Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: oXR/j55N6zdV17xSDLOD6cuyJtywxi+bBg98DDT/oM8=
Subject key identifier: 27:93:16:B3:B8:D2:93:26:6C:C9:F6:39:65:B2:2E:B0:3A:CF:03:E0
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 0194BD4EB782DF305F451AE49B5B5E6B1F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 06B9
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: j+EjOXCrlhmT1hLde9c4luiyBdgha3VpmoQPBEas5w8=)
2: lbzZ5Xd-Bxx74-HdFugAtLWfqT0.roa (hash: MO8BCssJP9Ug+UVQ/493gxdacSXvZ1bCntr7vQJ6/Y0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b7:82:df:30:5f:45:1a:e4:9b:5b:5e:6b:1f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=279316b3b8d293266cc9f63965b22eb03acf03e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8b:42:ca:36:d0:98:c6:2c:6c:cc:55:b1:56:
40:a9:3b:ee:c4:ae:07:40:b3:fb:ed:bb:5c:f0:7d:
3b:70:d5:2f:6e:e9:f2:4d:91:d8:eb:26:f7:7d:fd:
1d:40:46:4b:f9:16:dc:5e:e5:99:48:63:ac:88:5f:
c6:30:6d:12:56:61:a1:b2:94:1f:30:ac:b9:cd:ed:
0f:2e:e8:1e:8b:c1:1b:e6:78:61:3b:d8:18:99:64:
6b:67:bb:4a:ef:36:c2:c1:eb:5f:35:a8:ff:95:db:
4c:b4:bf:cf:94:00:ac:29:07:d8:b2:35:52:43:db:
de:1a:33:f9:33:bc:77:d5:99:8c:77:87:d9:ac:2d:
04:1f:83:91:bb:58:c0:98:6f:6b:3e:c7:07:52:4d:
09:98:be:29:80:56:75:b5:d7:c0:16:e9:c3:5d:bf:
c6:93:21:a2:2f:d9:04:37:0d:9a:94:48:1a:ec:5f:
29:54:c7:58:07:5e:31:3c:0b:4a:85:fd:dd:45:fd:
45:88:32:ba:bd:81:d7:84:6e:9c:4a:e2:96:20:0d:
8c:7c:df:87:71:78:eb:84:43:0c:38:9f:2d:18:1f:
7b:90:01:6f:d9:0b:e9:09:9e:04:4b:7a:c2:18:63:
92:07:a3:28:4c:b0:3c:78:9f:f7:b9:10:9c:72:cc:
92:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:93:16:B3:B8:D2:93:26:6C:C9:F6:39:65:B2:2E:B0:3A:CF:03:E0
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:cb:bc:48:f2:0f:06:b5:78:59:99:aa:b4:3e:62:db:6b:9a:
8d:08:9f:67:84:42:4d:6f:a6:4d:37:33:6d:02:b1:27:4f:63:
27:3e:15:68:78:c1:63:25:8c:86:b4:d5:9b:67:da:6c:4f:20:
6b:85:64:e2:d6:e1:3c:b2:98:53:a2:da:17:a0:c4:84:3c:e6:
04:65:c0:68:f9:a9:18:6d:89:1b:86:55:30:28:7e:9b:f5:5b:
00:aa:5b:f5:1a:22:ca:a9:c7:74:50:d1:ae:c2:26:7c:c3:30:
72:a8:3d:1f:ec:be:ac:69:09:64:34:29:d9:09:56:a2:a1:43:
a2:26:b8:99:01:4e:f6:a9:5d:1b:26:f1:e6:fa:21:34:82:b5:
a7:02:6e:e1:8a:86:5b:86:97:24:b3:47:28:c2:40:75:9b:f6:
e7:6f:a5:7c:e1:4b:a3:8b:a3:c0:f6:2a:28:03:68:83:c1:7c:
9b:d0:0e:fa:35:e0:9a:9e:04:14:d9:ca:7d:75:f2:3b:b6:ee:
1a:01:07:e0:79:fc:76:15:7e:9e:80:e5:98:06:40:06:0d:a1:
81:0a:6d:38:54:04:b6:20:2d:2c:81:19:74:ed:7e:6d:a3:bc:
f9:75:1c:43:36:45:5b:4e:6e:54:8c:12:0a:fc:60:4a:d4:a5:
b3:6d:cb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:22 2025 by rpki-client