Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11834c-3d88-4301-8f66-fa77096e30df/1/oytq-xi3Lyv_J6bWLKd93vdTfQ0.mft
File: oytq-xi3Lyv_J6bWLKd93vdTfQ0.mft (raw, json)
Hash identifier: xK1BJaU6Mi61C8cgEAXgiNaaoMhR7AhlQ/DLUKV6xfM=
Subject key identifier: EE:1C:51:2D:3D:CC:C0:4E:5E:01:B9:61:51:67:85:DF:50:19:C7:28
Authority key identifier: A3:2B:6A:FB:18:B7:2F:2B:FF:27:A6:D6:2C:A7:7D:DE:F7:53:7D:0D
Certificate issuer: /CN=a32b6afb18b72f2bff27a6d62ca77ddef7537d0d
Certificate serial: 0195A43207C9CA9EABEAB026EBBB7CE347E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oytq-xi3Lyv_J6bWLKd93vdTfQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11834c-3d88-4301-8f66-fa77096e30df/1/oytq-xi3Lyv_J6bWLKd93vdTfQ0.mft
Manifest number: 0F28
Signing time: Mon 17 Mar 2025 13:01:37 +0000
Manifest this update: Mon 17 Mar 2025 13:01:37 +0000
Manifest next update: Tue 18 Mar 2025 13:01:37 +0000
Files and hashes: 1: oytq-xi3Lyv_J6bWLKd93vdTfQ0.crl (hash: 4XSKE9pRmwy1egZyNxfcBTP8GXfRsKcqK5T0aezmzN4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a4:32:07:c9:ca:9e:ab:ea:b0:26:eb:bb:7c:e3:47:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b6afb18b72f2bff27a6d62ca77ddef7537d0d
Validity
Not Before: Mar 17 13:01:37 2025 GMT
Not After : Mar 18 13:01:37 2025 GMT
Subject: CN=ee1c512d3dccc04e5e01b961516785df5019c728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cb:fc:0a:fa:13:11:a7:62:6e:97:7c:da:d4:
81:9f:ff:4f:24:f8:89:f0:60:77:6f:02:fa:fe:2d:
c7:29:de:f5:91:83:88:80:7a:81:35:59:ba:52:be:
96:6b:3f:62:96:c1:e5:9f:96:f6:6e:f2:f2:d1:0d:
30:69:82:1e:bc:e3:ac:2c:12:8b:f3:7d:85:b8:aa:
ad:22:4b:7c:eb:80:d8:d5:6a:74:33:fb:0b:df:c5:
35:af:9d:4b:e8:e9:52:ba:ba:41:74:1f:15:c1:52:
86:6b:d3:25:0b:96:41:b7:8a:70:75:5a:af:45:fe:
93:be:3d:05:02:35:75:b7:1e:39:79:36:05:ea:63:
67:8d:a6:98:4a:5a:16:09:ba:39:64:c2:20:ff:95:
2a:4f:e6:f9:5f:ab:f7:65:72:bf:63:eb:84:77:c6:
57:eb:4a:7a:cb:da:05:38:17:b3:44:3e:af:4e:50:
28:e0:21:d2:ea:c5:75:99:81:bb:94:4f:9b:d8:c8:
a2:49:cd:e4:85:60:9e:21:ca:c1:56:d0:a0:87:68:
e5:3a:7d:f8:10:bd:fe:22:62:9e:61:ae:d9:02:44:
54:d6:1d:76:f4:b2:28:a5:dd:11:f5:d5:da:9c:14:
52:f0:a2:33:99:3d:3b:9d:bb:00:5c:8d:52:b4:88:
d7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1C:51:2D:3D:CC:C0:4E:5E:01:B9:61:51:67:85:DF:50:19:C7:28
X509v3 Authority Key Identifier:
keyid:A3:2B:6A:FB:18:B7:2F:2B:FF:27:A6:D6:2C:A7:7D:DE:F7:53:7D:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oytq-xi3Lyv_J6bWLKd93vdTfQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11834c-3d88-4301-8f66-fa77096e30df/1/oytq-xi3Lyv_J6bWLKd93vdTfQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11834c-3d88-4301-8f66-fa77096e30df/1/oytq-xi3Lyv_J6bWLKd93vdTfQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:52:6c:8b:6d:b4:4b:3a:ed:e3:82:78:71:63:5b:3e:33:38:
1f:3b:09:c4:13:e6:e6:73:e3:33:45:d9:c2:13:fc:05:ee:d5:
1d:50:dc:cc:89:0b:1c:fb:65:3b:e1:cc:f4:86:8a:93:66:aa:
7e:b6:bd:51:07:38:f2:d7:26:4d:28:8d:24:3c:81:fd:72:98:
64:c2:9c:38:10:a2:47:25:7f:20:0f:6a:77:c9:30:12:56:ce:
99:e3:56:47:b9:86:56:af:d5:3a:c7:ce:4c:93:29:d1:6f:1d:
be:ab:5d:d0:46:23:a7:96:53:3c:5c:90:b5:9f:57:8b:19:05:
e7:87:f0:0f:57:ed:48:2f:af:d4:87:b3:66:62:a7:42:85:56:
ce:2e:97:7f:5f:d3:04:f0:d9:10:aa:a4:26:c4:3f:89:a6:10:
a4:89:a9:94:32:f1:74:e0:94:94:04:c4:25:a7:7a:14:a7:6d:
c3:04:60:fc:d7:d2:aa:d8:2b:82:26:2e:70:65:75:f1:3c:88:
e7:65:ff:7b:f3:34:57:2e:b2:fa:6c:09:04:66:fe:4f:07:85:
3c:d1:48:04:a1:f3:c2:b9:33:2a:ba:f2:1b:94:6f:1b:5b:94:
a3:ed:8a:b4:e9:7e:0d:47:0b:f8:4d:bf:36:c6:f6:af:e0:a9:
98:10:31:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:57:55 2025 by rpki-client