Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/492659-d3e5-4422-8c48-2ff1afe04b45/1/DivJkyqpzqtfcrbQMrn67eDWiGA.mft
File: DivJkyqpzqtfcrbQMrn67eDWiGA.mft (raw, json)
Hash identifier: 79D7PzvmWZL+9fAG30vSsranoPJZ2Z5BZ/nBOvdkzjw=
Subject key identifier: E8:E1:BF:94:B1:48:52:00:D0:DE:E0:50:D8:DF:53:19:A7:10:E8:3A
Authority key identifier: 0E:2B:C9:93:2A:A9:CE:AB:5F:72:B6:D0:32:B9:FA:ED:E0:D6:88:60
Certificate issuer: /CN=0e2bc9932aa9ceab5f72b6d032b9faede0d68860
Certificate serial: 018600C274D16D5EE5737FCC83D5E0ABE291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DivJkyqpzqtfcrbQMrn67eDWiGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/492659-d3e5-4422-8c48-2ff1afe04b45/1/DivJkyqpzqtfcrbQMrn67eDWiGA.mft
Manifest number: 0885
Signing time: Mon 30 Jan 2023 03:39:49 +0000
Manifest this update: Mon 30 Jan 2023 03:39:49 +0000
Manifest next update: Tue 31 Jan 2023 03:39:49 +0000
Files and hashes: 1: DivJkyqpzqtfcrbQMrn67eDWiGA.crl (hash: T3RZD1I/8B0lXuCjCHZhYDupPy4EjOXEArkDId5ZJUM=)
2: OSlRg2xomc85e2GmCDJmiHZXa-0.roa (hash: CXRTMWTRUc/lWS5yebNjV0/OlpAluT7Uufc14yp0o8Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:00:c2:74:d1:6d:5e:e5:73:7f:cc:83:d5:e0:ab:e2:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e2bc9932aa9ceab5f72b6d032b9faede0d68860
Validity
Not Before: Jan 30 03:39:49 2023 GMT
Not After : Jan 31 03:39:49 2023 GMT
Subject: CN=e8e1bf94b1485200d0dee050d8df5319a710e83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:4b:32:4c:81:b8:53:ba:f5:a9:bc:5e:08:
58:cd:5e:e6:4e:fa:d1:ad:18:d3:d8:da:f2:87:d6:
30:76:e8:07:56:ed:df:41:c2:01:5e:7f:0f:5f:58:
18:cb:02:d5:9c:b2:34:f2:11:f1:55:d4:94:c7:46:
1e:bc:86:fc:5e:b5:18:d1:97:75:dc:79:8d:27:c7:
81:fb:65:65:2c:b9:01:d5:d6:ad:90:cb:97:e2:65:
00:24:17:c8:3f:80:cd:04:1a:fb:d4:8a:60:a0:2f:
e4:77:0c:68:ff:46:83:48:03:1f:4f:74:d9:d9:aa:
a6:d5:5e:5b:21:a6:67:e4:b7:6f:bf:00:c0:3a:d9:
13:65:9a:0f:ba:11:8c:6a:a7:fd:48:7a:4f:6c:fd:
7c:a0:e4:27:87:9d:bf:37:86:7f:3d:96:30:32:1a:
f7:3a:24:a3:7b:7d:95:c3:01:39:66:2c:d7:18:17:
cd:f2:8f:e2:8c:67:10:40:f4:02:79:aa:fe:a4:16:
4c:57:38:c3:07:97:b3:99:c3:bb:35:c0:f3:e2:11:
ee:79:ef:d8:f3:66:5d:b9:3f:cd:17:64:ed:39:c9:
d6:c6:8e:19:7c:cf:be:f4:7c:a1:c6:4d:be:26:1b:
d0:25:f6:8e:b5:cb:79:2c:36:81:4b:8e:2a:13:07:
41:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E1:BF:94:B1:48:52:00:D0:DE:E0:50:D8:DF:53:19:A7:10:E8:3A
X509v3 Authority Key Identifier:
keyid:0E:2B:C9:93:2A:A9:CE:AB:5F:72:B6:D0:32:B9:FA:ED:E0:D6:88:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DivJkyqpzqtfcrbQMrn67eDWiGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/492659-d3e5-4422-8c48-2ff1afe04b45/1/DivJkyqpzqtfcrbQMrn67eDWiGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/492659-d3e5-4422-8c48-2ff1afe04b45/1/DivJkyqpzqtfcrbQMrn67eDWiGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bb:b0:76:23:65:76:6b:8f:03:75:16:f0:12:de:59:22:de:
fa:bd:d9:4d:0a:83:07:31:c4:27:47:db:0d:32:f3:86:88:b3:
a6:bc:54:b1:bb:8e:95:7d:80:78:e8:2a:bd:05:06:62:ed:c2:
28:fd:27:0b:ba:13:ef:91:c3:15:cb:20:2a:09:81:30:05:0c:
f1:cd:d2:3e:f2:e1:82:60:c2:8d:1e:05:1f:42:86:4b:01:8e:
dd:47:7e:0a:59:e3:c8:c0:56:5a:d0:f5:b1:b7:0a:7f:78:68:
02:3f:bb:ac:56:ce:c8:d1:f8:c6:0f:76:de:ed:5c:09:2f:5e:
a0:07:6c:c6:22:fe:fa:94:4f:49:c4:fe:27:0f:ef:47:6c:a0:
1c:99:5a:18:f1:c6:a9:45:77:19:79:0c:3c:3f:23:e6:32:24:
bc:29:70:5f:d3:29:52:ef:7a:c7:15:8c:ba:fa:96:f2:aa:2b:
46:66:49:a4:bc:95:51:97:87:7a:be:99:b0:f5:c1:56:bc:c7:
6c:c4:60:5f:af:35:9d:c9:01:08:ab:23:f5:92:ad:a0:fb:c5:
20:b6:66:0b:83:91:ef:d5:f3:a2:81:d1:ab:9b:fa:80:ca:72:
02:e9:b3:50:2a:6d:f3:08:10:92:99:9b:5a:0d:1d:10:3b:e2:
7e:be:0e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:07 2025 by rpki-client