Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
File: csOpo60yCo_GG1-HifUl0H5b4lE.mft (raw, json)
Hash identifier: qqqU/zZab341JFtONocabtCP+5jP3VuYhUK1MjMKRWs=
Subject key identifier: 06:6D:69:F8:BD:BF:70:A7:AC:26:88:72:53:66:0B:C5:E9:3C:83:14
Authority key identifier: 72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
Certificate issuer: /CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Certificate serial: 0194BD8528FCF4D6CF40E4F6697365EF03F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
Manifest number: 121A
Signing time: Fri 31 Jan 2025 18:00:08 +0000
Manifest this update: Fri 31 Jan 2025 18:00:08 +0000
Manifest next update: Sat 01 Feb 2025 18:00:08 +0000
Files and hashes: 1: Ac8JO-X0v1wyNDH9iLx9a-8OgU4.roa (hash: ft08vatwMICDWwM2Tj9FnfQKl8eMFf78Vl4YfUIqwGQ=)
2: csOpo60yCo_GG1-HifUl0H5b4lE.crl (hash: N9OHnubRog9ae/CjFykzXZVAxNydR6lVloYIN1amxu0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:28:fc:f4:d6:cf:40:e4:f6:69:73:65:ef:03:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c3a9a3ad320a8fc61b5f8789f525d07e5be251
Validity
Not Before: Jan 31 18:00:08 2025 GMT
Not After : Feb 1 18:00:08 2025 GMT
Subject: CN=066d69f8bdbf70a7ac26887253660bc5e93c8314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:35:da:e9:25:d7:58:0e:86:c6:f5:8d:32:fc:
e5:ea:de:84:13:c0:af:8f:14:c5:a3:0a:27:68:25:
d9:41:3a:87:24:fa:9e:c0:0b:99:a7:5a:ba:76:db:
35:22:7f:18:02:f0:61:35:6e:5f:e3:68:c8:76:6b:
df:69:f6:98:e6:1e:8a:17:28:9a:4b:5d:c6:ad:19:
67:e0:f1:a0:ef:05:89:b6:66:58:30:f4:45:3f:f1:
47:6e:ec:fc:2f:d6:cd:ba:72:7e:9c:6b:5e:7e:87:
8f:ca:d5:e4:c1:ef:c6:6c:0c:89:b5:3c:87:74:8e:
6d:cf:ce:57:74:47:8c:9d:f0:a2:fe:7b:47:cd:91:
92:52:0f:2f:a7:07:9b:4f:c4:a7:ad:cf:14:32:48:
3e:5e:87:aa:c7:eb:e3:0b:08:1d:48:ce:00:12:b7:
41:ff:94:02:c0:2d:af:1a:46:da:1c:eb:b2:6d:a4:
ca:cb:9a:34:90:d3:46:c8:2e:37:ba:37:48:a8:4b:
9e:b2:0f:18:f7:e1:9c:ee:fe:66:2c:9f:43:5b:0f:
83:d8:0b:94:9b:2e:76:3f:35:7e:72:da:72:86:5a:
ca:83:20:69:4c:aa:8c:41:63:90:23:92:e7:a0:54:
72:01:bc:50:1b:e1:0b:32:4a:d1:d4:7a:12:9d:f4:
80:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6D:69:F8:BD:BF:70:A7:AC:26:88:72:53:66:0B:C5:E9:3C:83:14
X509v3 Authority Key Identifier:
keyid:72:C3:A9:A3:AD:32:0A:8F:C6:1B:5F:87:89:F5:25:D0:7E:5B:E2:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csOpo60yCo_GG1-HifUl0H5b4lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/efa4d7-99a7-4c18-80fd-d29f45f793c7/1/csOpo60yCo_GG1-HifUl0H5b4lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:06:83:22:7b:a0:61:21:a1:30:9e:28:a6:08:9f:43:14:41:
35:57:f3:9d:49:9a:ec:7a:d2:53:62:5c:fa:8c:08:e2:00:82:
b1:09:da:15:5f:7d:3e:de:bd:fd:c1:5d:25:13:0e:d7:96:9a:
b3:93:82:44:ef:ca:69:97:1f:ea:a5:4d:56:5c:b4:dc:db:50:
a3:82:9e:d2:c2:f6:22:e8:30:9f:40:b1:f4:99:cc:1f:d4:15:
d2:f6:52:7f:26:31:e0:b5:25:19:d4:c3:5c:17:02:f5:5d:12:
d7:88:32:6f:41:2e:81:63:ad:bd:16:48:6a:be:34:2d:09:48:
be:01:fa:0b:11:f4:9f:68:07:55:1a:e6:a0:64:87:08:cd:82:
6d:26:9f:b3:92:d7:80:bf:84:64:68:d7:75:6d:5c:c4:7c:d8:
3e:58:b9:29:03:a7:07:43:43:9a:87:71:96:cd:3c:3e:96:83:
15:d1:fd:e5:58:9d:68:62:4b:0e:de:af:08:7d:fa:14:e5:8a:
53:3c:fd:a0:38:af:5f:b3:96:98:35:6c:17:75:63:a8:d1:ed:
ef:9e:b9:ec:a8:16:fc:45:8d:3f:9b:77:3c:ae:ab:8f:49:36:
70:3c:ca:02:df:54:9e:69:06:27:d5:56:0d:59:a4:93:d4:0c:
08:cf:13:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:07 2025 by rpki-client