Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/725e03-28b1-487d-8cd8-9b26918cd51a/1/OSj62QUrolHkYakmnAAGQiUH7C0.mft
File: OSj62QUrolHkYakmnAAGQiUH7C0.mft (raw, json)
Hash identifier: GUahgjXtlr0TYHgE4zmjRpMSfxfA6ufkSVlE7O/wduU=
Subject key identifier: 5F:B8:DC:17:F4:A5:CB:24:36:86:E7:85:07:42:09:54:DE:E6:FB:1E
Authority key identifier: 39:28:FA:D9:05:2B:A2:51:E4:61:A9:26:9C:00:06:42:25:07:EC:2D
Certificate issuer: /CN=3928fad9052ba251e461a9269c0006422507ec2d
Certificate serial: 0184AD6B87A419CCF0AD22A90DBCCE8A74D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OSj62QUrolHkYakmnAAGQiUH7C0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/725e03-28b1-487d-8cd8-9b26918cd51a/1/OSj62QUrolHkYakmnAAGQiUH7C0.mft
Manifest number: 9C
Signing time: Fri 25 Nov 2022 06:13:36 +0000
Manifest this update: Fri 25 Nov 2022 06:13:36 +0000
Manifest next update: Sat 26 Nov 2022 06:13:36 +0000
Files and hashes: 1: OSj62QUrolHkYakmnAAGQiUH7C0.crl (hash: ODFn/VnA5hKbI23ZN9zpALkHVxdkBvIhlUXulYjuqAo=)
2: TiltD7uzF289CaDATUZVzNiwanM.roa (hash: j4Le3iYx1CQhntacF6XJlAP3GQtv4D1doipO7fRdf9I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ad:6b:87:a4:19:cc:f0:ad:22:a9:0d:bc:ce:8a:74:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3928fad9052ba251e461a9269c0006422507ec2d
Validity
Not Before: Nov 25 06:13:36 2022 GMT
Not After : Nov 26 06:13:36 2022 GMT
Subject: CN=5fb8dc17f4a5cb243686e78507420954dee6fb1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fe:d1:42:33:f7:35:f1:3e:e9:46:5d:03:b9:
08:69:21:79:46:36:18:75:ec:c3:55:65:f1:34:49:
39:6d:ec:10:96:d4:a7:6b:06:2b:7f:a4:ad:eb:0c:
f0:4d:80:41:c8:a7:88:7a:8b:0c:ba:79:34:fd:c5:
ca:48:d3:a3:3c:6a:c4:39:d1:aa:b2:75:86:aa:32:
af:ac:c9:c4:59:5c:38:d6:a2:f1:9b:66:a7:6c:f1:
10:f5:94:5a:36:07:53:d4:7b:9a:80:2b:b9:45:e6:
b4:30:e6:77:62:63:30:7a:5c:71:81:7c:42:45:a2:
8f:3b:65:f9:45:0f:f7:a9:bf:3e:3a:ea:fc:84:03:
fe:90:3d:69:95:5f:01:08:8f:9a:ba:13:01:d5:e2:
c7:c2:59:15:19:88:e9:ba:d9:70:aa:a2:fb:ac:b7:
40:82:f4:42:5e:ad:e8:33:e6:3b:d5:eb:9a:ea:e1:
49:69:2a:e2:1c:0d:22:34:53:e0:2f:bb:3c:94:45:
0e:7c:38:9d:26:d6:2a:5d:8a:27:fc:40:93:05:8c:
e1:2a:84:c7:6d:de:44:ae:34:b5:40:c9:91:34:27:
68:60:5c:32:80:d5:01:fa:56:3b:80:22:93:7d:2b:
dd:f2:ff:38:c0:88:de:46:63:16:e6:7e:d0:0c:3d:
a9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B8:DC:17:F4:A5:CB:24:36:86:E7:85:07:42:09:54:DE:E6:FB:1E
X509v3 Authority Key Identifier:
keyid:39:28:FA:D9:05:2B:A2:51:E4:61:A9:26:9C:00:06:42:25:07:EC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OSj62QUrolHkYakmnAAGQiUH7C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/725e03-28b1-487d-8cd8-9b26918cd51a/1/OSj62QUrolHkYakmnAAGQiUH7C0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/725e03-28b1-487d-8cd8-9b26918cd51a/1/OSj62QUrolHkYakmnAAGQiUH7C0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a4:0a:fb:26:2b:af:6b:b1:b2:11:0d:2b:84:31:f3:a6:68:
