Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/707c6d-67fd-41ff-a1ba-846b5a6714d6/1/oO8EA4ZzQW0XV9PwVBGJURsu0SM.mft
File: oO8EA4ZzQW0XV9PwVBGJURsu0SM.mft (raw, json)
Hash identifier: G6M4MeK91IUIriRlp2v4ZoFhQ0S1Z6sjjokeHjTiL90=
Subject key identifier: 95:96:08:26:1B:8A:64:9F:E0:29:CB:81:7A:5D:C1:65:4C:F6:83:0F
Authority key identifier: A0:EF:04:03:86:73:41:6D:17:57:D3:F0:54:11:89:51:1B:2E:D1:23
Certificate issuer: /CN=a0ef04038673416d1757d3f0541189511b2ed123
Certificate serial: 018C678ED0FAEBC6B5ED530BEDB8D32CEB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO8EA4ZzQW0XV9PwVBGJURsu0SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/707c6d-67fd-41ff-a1ba-846b5a6714d6/1/oO8EA4ZzQW0XV9PwVBGJURsu0SM.mft
Manifest number: 0FA8
Signing time: Thu 14 Dec 2023 09:01:01 +0000
Manifest this update: Thu 14 Dec 2023 09:01:01 +0000
Manifest next update: Fri 15 Dec 2023 09:01:01 +0000
Files and hashes: 1: 88Cpz2ScOtdEtlfeK5sMf8EVMfI.roa (hash: LGgWTKFO6xV0tSahcL4KhQV9k8N9qvc7TygIVd9MJws=)
2: oO8EA4ZzQW0XV9PwVBGJURsu0SM.crl (hash: JpWuNlCGDE7X7LB14iJNCgMxbhQzRZNM2A8fpRevaqE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:8e:d0:fa:eb:c6:b5:ed:53:0b:ed:b8:d3:2c:eb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef04038673416d1757d3f0541189511b2ed123
Validity
Not Before: Dec 14 09:01:01 2023 GMT
Not After : Dec 15 09:01:01 2023 GMT
Subject: CN=959608261b8a649fe029cb817a5dc1654cf6830f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4e:37:81:6a:36:55:cf:b1:30:0e:d7:b6:50:
83:85:be:0b:67:64:1c:6b:67:64:33:a1:08:80:7b:
6a:f7:23:e3:7b:0d:8c:00:92:93:3c:2d:13:ce:e1:
ba:a1:8c:ed:ba:92:5d:8f:60:20:f7:f2:4d:5d:a8:
d8:37:f6:1d:3e:46:80:0e:62:47:03:48:a4:16:30:
5f:64:81:23:2b:40:93:fa:09:e8:ba:3c:2c:22:0d:
7c:c1:ba:6e:9a:f9:47:2f:a7:e5:4b:a2:e6:3d:da:
16:31:76:d4:c5:5d:79:d4:c8:c7:8f:8c:9c:fd:5b:
14:c4:12:af:1c:3e:e7:86:29:37:39:df:00:a1:ee:
0a:b6:29:b6:22:57:4a:ab:11:37:91:8b:c2:d3:a1:
b6:74:00:66:41:d9:94:f0:71:40:e3:68:ae:fa:9d:
c8:75:50:37:1a:9b:7a:3a:85:8a:61:3a:82:31:b4:
64:52:24:40:21:72:ea:92:1b:01:fb:4b:ab:7b:f5:
b7:c3:c1:bf:77:ac:0b:80:4c:79:1d:fb:e5:3b:db:
f7:a9:ee:7b:ff:cd:50:e2:d8:9f:bc:69:12:36:ec:
b4:32:44:83:6d:38:6a:13:3d:a0:68:e2:8d:49:f7:
de:03:06:e6:c0:34:0b:e1:7b:76:67:8c:90:93:ae:
8b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:96:08:26:1B:8A:64:9F:E0:29:CB:81:7A:5D:C1:65:4C:F6:83:0F
X509v3 Authority Key Identifier:
keyid:A0:EF:04:03:86:73:41:6D:17:57:D3:F0:54:11:89:51:1B:2E:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO8EA4ZzQW0XV9PwVBGJURsu0SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/707c6d-67fd-41ff-a1ba-846b5a6714d6/1/oO8EA4ZzQW0XV9PwVBGJURsu0SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/707c6d-67fd-41ff-a1ba-846b5a6714d6/1/oO8EA4ZzQW0XV9PwVBGJURsu0SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:29:7b:da:dc:c8:c4:4a:d3:9f:97:3c:7e:b9:2a:6a:04:5d:
7f:7a:dc:22:1c:5c:d6:12:de:ed:94:3c:c8:6b:58:af:95:8a:
fe:e9:8a:c0:c9:de:3a:dc:9f:a0:80:08:53:ab:c9:f2:28:0a:
4a:ad:bf:0e:1c:3c:8f:d0:c1:34:1a:0f:81:a6:62:45:c8:5a:
4f:51:48:4f:2a:69:33:47:26:ba:d5:f5:0f:96:0b:d5:98:b2:
00:04:d6:76:43:c5:92:a9:36:1c:fb:74:fc:18:fd:ea:90:b0:
3b:bf:99:cb:c9:4a:77:b3:5a:04:95:23:92:4e:29:92:c2:99:
fc:1f:26:80:75:b9:73:a0:f4:cb:96:a5:9f:8a:5a:f6:d6:62:
42:91:2e:7d:8c:72:c4:03:33:bf:56:65:90:bc:4e:9b:89:41:
d0:f4:0b:df:60:2d:e8:b0:6d:37:b2:48:07:3f:4e:bd:4e:2f:
c8:02:1e:04:0c:e7:5e:61:f3:96:48:20:97:4d:f7:24:69:b5:
3d:98:55:44:0b:5b:cf:b5:3d:59:fd:81:fa:fd:77:45:c4:c0:
fb:59:12:06:46:55:7b:60:e8:eb:ef:40:49:df:c1:ad:49:5c:
fc:b3:18:21:ca:76:3e:78:11:c3:a7:05:33:2c:17:54:17:1c:
44:7e:d7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:34:25 2025 by rpki-client