Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8f5ad0-533e-4155-b6a1-6a9391e39966/1/oR1tW6LV_Qmx3CCAVKRaLNqNLiU.mft
File: oR1tW6LV_Qmx3CCAVKRaLNqNLiU.mft (raw, json)
Hash identifier: ftUPMspfTBDnB01yGaMjO0fSfmZgnMhzcB4aIIX5Vzo=
Subject key identifier: 0A:43:9C:74:13:DB:31:45:95:B1:F7:49:E2:66:E0:E1:34:3E:BF:20
Authority key identifier: A1:1D:6D:5B:A2:D5:FD:09:B1:DC:20:80:54:A4:5A:2C:DA:8D:2E:25
Certificate issuer: /CN=a11d6d5ba2d5fd09b1dc208054a45a2cda8d2e25
Certificate serial: 01965D5F1C5B18AE14BF2103E3CA0539AFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oR1tW6LV_Qmx3CCAVKRaLNqNLiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8f5ad0-533e-4155-b6a1-6a9391e39966/1/oR1tW6LV_Qmx3CCAVKRaLNqNLiU.mft
Manifest number: 0847
Signing time: Tue 22 Apr 2025 12:00:36 +0000
Manifest this update: Tue 22 Apr 2025 12:00:36 +0000
Manifest next update: Wed 23 Apr 2025 12:00:36 +0000
Files and hashes: 1: oR1tW6LV_Qmx3CCAVKRaLNqNLiU.crl (hash: dBfBI0Zec02lJHQJCKI2g2qZ313LDPl5AM6Xv86KIWA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:1c:5b:18:ae:14:bf:21:03:e3:ca:05:39:af:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11d6d5ba2d5fd09b1dc208054a45a2cda8d2e25
Validity
Not Before: Apr 22 12:00:36 2025 GMT
Not After : Apr 23 12:00:36 2025 GMT
Subject: CN=0a439c7413db314595b1f749e266e0e1343ebf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:39:e9:6e:e6:0d:3d:9d:88:64:80:9f:89:
1c:82:7c:cd:eb:d5:0d:6f:e4:e8:f7:31:aa:e5:ef:
31:5c:31:b7:e5:05:9d:f1:b0:6d:d0:7b:58:76:12:
7b:dc:44:24:d3:9e:7e:13:c1:8c:ac:9e:7a:1b:88:
84:94:bb:72:fd:3b:bd:4a:79:1e:45:99:a0:79:b6:
87:f1:8f:d4:d5:f6:eb:ac:5b:4a:a7:8b:9f:39:27:
a3:84:a4:e3:d1:91:06:b1:c9:38:47:82:5b:dc:98:
bd:1a:fa:37:d6:97:d3:71:0b:fa:31:88:e1:21:56:
ed:ca:0c:2b:47:57:f4:e5:4c:cb:62:e7:b6:b9:25:
b9:a8:e4:99:50:a5:3f:b2:32:4e:78:c7:57:dd:8b:
ca:3e:5f:9e:52:fe:a5:3c:0d:2a:6f:17:17:cd:55:
1b:15:8b:dc:94:1e:33:3b:c3:ce:cf:b6:8b:1d:45:
58:c1:25:0b:ac:94:d2:7c:e2:b0:c7:07:b4:8e:04:
4c:4b:6e:e4:23:7b:83:9c:d5:a1:61:98:6d:3e:e5:
f6:55:db:8d:f8:ba:40:05:4b:46:21:d9:b2:8c:1f:
f6:e6:43:4a:45:7c:7d:47:2d:8b:ce:64:88:97:09:
68:9e:8b:bf:77:dd:dd:ba:88:c4:15:02:85:5e:d0:
e8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:43:9C:74:13:DB:31:45:95:B1:F7:49:E2:66:E0:E1:34:3E:BF:20
X509v3 Authority Key Identifier:
keyid:A1:1D:6D:5B:A2:D5:FD:09:B1:DC:20:80:54:A4:5A:2C:DA:8D:2E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oR1tW6LV_Qmx3CCAVKRaLNqNLiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8f5ad0-533e-4155-b6a1-6a9391e39966/1/oR1tW6LV_Qmx3CCAVKRaLNqNLiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8f5ad0-533e-4155-b6a1-6a9391e39966/1/oR1tW6LV_Qmx3CCAVKRaLNqNLiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c5:b2:6c:7b:fb:34:fe:f1:24:a0:12:e6:b4:c8:3c:42:8b:
f9:ab:0c:c1:6f:7a:70:a7:8c:e4:96:16:6c:8d:27:2a:ea:19:
55:41:95:27:69:2c:ba:4c:0c:0a:e6:32:42:6a:58:43:44:cd:
51:16:1a:25:cb:2c:04:ed:5e:6e:bf:90:1c:3b:53:0d:0f:67:
0f:74:db:e1:f6:f5:13:e5:2d:47:c6:8e:5d:4d:28:47:1b:6d:
5d:2b:2d:49:31:a6:14:41:21:d0:3c:2a:6e:10:ec:b9:be:98:
86:cc:41:c1:50:12:19:95:3f:f1:65:ec:00:9e:72:8a:4d:5c:
7e:5e:10:a0:02:cd:a3:3b:39:58:b7:f1:fd:30:8a:ef:20:19:
12:92:f0:21:de:a6:a4:d4:11:71:e1:59:f5:0b:0d:09:9c:32:
2c:49:3e:0d:bf:41:ac:f6:cb:03:d5:52:3d:9e:0d:6b:7c:ba:
f2:06:8d:07:ed:2d:1c:de:24:16:a4:92:5a:66:3d:64:2d:df:
cc:14:f8:63:a3:fa:b4:49:17:89:ee:57:f0:95:5a:8b:17:60:
39:31:8c:81:0d:e8:3d:66:2e:d1:de:98:31:90:11:a5:6b:88:
a6:67:f2:18:84:38:14:e3:b7:16:57:fe:e8:25:b7:9b:ae:75:
62:29:bd:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:23:15 2025 by rpki-client