Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
File: DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json)
Hash identifier: uuzZG7c8UgR52Phqwcm+KnvHf7qz7ss8LXlatbfe9RA=
Subject key identifier: 43:B7:1D:25:75:DC:CB:B3:42:B3:38:77:12:0A:11:57:2F:5F:42:79
Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
Certificate issuer: /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Certificate serial: 0194BD4EB32D7A12388AC5BA53096372ABFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: sPxfn/vROXk5QcUh3InSSdcPc4yr9tOJSAXNQBugUpA=)
2: V9zLJ_snXWssBPY1Rmgu3ZTD-rU.roa (hash: hUff0lfnMQTwyppmA7CbM6Vyj9Moq1TvnfUvdLLp36w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b3:2d:7a:12:38:8a:c5:ba:53:09:63:72:ab:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=43b71d2575dccbb342b33877120a11572f5f4279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cf:04:5b:8a:5c:bc:95:06:74:48:4f:6a:2d:
4b:d0:fa:d8:ec:4d:61:2a:87:16:ef:e5:24:ec:e7:
fd:dc:33:c5:ab:37:2a:54:e0:46:c8:5f:6c:c1:49:
24:97:8e:10:1e:9a:c5:85:3d:75:00:e6:cd:e6:6e:
c1:c9:c6:e9:29:04:4a:15:c9:28:b5:22:80:16:7d:
85:42:1c:84:7d:9d:96:86:3b:cb:21:93:ab:5a:4b:
b1:30:b2:ee:d1:32:0a:85:e0:17:bd:f2:30:7c:38:
c2:a2:e0:5f:f4:87:ab:83:55:cb:90:49:bb:8c:b1:
a1:f5:69:5e:4a:79:4a:1a:27:39:cf:6c:38:91:32:
4b:2e:2b:46:18:7d:d3:a1:cd:c3:8f:11:ab:f6:a1:
9c:ed:09:57:58:3d:3b:5d:b3:f0:d3:30:33:b7:74:
6c:23:44:c3:88:75:1b:92:fb:93:e4:e5:ee:d4:6e:
6d:21:bf:dd:1e:91:9b:8c:8b:f0:4e:9d:86:2e:4b:
81:89:30:e9:93:7e:5f:89:d3:c8:db:fe:eb:ab:1f:
b3:d9:66:1a:0e:97:d3:a5:55:da:9d:f7:4b:b3:6b:
ad:77:b4:2b:52:39:5d:73:b3:eb:01:ce:87:8e:9a:
f3:51:83:b2:a0:8d:d1:2f:82:67:15:0c:fe:fa:78:
76:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B7:1D:25:75:DC:CB:B3:42:B3:38:77:12:0A:11:57:2F:5F:42:79
X509v3 Authority Key Identifier:
keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:27:cd:91:1e:77:ca:c5:af:af:ff:33:16:a3:f5:66:0c:fa:
8e:0f:50:f0:3b:e2:61:64:e5:7a:5a:49:8f:94:17:c8:1c:7c:
10:2a:c7:a6:33:2b:92:6b:7f:60:0c:f5:8f:fc:5c:f1:db:fd:
c5:36:13:d6:26:71:d5:da:37:83:15:7f:cc:9c:f2:2a:fc:3b:
e1:0e:55:f2:c4:73:9b:98:39:bd:63:4f:d1:72:64:45:96:13:
0b:82:1f:57:af:6e:8b:5b:85:85:3b:24:b7:5a:6e:f6:7b:a8:
71:8d:fa:0a:d3:b0:60:6f:a5:c4:3b:cb:2e:5a:e2:5c:7b:98:
a7:14:92:1a:df:c3:f0:fe:31:70:a7:62:70:f4:bf:b9:b2:3d:
66:3a:48:c8:ef:0c:e3:f3:f0:ae:bf:16:5f:b6:65:38:f6:7f:
e1:f2:ec:56:27:b4:eb:a1:a4:8e:8d:ad:c1:d7:b4:30:1a:a4:
f1:38:19:df:02:ab:3b:b9:05:f8:47:65:ed:d1:46:41:fc:97:
91:99:13:4b:d2:f0:be:7a:2c:f3:0d:2d:cd:e6:d2:33:06:3f:
22:8c:5d:f0:68:8a:4c:48:ff:1a:f1:0f:85:42:e7:86:d6:e6:
e7:99:41:31:96:07:e5:f7:6a:c7:0f:b7:ae:e0:64:f3:32:bf:
5f:2f:71:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:26:42 2025 by rpki-client