Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json)
Hash identifier: M8V5ci1N8dzBPQ6vFMHca00mCAPTyqSVL6tKWs2VyS4=
Subject key identifier: C3:94:9D:19:B3:0F:82:4F:D0:D6:47:B2:0D:F1:8C:14:03:97:50:D4
Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Certificate serial: 0194BC04F246F0FAA9432EB04B5C60D28A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
Manifest number: 07E9
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: NE+gh7NtTV6xkeBzF2MjGnWYV41YB/oo8XQXzUFW9ks=)
2: O7YDGlReH1x3D0s7Ygr1Vy16MbI.roa (hash: WAs5UezYMvac542kW/ZhIkgbBXd8gscxgdqz/AR6xPE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f2:46:f0:fa:a9:43:2e:b0:4b:5c:60:d2:8a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=c3949d19b30f824fd0d647b20df18c14039750d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2e:75:9f:e0:af:a5:ff:15:d3:cf:ed:2e:b8:
b1:51:c5:57:14:72:2d:10:5a:c2:36:61:ac:34:dd:
d4:e4:91:c2:99:3c:45:4a:e7:12:3a:09:78:76:96:
03:c7:3b:80:b3:2e:9a:84:da:a7:34:c9:e9:8d:2d:
3f:3a:1a:91:9f:0a:84:33:14:6c:44:04:84:a2:9a:
12:9e:dc:74:dd:31:e1:e3:0a:b3:b9:e2:4b:3c:49:
bf:17:67:15:ea:c9:6c:60:05:ab:1a:e3:2a:74:99:
ba:cb:13:37:c4:c5:a1:6b:ba:d1:78:12:3b:19:e9:
92:6e:18:6c:b1:49:10:f2:86:da:eb:fa:37:f5:b8:
2c:fb:fb:bb:63:4a:4e:0e:7a:74:9b:eb:b8:af:c8:
50:8a:46:57:17:83:64:f3:63:57:61:99:11:4e:35:
1f:fa:93:a0:58:76:1a:12:29:0a:65:c4:88:11:44:
6a:8d:1d:74:90:95:db:8e:77:c5:17:ca:ea:db:9a:
af:ae:4a:6d:7a:08:a9:d7:22:6e:0c:e3:59:6c:97:
33:b5:53:a2:96:10:27:b4:3a:68:95:00:5f:2d:a3:
1a:27:8f:0a:86:ac:ec:9b:32:05:ea:de:53:03:81:
b7:bf:b1:49:89:da:86:35:93:cd:68:73:22:4f:f0:
aa:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:94:9D:19:B3:0F:82:4F:D0:D6:47:B2:0D:F1:8C:14:03:97:50:D4
X509v3 Authority Key Identifier:
keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ca:72:dc:7a:45:b7:c8:7b:1e:19:6c:60:6e:16:fb:6d:33:
80:70:1b:0b:49:74:15:a8:30:6d:eb:b7:fe:cc:dc:4b:bc:af:
4c:ba:79:cf:7c:0f:cb:5e:e8:11:51:2d:90:41:dd:1c:fc:2a:
ee:bc:21:b2:10:9a:8b:d7:35:97:7f:98:64:8a:ca:c4:5a:24:
f0:5b:43:60:fe:78:0f:06:42:b5:d0:fc:05:df:c0:2e:4c:6e:
11:e2:49:c2:70:8a:2b:50:b2:df:01:52:e5:f5:bc:d0:48:5f:
40:f2:8b:61:76:89:b4:41:d9:4f:15:1c:df:1f:46:ce:35:88:
d7:23:36:a0:19:9a:da:ee:aa:27:4d:bf:e1:96:8e:ca:92:7d:
14:7f:fe:bd:5f:21:ad:20:99:8f:49:f8:da:c5:4c:4b:e3:53:
db:01:10:5b:a6:18:ce:c7:94:98:f5:56:d8:ce:9b:c3:52:ac:
de:e7:31:b8:92:b4:7a:cd:df:76:a0:a2:27:ed:49:17:56:c7:
6c:9e:3a:43:53:f6:25:88:77:d3:8d:30:d6:91:b6:79:0b:67:
1a:75:da:55:07:bf:1f:fe:ec:07:e1:20:4e:b4:b2:67:b6:cc:
d3:79:fe:fc:38:e3:97:8d:47:49:23:7b:8b:eb:9b:17:c9:9b:
cb:cb:67:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:26:11 2025 by rpki-client