Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
File: 0XSpf-m-DvYs3ln0GppfCZGCkUc.mft (raw, json)
Hash identifier: 8KezUkCustn/+Cq6tjL7X6z6TJiUDLwPzoKWr3Fh21I=
Subject key identifier: 0F:4E:A6:F0:AE:79:8D:E3:65:4C:D1:1E:B8:89:C1:3B:75:08:68:30
Authority key identifier: D1:74:A9:7F:E9:BE:0E:F6:2C:DE:59:F4:1A:9A:5F:09:91:82:91:47
Certificate issuer: /CN=d174a97fe9be0ef62cde59f41a9a5f0991829147
Certificate serial: 0195EC4ABF3CDBC78A128B67F2D8549FF468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0XSpf-m-DvYs3ln0GppfCZGCkUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
Manifest number: 10B3
Signing time: Mon 31 Mar 2025 13:01:16 +0000
Manifest this update: Mon 31 Mar 2025 13:01:16 +0000
Manifest next update: Tue 01 Apr 2025 13:01:16 +0000
Files and hashes: 1: 0XSpf-m-DvYs3ln0GppfCZGCkUc.crl (hash: LRZmHqcIQWki4NfwqsjFYaxPYus42+fK4663U0/0ZiU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ec:4a:bf:3c:db:c7:8a:12:8b:67:f2:d8:54:9f:f4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d174a97fe9be0ef62cde59f41a9a5f0991829147
Validity
Not Before: Mar 31 13:01:16 2025 GMT
Not After : Apr 1 13:01:16 2025 GMT
Subject: CN=0f4ea6f0ae798de3654cd11eb889c13b75086830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:25:a8:d0:af:46:23:42:45:24:ba:73:32:
68:9c:22:03:42:21:8d:1e:3d:a9:b3:aa:51:47:e0:
d7:69:bf:af:f1:78:70:69:8b:da:45:d5:08:54:76:
b1:6d:67:4b:49:94:8a:9b:7d:39:93:c2:8a:2b:45:
10:63:53:fd:65:bd:6c:d1:fc:4f:5c:8f:93:23:01:
1f:f0:d4:c9:7e:17:93:09:e6:fc:83:5c:ab:f5:01:
ba:68:b5:0d:89:37:0c:f1:d8:08:39:a5:9a:1a:0f:
15:83:a2:40:77:1d:e7:43:61:d7:dc:b5:9b:b7:4c:
21:01:13:68:88:95:e1:7c:c1:fe:b7:ad:f6:99:ae:
03:25:6a:64:fc:32:25:6e:c7:65:fd:7d:e4:d9:18:
9b:d3:01:d9:01:d4:95:a0:6c:9b:6f:27:7a:63:0f:
c3:59:58:35:fd:58:1d:e6:d1:96:03:21:00:d4:a8:
7c:ea:06:27:ea:d7:e5:14:97:f2:25:7c:38:40:4b:
4d:11:a6:08:fa:4c:f4:84:55:6e:2f:ff:f9:6e:fa:
a8:36:46:0b:5a:9d:a0:b7:82:7c:2c:57:67:84:35:
0c:0f:56:aa:9d:a7:d6:b5:34:b4:c1:26:de:e6:22:
ea:84:a7:0f:38:fb:81:ac:cf:21:35:38:45:17:fa:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4E:A6:F0:AE:79:8D:E3:65:4C:D1:1E:B8:89:C1:3B:75:08:68:30
X509v3 Authority Key Identifier:
keyid:D1:74:A9:7F:E9:BE:0E:F6:2C:DE:59:F4:1A:9A:5F:09:91:82:91:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0XSpf-m-DvYs3ln0GppfCZGCkUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6326c6-7578-47ec-827d-847d805f38d0/1/0XSpf-m-DvYs3ln0GppfCZGCkUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7e:f7:7c:48:70:56:3f:6f:9c:8a:f9:b4:eb:15:37:4b:fa:
ef:c3:f4:79:17:5b:75:81:d6:50:34:ad:b7:b1:0e:64:c6:1c:
44:c9:8f:8f:eb:08:2a:26:0d:56:00:46:e8:51:02:50:e3:2a:
ed:8b:77:ae:e2:a7:e0:05:5c:f9:9c:85:67:2d:fc:67:08:d7:
9e:37:bc:85:14:45:20:c5:ff:12:3e:99:ef:16:1f:48:76:bd:
5f:44:37:1d:1d:87:0b:eb:94:85:25:05:6f:fc:41:39:12:83:
9c:fc:4a:c8:e4:04:04:58:0d:81:d0:72:cd:34:33:8b:f2:0c:
78:88:fe:84:0d:88:14:1d:67:9d:cb:30:c4:ac:8b:98:0b:41:
78:99:c1:05:7e:aa:f2:e1:59:a7:c4:3e:f6:09:b5:3d:31:c2:
d0:b9:5b:b6:3d:4b:ea:dd:07:e0:f0:91:c0:67:7d:b1:b4:33:
a1:ba:1b:53:d7:91:2e:34:58:95:4e:cd:c5:0f:bd:9f:af:0c:
83:1e:79:c8:d3:16:63:18:77:31:45:72:43:54:ef:8d:ed:78:
48:0b:b9:c7:47:db:90:16:21:9c:44:06:34:d1:5a:1f:4a:2a:
65:67:32:a4:32:ee:23:22:dc:bf:18:3d:59:a2:83:cf:9d:92:
41:84:22:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:47:41 2025 by rpki-client