Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
File: dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft (raw, json)
Hash identifier: bvq1m6OxSU2APIYgVI4Lg99LEfiVCjEXYVWbW/QnMcM=
Subject key identifier: 1F:13:C7:D0:CF:EA:85:0B:80:61:5D:29:DA:CA:70:9F:48:9A:5F:9D
Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Certificate serial: 0194BCA9D5C7DD1360D1D0F75A5738DA7EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
Manifest number: 0B86
Signing time: Fri 31 Jan 2025 14:00:34 +0000
Manifest this update: Fri 31 Jan 2025 14:00:34 +0000
Manifest next update: Sat 01 Feb 2025 14:00:34 +0000
Files and hashes: 1: AU4ugvV5IAEAhCk8GTQf9WBLDKg.roa (hash: g9W79I4Y+ZlSbr/hHfWCFarDN4OLUZ4qhEZ6t7xBiw0=)
2: dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl (hash: CEgWRnGS9edHgIuSrpSLPlaBw76+cxkG8cjoTf0nW9s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d5:c7:dd:13:60:d1:d0:f7:5a:57:38:da:7e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f
Validity
Not Before: Jan 31 14:00:34 2025 GMT
Not After : Feb 1 14:00:34 2025 GMT
Subject: CN=1f13c7d0cfea850b80615d29daca709f489a5f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:6e:b9:da:48:f0:c6:81:c7:b0:18:16:a2:
27:7f:da:59:76:4c:e1:2a:9d:2d:93:4f:40:fa:81:
f0:d0:2c:fe:68:7e:8e:47:c9:2a:16:ba:be:2c:1d:
2b:6a:10:a7:4d:3b:c0:fb:67:ce:62:10:75:c7:3f:
0f:74:ad:8e:4a:b4:44:8f:8d:97:89:e4:d3:e2:0c:
20:ac:c4:f0:10:f0:1b:03:bc:bd:32:78:c1:a7:f4:
9b:e2:81:6a:17:14:69:6b:07:8c:7d:e0:a3:da:f4:
92:51:e1:b7:02:84:67:4a:14:5f:d3:c9:f2:3a:18:
a7:6e:f4:28:51:0a:73:24:2f:e7:6c:ce:a2:cf:00:
84:5f:13:c4:73:be:a2:d3:05:dd:87:73:89:26:d6:
e7:1f:45:24:da:11:9f:a2:d2:bb:70:56:d3:c5:46:
2b:1a:a3:86:2e:a0:48:41:48:c5:3e:af:83:c3:bc:
32:64:de:8b:b6:a4:90:b2:0c:d0:33:9b:e9:36:c8:
46:80:17:29:73:fc:94:90:ec:cf:bc:45:32:d7:b4:
ff:1e:c4:89:1c:75:75:68:2d:8f:d9:04:c8:eb:05:
7b:a0:87:af:46:c5:ca:d2:dd:da:fc:07:c5:d2:e6:
35:df:64:aa:4e:07:a5:46:32:87:8c:f0:2e:0e:ef:
c9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:13:C7:D0:CF:EA:85:0B:80:61:5D:29:DA:CA:70:9F:48:9A:5F:9D
X509v3 Authority Key Identifier:
keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8f:82:6f:8c:3e:12:17:a5:41:dd:55:b9:9f:fe:de:c1:cd:
f2:40:df:b0:49:3d:f8:9f:db:cd:8b:d5:ca:bf:42:07:d9:03:
dd:a6:02:13:1d:e6:4f:46:65:15:02:bb:c8:4d:d1:b0:e9:4e:
bc:ee:02:c7:91:c4:7c:97:c8:6e:cf:c3:4f:2d:e0:85:75:39:
1e:1a:ec:6d:96:b8:98:21:29:33:0b:e1:48:87:f6:f3:57:89:
34:23:28:f2:a7:80:32:dd:e8:48:f3:71:c2:6b:18:11:8d:b3:
27:c5:22:a3:93:e1:30:ce:3d:09:31:37:b4:79:c3:76:8b:a7:
f5:cc:35:6d:5a:34:c1:67:af:88:a0:e8:01:41:d1:8a:41:5d:
fd:a2:c2:5a:c0:7d:be:e9:dd:e6:d9:ba:b1:74:b8:fa:d9:36:
31:c4:28:d4:c5:43:ab:8c:40:2a:58:dc:a4:af:71:a3:38:14:
11:86:46:77:33:71:d7:69:7a:45:be:62:bd:35:31:34:55:f1:
e2:8c:20:7e:cf:05:6f:6b:2c:f3:77:5c:8f:87:d1:84:d8:41:
34:8e:a4:32:ab:8b:35:34:30:00:51:5a:2e:58:34:81:ae:23:
58:3e:3d:4e:db:68:b0:ab:ee:ca:9a:a1:22:c8:3a:67:d2:88:
a6:31:d2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:25 2025 by rpki-client