Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.mft
File: oBhxQsOFxByo--yy9VpP_wB5vPQ.mft (raw, json)
Hash identifier: Y5mI0eJh0rWpT8235qoW7d+IX4Fq3kIErlxcl0jDvTE=
Subject key identifier: B9:D3:33:99:E6:B2:72:B7:A8:C0:FC:49:55:1F:83:E1:AB:D5:38:48
Authority key identifier: A0:18:71:42:C3:85:C4:1C:A8:FB:EC:B2:F5:5A:4F:FF:00:79:BC:F4
Certificate issuer: /CN=a0187142c385c41ca8fbecb2f55a4fff0079bcf4
Certificate serial: 01967B32EC6F5097C993CD302A1E0E4FE4CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBhxQsOFxByo--yy9VpP_wB5vPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.mft
Manifest number: 07EB
Signing time: Mon 28 Apr 2025 07:00:56 +0000
Manifest this update: Mon 28 Apr 2025 07:00:56 +0000
Manifest next update: Tue 29 Apr 2025 07:00:56 +0000
Files and hashes: 1: oBhxQsOFxByo--yy9VpP_wB5vPQ.crl (hash: SFIolcCiN5tepWACUekixsBcM7q/VkRxC65/YpY4Kv4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:ec:6f:50:97:c9:93:cd:30:2a:1e:0e:4f:e4:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0187142c385c41ca8fbecb2f55a4fff0079bcf4
Validity
Not Before: Apr 28 07:00:56 2025 GMT
Not After : Apr 29 07:00:56 2025 GMT
Subject: CN=b9d33399e6b272b7a8c0fc49551f83e1abd53848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:83:59:b9:c4:ac:ee:db:b7:eb:67:16:53:
6e:d3:c7:6d:15:fc:7a:92:89:6b:9f:9e:e5:54:2e:
63:6b:a8:a9:32:10:e4:cf:19:0d:25:97:82:01:5e:
6f:0b:e1:5a:a8:03:5a:8d:da:33:5b:d9:6f:73:7e:
18:7e:7e:84:d7:1f:13:a9:2c:21:cb:f2:9e:bb:e9:
08:a0:96:fd:28:11:94:85:22:cd:c2:03:9d:6c:f8:
09:00:70:8d:b2:ea:ae:13:83:cf:2c:17:19:27:39:
39:70:de:f6:52:63:30:39:43:1f:35:65:82:53:95:
4d:0e:60:c0:1b:d2:6c:6e:e9:ff:40:49:5c:05:f1:
eb:b1:4a:81:39:da:43:c3:80:82:5f:55:96:1c:8c:
96:d8:57:1f:4e:82:40:ee:45:4e:3d:9a:e1:42:e3:
40:55:f2:40:a6:c2:36:af:b9:78:ca:a2:a4:fe:b9:
22:1f:2c:6b:1a:48:20:37:76:8c:9e:08:ba:d4:08:
76:78:12:da:c2:28:33:ca:97:f7:fe:a3:c2:d5:1c:
d3:dc:2d:b9:ad:1b:31:54:1d:1b:de:89:12:3b:a0:
20:3e:e6:87:e6:f1:b1:34:e4:bf:4d:e6:d4:ba:96:
cf:4c:46:1a:17:47:73:c8:25:cd:19:15:49:41:25:
f9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D3:33:99:E6:B2:72:B7:A8:C0:FC:49:55:1F:83:E1:AB:D5:38:48
X509v3 Authority Key Identifier:
keyid:A0:18:71:42:C3:85:C4:1C:A8:FB:EC:B2:F5:5A:4F:FF:00:79:BC:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBhxQsOFxByo--yy9VpP_wB5vPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8a33aa-af38-4c4e-bad7-b91f50c5b7e0/1/oBhxQsOFxByo--yy9VpP_wB5vPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9d:23:e8:f2:fe:a3:91:6e:56:01:3d:a2:6e:78:f9:fa:18:
2b:63:5f:f7:03:52:52:7c:5a:57:6b:13:57:4d:b4:9f:3d:22:
d8:29:f9:ee:33:fe:f6:d5:4e:21:af:83:e7:e4:4e:de:1c:11:
b5:b8:19:11:db:38:8c:58:5c:1a:bb:69:cb:2c:71:50:34:39:
06:ae:a3:d2:c4:22:12:96:35:28:8b:8c:42:c0:53:11:c4:91:
44:7c:bd:3e:a2:28:ee:29:e5:43:fa:52:32:e1:0c:f7:ac:45:
df:1a:52:36:00:75:58:c7:7a:2f:4b:f8:ac:98:0f:6b:28:b9:
74:38:f4:ef:4f:1e:96:38:c2:15:79:70:9a:f6:5e:29:92:fb:
47:85:0a:33:15:30:e7:db:f3:f0:79:3a:98:b9:a2:10:6c:be:
b2:da:c0:19:26:8e:d2:7d:d8:27:eb:c3:91:75:9d:d7:9b:ea:
61:da:6e:70:b2:22:d1:0d:fe:47:46:e8:4f:32:a3:cc:77:9b:
ca:b3:d8:34:ea:98:5d:01:f1:fa:d2:be:c7:f1:27:ca:2a:07:
a4:3d:db:47:d3:ba:2c:7f:6d:99:1d:03:bb:fc:e7:db:06:1c:
aa:9e:bc:78:21:55:4d:44:2e:07:6e:ea:98:c2:55:7e:82:14:
cb:79:76:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:41:58 2025 by rpki-client