Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1007ee-cf83-4a93-ad0c-046c8d40448a/1/oXoqrHNkVjHvkxHUssqdNV9_jBs.mft
File: oXoqrHNkVjHvkxHUssqdNV9_jBs.mft (raw, json)
Hash identifier: rn4c4YjCwFrpsFLIjgPzVdHEcm0Sgn8/7GRdPLp1Ykg=
Subject key identifier: 5D:2B:A2:DB:3D:8B:BA:35:66:96:EA:1B:DA:C7:73:F3:C7:BA:29:E0
Authority key identifier: A1:7A:2A:AC:73:64:56:31:EF:93:11:D4:B2:CA:9D:35:5F:7F:8C:1B
Certificate issuer: /CN=a17a2aac73645631ef9311d4b2ca9d355f7f8c1b
Certificate serial: 0183AC8B95D3ADE2CE8D25D0AF72746C7168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oXoqrHNkVjHvkxHUssqdNV9_jBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1007ee-cf83-4a93-ad0c-046c8d40448a/1/oXoqrHNkVjHvkxHUssqdNV9_jBs.mft
Manifest number: 0A8C
Signing time: Thu 06 Oct 2022 09:06:12 +0000
Manifest this update: Thu 06 Oct 2022 09:06:12 +0000
Manifest next update: Fri 07 Oct 2022 09:06:12 +0000
Files and hashes: 1: HsoHRodEDsJEhju1uACZ9AWGB7E.roa (hash: FZgNordO4d1y1qsyTEbdZka1QMMrdA03wN8yHaPPc0M=)
2: oXoqrHNkVjHvkxHUssqdNV9_jBs.crl (hash: 2SjO+9DEjhi6ogc4uDtnoSzlG++JlPdL50sdDUEMLvg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ac:8b:95:d3:ad:e2:ce:8d:25:d0:af:72:74:6c:71:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a17a2aac73645631ef9311d4b2ca9d355f7f8c1b
Validity
Not Before: Oct 6 09:06:12 2022 GMT
Not After : Oct 7 09:06:12 2022 GMT
Subject: CN=5d2ba2db3d8bba356696ea1bdac773f3c7ba29e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:8f:c7:2f:0c:ec:24:89:3e:8d:6c:10:08:
b8:fd:46:fe:c5:9a:c4:3a:e0:07:05:5f:b9:bb:39:
e1:6f:91:b2:3c:03:7b:79:8d:06:0d:93:69:66:6c:
bc:a9:7b:49:12:9a:32:a5:79:aa:34:07:fc:49:5b:
a7:f8:25:15:c2:cb:d7:b7:20:a0:69:28:5a:03:5c:
70:bf:a1:5a:3e:4d:13:82:9f:23:36:09:23:71:6d:
b7:94:51:d8:8c:36:50:0d:8e:8c:b9:47:70:56:9c:
a4:37:8b:98:aa:3d:74:ed:1e:85:23:c8:92:c4:61:
aa:53:36:11:80:0c:48:c2:8b:b5:af:fd:78:a7:c2:
e5:71:7e:b1:2d:92:36:12:a8:88:1c:2b:66:f7:65:
c1:cc:d0:82:cd:74:06:50:b8:3e:e0:37:4e:c7:f0:
84:85:ab:b3:b5:8a:0d:2b:34:d9:30:7b:52:5c:8a:
bc:fb:58:41:cd:7b:63:a1:8a:6f:c2:26:f5:f2:c4:
e9:31:94:4c:94:f4:35:29:37:04:90:05:4c:62:02:
af:26:af:ef:6b:b8:b9:41:06:8b:f5:d2:fe:76:2f:
7e:49:28:5a:f5:9c:4d:ab:af:11:50:59:ae:e4:ea:
72:63:36:d8:ce:79:32:07:b0:1e:b1:b9:cf:82:85:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2B:A2:DB:3D:8B:BA:35:66:96:EA:1B:DA:C7:73:F3:C7:BA:29:E0
X509v3 Authority Key Identifier:
keyid:A1:7A:2A:AC:73:64:56:31:EF:93:11:D4:B2:CA:9D:35:5F:7F:8C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oXoqrHNkVjHvkxHUssqdNV9_jBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1007ee-cf83-4a93-ad0c-046c8d40448a/1/oXoqrHNkVjHvkxHUssqdNV9_jBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1007ee-cf83-4a93-ad0c-046c8d40448a/1/oXoqrHNkVjHvkxHUssqdNV9_jBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4c:87:5d:23:1b:ba:34:2d:a6:fc:38:5a:a0:6b:22:aa:3f:
94:65:a0:e3:ce:24:45:3d:fa:8a:7e:34:66:d5:99:03:c2:11:
74:a1:f3:1a:85:7b:c5:b7:6c:9c:56:db:74:83:37:e7:68:98:
1b:1d:7c:a5:72:31:59:f3:a3:b5:fb:15:5a:31:4c:dd:f8:de:
c0:4f:66:f9:90:01:82:71:5f:aa:c6:68:cd:78:79:d1:41:3b:
ae:8f:74:5c:47:ed:3e:44:c7:2b:d1:de:7d:27:9c:55:cb:c5:
a5:18:48:41:51:a4:b4:1e:f5:26:ed:d2:4c:aa:c2:e1:3c:19:
3e:e0:bb:f2:70:bf:bb:af:44:00:71:79:5c:95:be:4a:74:1d:
bf:bd:c5:5f:18:87:30:ab:4b:c1:c3:ea:7e:de:5e:fc:69:21:
a3:55:16:c2:17:75:6b:43:c6:f0:52:28:ce:24:0b:9b:89:01:
74:c9:32:4f:58:95:d3:40:68:3a:98:48:82:50:a7:cf:0e:b6:
bf:c6:00:ad:85:11:ed:6d:11:95:3d:ec:3f:bd:85:de:4b:c3:
d0:85:2f:93:5a:51:eb:85:6b:85:26:62:bc:e8:9f:40:28:8d:
11:ab:a4:f0:e3:f5:2f:4c:7b:37:bd:d2:48:f9:44:d7:0d:65:
4e:a4:64:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:36:30 2025 by rpki-client