Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
File: DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json)
Hash identifier: q4buSl+cw6caf4W5gs1mq8ecXfY5mGN3dvUxraRXCKw=
Subject key identifier: 70:F9:5D:55:33:51:4F:E0:DF:D5:A5:94:78:08:DD:26:16:A9:B0:27
Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Certificate serial: 0194BD4EBC443A404115846A755033D3462B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
Manifest number: 11FD
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: uadanA1V5ozINMVUSXPn567FuatJeR8S8kIlbD1vhIY=)
2: xjZ1XJhW_cFPR3oT-Y__-eT7BLU.roa (hash: iqLiaW6nsbh481RYQHU8cc/w97YkMP9DpENBWhWu8os=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bc:44:3a:40:41:15:84:6a:75:50:33:d3:46:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=70f95d5533514fe0dfd5a5947808dd2616a9b027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:25:92:2c:62:aa:95:f8:dd:85:a1:be:90:
59:67:76:96:07:d4:16:86:ad:6d:e0:64:5d:9c:0c:
45:9f:6f:34:42:39:81:6d:73:e3:92:65:52:c5:a2:
2a:47:d1:37:47:11:e1:02:b2:df:5a:ac:78:28:00:
27:2f:c9:95:20:64:b1:9d:f8:51:c9:e0:44:0b:2e:
40:c6:d5:46:c1:d4:73:7e:fa:65:48:09:5c:a4:04:
c0:1e:39:98:ad:b9:92:48:25:18:39:39:78:59:f9:
39:45:4c:66:97:f3:95:bf:ea:cc:ea:91:6f:13:d4:
5d:4e:41:d4:f2:cd:a9:3c:1f:b1:5c:d9:6f:81:a2:
8d:f7:fd:41:b3:f6:ea:d5:27:4d:a9:24:d5:85:b5:
cf:5a:32:b8:d4:f5:9a:08:67:3e:e3:3f:61:34:d7:
8e:65:7c:94:2f:ee:76:fc:66:e1:2f:28:c5:70:3b:
76:08:9e:cb:32:c5:b2:7d:15:f3:25:aa:3f:b2:7b:
8e:15:47:be:5a:b0:e4:1d:86:b0:d9:73:c1:56:2c:
8b:5c:3d:1b:69:01:80:13:0d:4a:1d:16:0b:4f:aa:
80:f3:01:82:8a:0c:6c:a6:cd:4f:00:bc:09:76:77:
3b:42:1b:eb:f8:09:3f:67:2f:b3:68:cc:0c:21:d8:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F9:5D:55:33:51:4F:E0:DF:D5:A5:94:78:08:DD:26:16:A9:B0:27
X509v3 Authority Key Identifier:
keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7d:8e:d9:25:20:fd:11:ea:5d:0b:fa:3c:cd:a0:05:1b:b7:
89:62:40:b2:da:8e:94:e0:50:fb:e3:2e:c8:71:22:50:03:43:
50:1c:84:34:70:f1:ef:5d:48:9c:71:1e:c9:ba:37:a3:e3:d4:
d5:1c:91:7e:74:e1:33:54:01:4f:85:72:4f:31:99:57:a0:cd:
98:b5:2d:41:c4:11:d0:3b:8e:0d:18:e2:f7:b9:ba:53:16:7e:
04:fc:43:63:9f:a4:bb:33:f3:3b:77:82:ae:05:d2:b4:75:54:
a0:a7:a2:e7:6c:58:aa:f4:bc:92:69:cd:f8:cd:27:63:60:bd:
55:7e:e5:d1:8f:45:7c:fe:69:1a:26:cf:b3:ac:2a:73:bd:78:
5a:9e:de:93:32:c5:6a:03:38:b4:66:19:d1:31:5e:e9:ed:f3:
18:bf:83:06:05:a9:30:89:32:b1:07:45:f5:c6:aa:0c:a2:c4:
03:6e:36:f3:04:ab:ba:f7:9b:2d:fa:ff:3c:81:a0:18:76:9e:
b7:21:44:2d:c9:ba:b2:22:2b:a6:ab:9e:29:09:bd:34:a5:39:
6f:5f:04:1c:a7:1c:84:1c:0a:bf:91:2d:83:61:bf:a8:44:d6:
9c:09:ba:14:e8:17:e0:25:5f:ea:8d:9c:9a:3f:58:d7:a2:3b:
a7:26:40:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:02:44 2025 by rpki-client