f1:f8:3e:
98:3f:a6:52:0e:59:4e:b7:f0:4b:f4:3b:56:ff:a6:
eb:ca:94:a4:96:29:a8:eb:78:98:87:ee:80:7f:56:
55:a0:f1:e9:8d:c1:2e:d7:a6:58:f0:95:2c:a5:d8:
ca:c7:d4:33:b2:05:69:71:85:56:51:fa:92:6d:01:
3c:10:63:d3:50:09:7c:54:f7:37:16:6b:28:cb:06:
f2:14:a2:90:7d:88:7a:50:ce:c3:66:66:65:2a:d5:
46:1f:b2:a5:e0:ee:5f:e0:c9:8b:79:c5:23:17:66:
db:16:dc:a6:df:8c:ca:0b:d7:45:64:77:28:2f:a0:
e7:e7:60:b2:9f:bc:20:f3:88:58:e6:6e:ab:53:9e:
d5:01:83:1c:74:f0:6e:90:c6:27:21:57:de:fc:60:
9b:52:e5:c7:6b:04:2d:d4:a3:73:8d:09:f0:c7:2b:
1c:b0:70:be:96:5b:b7:0f:d6:85:b5:22:42:53:02:
46:8e:e1:63:b2:68:a5:a6:6a:2f:4d:99:d4:bf:31:
f9:68:e6:10:44:11:9d:e2:1f:4e:97:cf:22:7b:c6:
17:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B9:2F:B9:4F:66:19:B2:83:61:B7:03:59:2A:D3:39:EF:A5:0B:AE
X509v3 Authority Key Identifier:
keyid:3B:84:52:3C:39:32:E2:D1:98:04:62:34:B9:62:E0:DC:51:AB:F5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4RSPDky4tGYBGI0uWLg3FGr9YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/640a5e-ed52-47b0-bcff-bdf5c780742e/1/O4RSPDky4tGYBGI0uWLg3FGr9YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c1:5a:c8:6f:11:5c:04:44:dc:dc:21:6f:91:c9:cc:63:66:
67:7f:75:74:d2:be:cc:e6:8e:ac:40:8b:04:b7:b5:bd:4b:f9:
93:a7:19:58:71:bd:ca:05:3d:41:a2:f0:9c:59:f9:3a:4f:69:
f8:12:6c:ab:b7:db:4b:24:70:67:a8:13:bd:d2:a7:56:4e:e3:
27:b3:45:de:36:95:bf:e9:23:82:6e:60:97:48:38:d8:6d:4d:
bc:46:d7:4c:23:58:7f:2c:51:73:a2:5a:c1:04:38:b9:e9:46:
b1:95:06:15:a0:32:aa:7d:7c:9e:06:d7:51:9b:ea:97:4a:f8:
ab:4f:db:a0:89:d8:58:cc:b9:52:d3:3a:f7:a7:70:1c:da:d4:
78:cf:b0:77:e9:33:48:c1:07:0e:c7:56:8a:92:4d:3e:cd:d3:
aa:a1:71:ab:cf:c1:20:aa:79:51:d0:c7:06:b8:6b:76:6c:6d:
30:59:5b:fe:eb:b5:1f:d7:0f:43:c7:c8:e7:e1:ff:be:7c:14:
d6:c3:48:6b:f6:6c:08:d2:cc:98:be:52:5c:07:21:86:cb:41:
f0:84:bb:f5:46:a1:5e:20:e1:8a:49:3e:45:3c:cd:81:74:55:
fc:30:f5:1d:4f:81:56:6f:59:4f:2b:90:65:ec:5e:7d:8f:72:
68:6f:fd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:57:24 2025 by rpki-client