Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
File: DOLccfnsGpsngQd_OtKYHEuHKwU.mft (raw, json)
Hash identifier: 5Rn9w9lhpfiM0YdGzGpzkPxbaLycE2srqnLjKnVyoA4=
Subject key identifier: BF:A0:0F:E4:80:1D:5B:3C:11:25:C9:40:00:4C:E7:D6:C5:19:6A:CC
Authority key identifier: 0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
Certificate issuer: /CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Certificate serial: 0195E0EB0C14469EDD2BECF616667ED0BAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
Manifest number: 0750
Signing time: Sat 29 Mar 2025 08:00:55 +0000
Manifest this update: Sat 29 Mar 2025 08:00:55 +0000
Manifest next update: Sun 30 Mar 2025 08:00:55 +0000
Files and hashes: 1: DOLccfnsGpsngQd_OtKYHEuHKwU.crl (hash: qkLY8E7Tg7n6cAMcwGV+mCSsSqgoOnSC1xXCxh6yac4=)
2: lbzZ5Xd-Bxx74-HdFugAtLWfqT0.roa (hash: MO8BCssJP9Ug+UVQ/493gxdacSXvZ1bCntr7vQJ6/Y0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:0c:14:46:9e:dd:2b:ec:f6:16:66:7e:d0:ba:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce2dc71f9ec1a9b2781077f3ad2981c4b872b05
Validity
Not Before: Mar 29 08:00:55 2025 GMT
Not After : Mar 30 08:00:55 2025 GMT
Subject: CN=bfa00fe4801d5b3c1125c940004ce7d6c5196acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:97:c2:8e:82:8e:87:91:a7:9d:c9:2f:30:
b3:34:6f:62:77:45:d9:ad:95:d9:e9:24:7d:77:1c:
06:21:67:0a:04:8c:ff:92:be:c2:4c:0a:5c:03:ce:
50:df:c4:ab:a8:33:02:2f:76:33:2d:9b:e2:a9:3a:
a5:75:26:8e:b8:fc:6c:2d:46:4f:c8:bd:88:7c:28:
32:f8:40:c7:20:0a:34:7f:fb:52:0f:ad:af:7e:5a:
48:28:a2:1d:ac:a5:a9:0d:db:b5:cd:f9:cc:f0:b4:
f1:20:cd:7a:c1:28:83:93:49:9a:25:e8:bf:0c:89:
b3:42:51:38:72:ae:9c:a6:04:52:f4:9e:55:38:a4:
ce:6e:fd:77:05:65:77:74:bd:6b:da:71:33:e4:1e:
e4:2c:af:1d:4f:ff:e8:ca:e7:4d:b0:18:12:2d:54:
f2:b2:51:31:7d:c2:66:ff:b3:83:a5:c4:f8:04:67:
73:77:95:81:34:01:2e:5d:3b:44:6e:a7:5a:90:7a:
e0:42:8a:8c:11:b8:9d:52:d9:11:dd:7b:be:e7:ac:
e1:67:0f:ef:f4:c4:95:7b:e1:d8:8c:6f:e2:1a:42:
26:85:cf:b7:67:13:6e:96:ab:0f:fc:84:0f:be:8a:
87:64:ac:9c:83:4a:46:e2:49:35:8a:29:d4:66:01:
d1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A0:0F:E4:80:1D:5B:3C:11:25:C9:40:00:4C:E7:D6:C5:19:6A:CC
X509v3 Authority Key Identifier:
keyid:0C:E2:DC:71:F9:EC:1A:9B:27:81:07:7F:3A:D2:98:1C:4B:87:2B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOLccfnsGpsngQd_OtKYHEuHKwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/da66bb-174f-4918-9a3a-ba4fbd8d5d8e/1/DOLccfnsGpsngQd_OtKYHEuHKwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5f:82:fc:d6:bc:5a:d6:56:4a:66:89:2e:c5:5a:3a:a5:34:
a3:1b:42:8f:61:5e:62:f3:82:02:b9:4c:93:13:db:ed:d7:4b:
ad:51:79:ce:77:33:45:74:e7:6a:43:29:04:60:7d:14:94:c3:
f6:d8:15:be:16:c2:4e:b1:62:79:9f:dd:18:f5:bc:88:d1:b0:
78:6f:fe:95:35:7a:42:69:57:4a:fb:79:08:37:4e:e3:68:d8:
e7:0e:c3:40:8d:4e:e8:d7:39:47:c9:55:4c:56:69:d5:c8:bd:
62:a3:4f:d7:8f:fd:b4:c6:fd:21:9e:5c:5c:74:cc:3e:bc:cc:
25:99:a0:80:68:00:5a:c9:6b:9d:53:57:0a:8b:5e:f9:0d:47:
74:0b:db:44:da:9a:5e:e4:20:cc:e4:de:e5:a2:5e:ab:0d:a1:
33:16:ad:8a:d8:1e:7b:cc:d7:c2:be:05:59:39:4b:d7:1a:d6:
66:59:33:ad:ba:77:35:08:b2:ad:68:93:14:1b:12:5f:d7:b2:
0f:50:33:b7:c3:47:67:a7:0e:d1:93:4a:be:87:67:44:14:9a:
a8:b7:42:a8:f3:21:48:13:32:9a:7c:1c:dc:17:96:e4:84:10:
a3:e2:95:96:17:11:c2:ad:26:23:19:eb:9f:6a:e5:11:16:29:
31:5e:5e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:56:59 2025 by rpki-client