Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/5a2514-efec-499a-b00e-b726c1cac110/1/O6f2wLnkClXinPNiN8eJmPyx6uo.mft
File: O6f2wLnkClXinPNiN8eJmPyx6uo.mft (raw, json)
Hash identifier: 84t3eZoaEjrQXuP8CJhAtXpMWx5NYTAE5bf7h8dSKvA=
Subject key identifier: 81:D8:08:38:8F:24:65:4A:51:81:BD:C5:A9:30:BD:4B:47:D4:38:E3
Authority key identifier: 3B:A7:F6:C0:B9:E4:0A:55:E2:9C:F3:62:37:C7:89:98:FC:B1:EA:EA
Certificate issuer: /CN=3ba7f6c0b9e40a55e29cf36237c78998fcb1eaea
Certificate serial: 01909A5F6CA2A3683AF7B404FB99B5BA86A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O6f2wLnkClXinPNiN8eJmPyx6uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/5a2514-efec-499a-b00e-b726c1cac110/1/O6f2wLnkClXinPNiN8eJmPyx6uo.mft
Manifest number: 0521
Signing time: Wed 10 Jul 2024 02:01:03 +0000
Manifest this update: Wed 10 Jul 2024 02:01:03 +0000
Manifest next update: Thu 11 Jul 2024 02:01:03 +0000
Files and hashes: 1: O6f2wLnkClXinPNiN8eJmPyx6uo.crl (hash: QDqYfpg246007VrsjLwEdD1ZHvx0Yced0BjpR0IAM0E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9a:5f:6c:a2:a3:68:3a:f7:b4:04:fb:99:b5:ba:86:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ba7f6c0b9e40a55e29cf36237c78998fcb1eaea
Validity
Not Before: Jul 10 02:01:03 2024 GMT
Not After : Jul 11 02:01:03 2024 GMT
Subject: CN=81d808388f24654a5181bdc5a930bd4b47d438e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:79:26:14:fc:d1:1a:ee:3f:5d:a8:6c:6a:5e:
f0:38:30:2a:53:34:90:6e:f3:b4:31:19:d1:79:01:
21:fb:b0:cb:c7:df:0a:8d:04:ef:9d:fb:ec:24:6e:
48:fc:62:bc:bf:3d:6f:0c:ae:36:c0:3e:83:e6:14:
87:6d:35:d5:71:f8:79:94:cf:1f:87:e1:83:c4:8f:
74:8b:05:9c:88:06:99:4f:33:4a:61:ae:4b:5e:cb:
16:6a:bc:53:28:d1:10:f3:fa:48:7e:06:25:87:ff:
5f:b4:0a:60:fc:b2:b6:94:eb:5e:c2:36:58:1c:de:
95:66:ad:b7:4f:33:af:36:d3:c7:5f:28:dd:19:84:
d9:9e:17:5a:76:ec:a1:5a:09:26:b0:f6:8e:de:ad:
a3:ad:d8:3e:47:b1:68:52:97:66:fb:e3:79:e5:fd:
8b:0b:ca:3d:5c:e9:d5:a3:bf:7b:eb:ed:65:3a:23:
29:5d:b5:9c:a7:a3:47:6b:1a:61:71:6b:4a:d4:e0:
0d:0c:59:1c:ff:09:d8:a8:46:90:01:e0:18:c8:4c:
58:05:24:ab:2c:df:ff:15:bc:fe:d8:4d:59:42:fd:
8c:06:36:dc:f3:d5:f2:e4:7c:ad:ec:f2:3b:ec:0a:
16:29:3c:88:49:b1:c2:fa:ff:b6:8f:d7:c2:b3:18:
85:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D8:08:38:8F:24:65:4A:51:81:BD:C5:A9:30:BD:4B:47:D4:38:E3
X509v3 Authority Key Identifier:
keyid:3B:A7:F6:C0:B9:E4:0A:55:E2:9C:F3:62:37:C7:89:98:FC:B1:EA:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O6f2wLnkClXinPNiN8eJmPyx6uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5a2514-efec-499a-b00e-b726c1cac110/1/O6f2wLnkClXinPNiN8eJmPyx6uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/5a2514-efec-499a-b00e-b726c1cac110/1/O6f2wLnkClXinPNiN8eJmPyx6uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e5:74:ff:56:01:3d:f9:53:e2:80:ee:47:c5:2f:76:8a:12:
9e:33:5a:99:6a:5b:1c:15:01:12:c9:51:5c:32:c2:74:0f:aa:
0a:a5:d5:c2:08:be:ac:e0:db:4c:b6:4b:10:7f:46:9b:2f:a4:
bd:05:b7:d8:71:f0:09:79:3c:ae:f2:e1:e4:1b:51:76:92:8e:
78:8d:01:81:71:cc:b1:1d:90:40:51:ab:88:7c:71:99:66:29:
f0:39:3e:bb:a1:2f:12:a9:f2:b1:76:6c:d5:6b:4b:a0:b9:f9:
5b:18:68:89:06:6c:23:c0:7f:86:e5:71:aa:39:76:0a:40:0c:
7f:99:75:02:06:a1:d0:3f:dc:d0:50:ed:a2:b3:26:ed:a9:40:
e7:50:2f:fb:6e:c1:f3:36:6c:83:5f:f3:72:02:d3:fb:a0:e8:
cc:a1:1d:16:dc:32:08:66:62:02:22:97:c0:5f:12:9c:63:05:
f5:11:8b:2f:01:51:13:8e:94:69:28:bf:c4:64:48:49:da:43:
30:11:ea:fb:9d:bd:4d:70:a6:38:05:48:01:e0:15:e0:f2:9d:
70:df:18:7d:fb:46:f6:fe:46:0f:54:2d:d4:77:9b:a5:77:0a:
90:7c:01:70:bf:81:04:bd:ce:4a:03:3a:0f:69:d1:e3:90:1c:
cc:4e:0a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:56:48 2025 by rpki-client