Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
File: mOszws77XaNGB7ALUAXkS3VSSh8.mft (raw, json)
Hash identifier: GgPF8BrysV9jmhWr5ZBGdk8v3Uj7XmDrKVFSN5GaS3Y=
Subject key identifier: 56:A2:F5:AF:B2:13:0A:63:3F:FB:BA:81:E9:BB:72:2D:18:87:55:DD
Authority key identifier: 98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
Certificate issuer: /CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Certificate serial: 0194BC72AB55FFD115782BAE951CBCD97DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
Manifest number: 0CC5
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: mOszws77XaNGB7ALUAXkS3VSSh8.crl (hash: oaL2RffX1QUJpuCYlirpND/cYua0aa15hV3ZcKSYT9E=)
2: or5hKOOSPrV7MlMa3w0kg7Lt0yU.roa (hash: lRtVfCvHJXty9ApqE+Cl9Ij4M7rM8kj+eoEk880GXv0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ab:55:ff:d1:15:78:2b:ae:95:1c:bc:d9:7d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98eb33c2cefb5da34607b00b5005e44b75524a1f
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=56a2f5afb2130a633ffbba81e9bb722d188755dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fd:8c:65:77:be:42:c8:7e:9a:0b:2e:08:46:
ec:be:e8:dc:5f:3c:e3:f7:fb:1f:1a:ea:8b:1e:94:
1f:86:e6:6e:40:2f:76:f7:8e:97:77:8d:60:f7:14:
60:54:d1:9d:ea:a4:b3:13:83:7e:f3:30:94:5a:e8:
d1:ed:b6:20:76:ff:4e:63:a9:34:c4:53:85:63:46:
5b:73:ca:0a:9c:a6:22:4e:24:c8:e7:b1:0b:c3:22:
31:51:eb:7b:10:9d:00:23:1c:bf:0c:59:e5:dc:da:
36:7c:9d:71:c4:8c:41:54:03:2e:da:96:a7:5e:99:
71:ad:37:f3:90:6f:56:10:c6:99:68:eb:b0:9c:4e:
87:35:2e:91:e5:ed:80:7f:2b:c9:02:18:56:33:1c:
61:88:d6:bc:d5:d4:95:3f:29:22:e0:31:9d:2b:b1:
96:b7:61:99:a3:20:c2:a3:ea:23:90:a9:02:0a:58:
e0:a7:fe:e4:9c:09:70:7f:f6:d6:e8:23:cd:60:60:
d9:ac:6a:9d:d1:86:25:c6:f1:9c:f0:94:61:f5:b3:
04:5e:ef:f4:9d:69:21:e6:87:d5:4c:70:d7:a0:ea:
a8:ef:81:4a:47:1f:f0:bc:c1:aa:73:9c:e7:98:c1:
27:c4:2c:b4:ea:78:a1:e8:49:38:52:05:1e:63:59:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A2:F5:AF:B2:13:0A:63:3F:FB:BA:81:E9:BB:72:2D:18:87:55:DD
X509v3 Authority Key Identifier:
keyid:98:EB:33:C2:CE:FB:5D:A3:46:07:B0:0B:50:05:E4:4B:75:52:4A:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOszws77XaNGB7ALUAXkS3VSSh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/76b1d3-4fd9-46cf-83e6-20c4dc1e4a77/1/mOszws77XaNGB7ALUAXkS3VSSh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9c:92:49:ce:a6:b5:fb:da:b4:de:ab:c9:ad:dd:39:e8:b7:
78:41:67:4d:96:fb:97:d3:08:ee:47:cb:95:e2:b6:4a:7b:c9:
32:83:aa:e3:de:e1:c4:8f:91:c3:c1:bd:7d:d0:fe:c8:42:31:
2d:3a:15:76:63:a3:3f:e3:23:1e:ba:06:6b:41:4a:74:40:4b:
e4:38:20:f8:f9:2e:cd:2b:35:1b:66:ce:e6:8c:c0:a9:1a:e3:
b1:97:52:47:d8:05:02:bc:b3:28:13:2f:6c:91:4d:65:3e:fd:
0c:a2:06:54:8c:a8:54:d9:dc:29:55:7f:9c:e6:f7:ed:e0:42:
2a:24:82:76:16:12:9d:a5:a6:66:69:a3:ef:6e:e5:32:97:5b:
65:9b:31:28:55:fe:7f:78:0e:21:60:12:30:f7:73:ad:9c:33:
d5:7e:2d:5d:2b:cb:0a:fe:5e:d5:d8:dd:ab:16:a4:8c:de:cb:
95:02:b5:0c:a6:8f:6a:67:98:86:24:2d:f5:d3:0c:73:e2:5c:
50:d4:eb:3d:a3:65:33:90:bc:6a:c4:e3:04:d6:f0:e7:16:93:
67:c5:e6:c4:a7:2e:4a:00:cf:3f:91:db:29:6b:9e:f9:26:28:
51:68:01:f7:ff:cd:69:04:72:8d:39:a6:16:3e:f4:6c:61:8a:
06:1d:a8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:45:14 2025 by rpki-client