Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
File: OqdpZQeVNJmPMK-OaabGYVk5gsg.mft (raw, json)
Hash identifier: LS8rSGTytDkxhMnGD08VmAO3tVbmhWG5M3X5roSabc8=
Subject key identifier: BE:19:63:B8:B7:27:BB:B6:B2:40:96:0D:23:72:F7:B1:52:8D:C8:83
Authority key identifier: 3A:A7:69:65:07:95:34:99:8F:30:AF:8E:69:A6:C6:61:59:39:82:C8
Certificate issuer: /CN=3aa76965079534998f30af8e69a6c661593982c8
Certificate serial: 0195E0466653B3EF534E8A60A624A2B926CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqdpZQeVNJmPMK-OaabGYVk5gsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
Manifest number: 1192
Signing time: Sat 29 Mar 2025 05:01:04 +0000
Manifest this update: Sat 29 Mar 2025 05:01:04 +0000
Manifest next update: Sun 30 Mar 2025 05:01:04 +0000
Files and hashes: 1: OqdpZQeVNJmPMK-OaabGYVk5gsg.crl (hash: rFCEgUPTh3n30UdrnxuTyusec9JkbhlVj5pa3rQ8PfQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:66:53:b3:ef:53:4e:8a:60:a6:24:a2:b9:26:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa76965079534998f30af8e69a6c661593982c8
Validity
Not Before: Mar 29 05:01:04 2025 GMT
Not After : Mar 30 05:01:04 2025 GMT
Subject: CN=be1963b8b727bbb6b240960d2372f7b1528dc883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:77:b3:02:11:e8:f9:0b:41:57:5c:a3:9f:
8f:3e:40:9d:3a:3a:e2:68:80:33:3a:b4:30:5c:46:
5a:0a:e6:86:41:54:8c:84:fe:2b:32:e9:19:2f:30:
c9:fa:aa:94:39:be:d0:2b:dc:90:db:fe:f9:14:82:
87:d0:41:50:57:3c:59:5e:eb:65:81:e3:ae:76:8a:
1a:c5:fd:42:89:1e:4e:6f:da:2c:e3:25:2a:29:0a:
8e:b9:29:f3:dc:65:26:07:5e:9f:6f:e1:93:c1:68:
99:ec:30:11:41:ea:f5:f9:79:36:56:87:b8:ed:cf:
bb:46:fe:76:b1:95:dd:05:02:fb:22:2e:18:00:d8:
62:27:03:81:2b:34:b1:21:b6:83:d3:9e:c9:d6:55:
28:d1:bb:c5:48:81:35:bc:76:dd:5b:c2:0a:ef:f2:
41:5e:bc:2e:51:8a:b3:5a:da:40:63:85:19:4e:fa:
80:28:97:40:45:c4:71:6e:20:d4:7c:2a:13:e7:33:
8c:89:22:eb:33:13:88:4f:61:be:24:03:0d:e0:fd:
ea:50:ad:5e:68:f0:3f:7c:5a:7a:d7:f6:4b:e7:14:
26:01:8b:dc:66:c1:93:da:17:39:60:1c:18:1e:7f:
0f:99:5b:5e:88:44:97:84:9e:78:ba:6f:53:61:b7:
80:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:19:63:B8:B7:27:BB:B6:B2:40:96:0D:23:72:F7:B1:52:8D:C8:83
X509v3 Authority Key Identifier:
keyid:3A:A7:69:65:07:95:34:99:8F:30:AF:8E:69:A6:C6:61:59:39:82:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqdpZQeVNJmPMK-OaabGYVk5gsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/a4ece0-a7f2-40f9-a994-caa3b87fb34d/1/OqdpZQeVNJmPMK-OaabGYVk5gsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:44:35:1a:75:67:c0:b5:84:87:5e:e1:21:d4:a6:72:e6:ca:
79:38:57:56:ad:3c:cb:9c:e0:c7:70:8b:51:cb:92:86:75:30:
ee:e1:34:93:5d:0d:99:a4:90:43:2f:17:74:70:1d:24:03:48:
c9:2a:09:ef:82:8d:09:3a:38:97:fc:66:e4:14:c0:b6:85:38:
a4:1f:ad:99:2f:c3:b7:e0:f6:ef:37:22:d8:e4:6c:4f:67:f2:
77:24:f5:46:82:d2:68:15:09:6b:97:d8:41:36:45:35:09:7a:
f1:af:ea:37:88:24:4a:19:e3:41:35:ba:5a:7d:fb:bf:9c:e7:
1d:ce:d8:4f:f7:dd:1c:d8:dc:8a:cf:63:3b:38:e2:e8:f3:a4:
5f:d7:87:71:b7:61:4d:9e:4f:ef:50:c5:c8:b3:3d:7a:5c:bf:
2b:45:cd:e7:7c:58:df:36:bb:72:c5:23:8c:34:16:dc:40:58:
9c:83:5a:7b:bd:71:87:39:dd:70:11:e8:13:59:51:1d:be:aa:
c2:a3:1b:71:9f:e7:2e:7c:6a:24:14:e8:1e:c1:9e:3b:2e:89:
50:45:e8:47:09:39:c6:27:98:55:57:3c:98:57:7a:c2:b5:f4:
5b:53:28:a7:0c:5b:b4:c6:51:b3:f5:79:a8:3f:39:ae:22:43:
22:b3:2a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:23:03 2025 by rpki-client