Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a8e701-ed32-4c24-9907-d2fb7d71113b/1/0Y1uugaDSobD2zDODZObe-qOKDc.mft
File: 0Y1uugaDSobD2zDODZObe-qOKDc.mft (raw, json)
Hash identifier: sf/x0VrMj14zZ1JYKWbwl1BXqcrL0+do8pJlB96YEqk=
Subject key identifier: 03:8D:4B:75:91:E7:2A:BF:CB:70:54:93:F4:6C:27:58:02:B1:41:6C
Authority key identifier: D1:8D:6E:BA:06:83:4A:86:C3:DB:30:CE:0D:93:9B:7B:EA:8E:28:37
Certificate issuer: /CN=d18d6eba06834a86c3db30ce0d939b7bea8e2837
Certificate serial: 0184D2F0448712A34209F829541E66C1267D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Y1uugaDSobD2zDODZObe-qOKDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a8e701-ed32-4c24-9907-d2fb7d71113b/1/0Y1uugaDSobD2zDODZObe-qOKDc.mft
Manifest number: 01BE
Signing time: Fri 02 Dec 2022 13:04:32 +0000
Manifest this update: Fri 02 Dec 2022 13:04:32 +0000
Manifest next update: Sat 03 Dec 2022 13:04:32 +0000
Files and hashes: 1: 0Y1uugaDSobD2zDODZObe-qOKDc.crl (hash: boPnGG9ElBCHNxcYjSBWB5oIYi65RdVy9lA16x4m92I=)
2: uNB7w2dyNpS0talCysI9f3sG2M0.roa (hash: nSNKqImTrW09c7+D+aI4r2kdXF2n7wCe++BM1+REdVg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d2:f0:44:87:12:a3:42:09:f8:29:54:1e:66:c1:26:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18d6eba06834a86c3db30ce0d939b7bea8e2837
Validity
Not Before: Dec 2 13:04:32 2022 GMT
Not After : Dec 3 13:04:32 2022 GMT
Subject: CN=038d4b7591e72abfcb705493f46c275802b1416c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:d0:ce:67:52:7c:49:29:07:61:a9:8d:c3:
a9:fe:01:00:bc:38:5a:26:81:72:9d:ab:b1:70:1a:
87:80:ff:df:32:5d:7f:a2:9b:d8:bb:15:b6:b9:24:
bd:b1:4d:41:1b:93:d5:19:1e:7d:c4:f1:35:4f:7a:
ce:3b:7d:dc:cb:04:8e:05:23:1e:38:2b:1a:fc:c4:
e3:83:bc:9d:3b:37:fc:0d:fc:25:db:f0:40:3a:ce:
7c:72:96:b8:8a:96:24:1e:03:da:cb:c6:a2:53:23:
47:07:06:e9:65:02:3f:3b:fe:ec:f0:b8:f8:f8:a9:
b7:4c:58:86:21:72:be:ae:6d:24:21:a5:8d:be:83:
bd:1e:28:37:b5:f8:ff:9b:be:34:54:ee:b4:5a:fe:
68:f8:e1:16:fc:91:c6:db:3d:8b:aa:12:b2:5a:f8:
6e:88:9b:da:c1:97:98:d7:5d:5a:d2:fa:d6:bd:c9:
15:b6:44:5c:88:aa:ba:12:2c:b3:f5:2d:b9:7f:e3:
79:d0:9c:d9:85:7a:9e:56:1b:c6:91:ca:f1:02:58:
ff:39:a7:0b:85:21:00:00:2b:7a:8c:23:46:ab:34:
c3:af:43:d9:52:ea:70:36:0a:ba:f4:39:9f:a4:53:
76:b5:50:b5:7a:d4:cf:74:c2:e5:9d:c5:35:03:14:
90:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8D:4B:75:91:E7:2A:BF:CB:70:54:93:F4:6C:27:58:02:B1:41:6C
X509v3 Authority Key Identifier:
keyid:D1:8D:6E:BA:06:83:4A:86:C3:DB:30:CE:0D:93:9B:7B:EA:8E:28:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Y1uugaDSobD2zDODZObe-qOKDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a8e701-ed32-4c24-9907-d2fb7d71113b/1/0Y1uugaDSobD2zDODZObe-qOKDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a8e701-ed32-4c24-9907-d2fb7d71113b/1/0Y1uugaDSobD2zDODZObe-qOKDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:aa:9c:56:a0:d9:51:06:0a:ce:00:bd:3b:99:83:49:d1:88:
c9:b9:58:c4:7c:ba:07:b3:3d:2b:fd:4d:aa:50:c8:5b:19:e2:
9a:9d:c0:13:4c:aa:93:cf:d9:bb:bc:cc:e5:fb:e5:f7:b6:71:
be:9a:b3:bb:4f:e7:c8:97:3e:3a:33:fa:d0:8b:2c:88:f0:56:
1c:f0:84:d2:e8:65:53:62:66:69:9e:1e:27:7e:23:be:99:11:
96:33:8d:d0:a2:22:1e:aa:f2:da:30:4d:37:08:3c:7b:69:d9:
7b:09:16:9e:98:dd:01:d6:37:ba:30:cf:60:43:3a:c1:a3:ce:
5c:61:e2:30:8b:97:1f:38:92:4b:49:b3:3f:f2:39:4e:81:23:
23:de:11:66:a8:a3:b3:eb:44:55:d3:42:4d:4a:fd:f4:e1:1a:
97:cb:ab:b5:65:31:a3:80:18:62:11:17:73:8c:96:7e:9c:41:
2a:2d:2b:db:87:0b:3a:d5:08:90:b2:4e:83:7e:ef:de:ca:b4:
a0:a3:29:6f:9c:58:a8:fe:b9:94:00:43:4e:df:31:be:f4:c0:
e1:51:6f:fb:69:1d:d7:32:17:a8:96:32:ad:e8:33:8d:f0:81:
19:bb:a6:8b:68:65:a0:a4:51:ed:bf:bb:6e:fe:ec:9d:da:f0:
42:10:46:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:15:17 2025 by rpki-client