64:b9:68:0e:3d:b4:b3:dd:bc:45:2d:8a:7d:52:3c:f0:db:f8:
79:83:c6:09:12:e4:a9:8e:0f:ac:d9:57:95:0c:20:15:c5:03:
1c:72:cd:af:89:91:a1:2f:3d:25:ba:55:2f:40:6c:ed:98:13:
0a:38:ab:fd:da:7d:bc:9f:5a:3d:4f:69:cf:88:48:1d:e5:8e:
a4:92:5b:be:0e:38:64:e1:a9:29:7c:a1:76:43:a8:b7:15:4b:
4a:ab:c8:04:80:6b:c7:c6:d3:ab:8c:87:7b:e3:16:bd:6b:72:
44:72:14:54:ff:88:4c:8d:fd:d8:31:21:cf:e9:b6:d7:0c:1f:
93:4d:8e:1d:97:4e:81:80:17:06:92:dc:0a:3d:0f:af:7f:a3:
1c:df:91:bc:0a:aa:02:67:16:c1:bb:33:b5:51:42:03:0e:69:
e8:f0:6f:b2:9f:59:78:1b:1e:52:86:9b:a4:67:f8:57:59:c8:
18:82:e2:e3:3c:b8:b6:3e:bc:ac:84:9e:b2:54:e2:1a:08:7a:
0d:17:0e:2a:dd:02:f4:fb:c2:f5:7d:e3:47:84:09:41:e0:dd:
5e:70:27:d5:8b:e3:85:cd:58:9e:a9:77:a5:cf:f2:18:e6:53:
e5:0e:94:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYSta4ekGczwrSKpDbzOinTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MjhmYWQ5MDUyYmEyNTFlNDYxYTkyNjljMDAwNjQyMjUw
N2VjMmQwHhcNMjIxMTI1MDYxMzM2WhcNMjIxMTI2MDYxMzM2WjAzMTEwLwYDVQQD
Eyg1ZmI4ZGMxN2Y0YTVjYjI0MzY4NmU3ODUwNzQyMDk1NGRlZTZmYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/7RQjP3NfE+6UZdA7kIaSF5RjYY
dezDVWXxNEk5bewQltSnawYrf6St6wzwTYBByKeIeosMunk0/cXKSNOjPGrEOdGq
snWGqjKvrMnEWVw41qLxm2anbPEQ9ZRaNgdT1HuagCu5Rea0MOZ3YmMwelxxgXxC
RaKPO2X5RQ/3qb8+Our8hAP+kD1plV8BCI+auhMB1eLHwlkVGYjputlwqqL7rLdA
gvRCXq3oM+Y71eua6uFJaSriHA0iNFPgL7s8lEUOfDidJtYqXYon/ECTBYzhKoTH
bd5ErjS1QMmRNCdoYFwygNUB+lY7gCKTfSvd8v84wIjeRmMW5n7QDD2pkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF+43Bf0pcskNobnhQdCCVTe5vseMB8GA1UdIwQY
MBaAFDko+tkFK6JR5GGpJpwABkIlB+wtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1NqNjJRVXJvbEhrWWFrbW5BQUdRaVVIN0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MjVlMDMtMjhiMS00ODdkLThjZDgt
OWIyNjkxOGNkNTFhLzEvT1NqNjJRVXJvbEhrWWFrbW5BQUdRaVVIN0MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS83MjVlMDMtMjhiMS00ODdkLThjZDgtOWIyNjkxOGNkNTFh
LzEvT1NqNjJRVXJvbEhrWWFrbW5BQUdRaVVIN0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYaQK+yYr
r2uxshENK4Qx86ZoZLloDj20s928RS2KfVI88Nv4eYPGCRLkqY4PrNlXlQwgFcUD
HHLNr4mRoS89JbpVL0Bs7ZgTCjir/dp9vJ9aPU9pz4hIHeWOpJJbvg44ZOGpKXyh
dkOotxVLSqvIBIBrx8bTq4yHe+MWvWtyRHIUVP+ITI392DEhz+m21wwfk02OHZdO
gYAXBpLcCj0Pr3+jHN+RvAqqAmcWwbsztVFCAw5p6PBvsp9ZeBseUoabpGf4V1nI
GILi4zy4tj68rISeslTiGgh6DRcOKt0C9PvC9X3jR4QJQeDdXnAn1Yvjhc1Ynql3
pc/yGOZT5Q6U+Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:53 2024 by rpki-client on console-fra.rpki-client.org