Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9a3898-f8fd-4add-b85d-4c5d3518472c/1/OkoDTnfBRLMYfD3l47uj5gTH5Js.mft
File: OkoDTnfBRLMYfD3l47uj5gTH5Js.mft (raw, json)
Hash identifier: MlyVAt2qIf3ch/dHJGuyE0soS9LGtaoBgQa71y5VdMA=
Subject key identifier: A2:A5:88:06:55:DA:C6:72:80:A8:F0:C9:F1:55:05:13:CC:BC:02:69
Authority key identifier: 3A:4A:03:4E:77:C1:44:B3:18:7C:3D:E5:E3:BB:A3:E6:04:C7:E4:9B
Certificate issuer: /CN=3a4a034e77c144b3187c3de5e3bba3e604c7e49b
Certificate serial: 0185328A90621EF40A42E2120DE41D393FAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OkoDTnfBRLMYfD3l47uj5gTH5Js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9a3898-f8fd-4add-b85d-4c5d3518472c/1/OkoDTnfBRLMYfD3l47uj5gTH5Js.mft
Manifest number: 09D3
Signing time: Wed 21 Dec 2022 02:36:59 +0000
Manifest this update: Wed 21 Dec 2022 02:36:59 +0000
Manifest next update: Thu 22 Dec 2022 02:36:59 +0000
Files and hashes: 1: KGlR-39dRBLJLtkJae05FSx7JM0.roa (hash: zRNvNabCvUtnlnh6+GGhzXOv+uCVAJCKz17DLAP4Lho=)
2: OkoDTnfBRLMYfD3l47uj5gTH5Js.crl (hash: COTEyLjkB5Y5Z+dfI/c12cdHdfWQ152styyqKjwe4So=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:32:8a:90:62:1e:f4:0a:42:e2:12:0d:e4:1d:39:3f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a4a034e77c144b3187c3de5e3bba3e604c7e49b
Validity
Not Before: Dec 21 02:36:59 2022 GMT
Not After : Dec 22 02:36:59 2022 GMT
Subject: CN=a2a5880655dac67280a8f0c9f1550513ccbc0269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:d1:be:ed:a7:26:e7:a2:88:b4:c9:e0:ea:
72:a4:e6:6e:20:d9:39:3e:d8:f3:44:81:a6:e0:fc:
7d:33:6c:58:c6:58:67:0c:17:2c:33:c1:7a:8e:66:
3c:23:ab:3e:9c:93:50:99:6d:c9:37:0e:ec:02:4c:
94:59:63:f3:cd:66:6c:a6:c6:f8:8b:6a:fd:f2:18:
95:fa:15:c4:00:54:01:bf:db:2a:85:03:7d:e9:93:
1c:e6:59:59:dd:9f:99:da:16:26:bc:bb:4b:c7:6e:
06:ad:9a:c4:92:09:97:22:ef:79:49:b1:75:36:5d:
88:dd:c9:75:49:2d:00:80:34:3b:30:bf:2f:76:af:
7c:f4:58:2f:40:02:3b:4d:a9:53:5a:2e:9e:9e:58:
fd:49:73:4e:ed:7c:c1:3a:ba:da:e6:14:e2:37:23:
98:1f:96:91:91:3d:16:cb:44:c6:52:ef:4f:7d:85:
3c:55:78:6d:0b:08:bd:53:97:13:55:07:ca:ec:78:
ce:fb:51:6d:ea:5a:7f:aa:84:e2:51:4c:61:03:46:
e1:d4:1d:42:e1:31:3c:91:ba:cd:36:5f:ee:eb:35:
a9:e1:f0:08:4b:d1:a3:00:6b:35:88:0e:77:56:7c:
98:64:52:9b:94:f0:91:66:66:b5:61:90:73:52:8b:
46:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:A5:88:06:55:DA:C6:72:80:A8:F0:C9:F1:55:05:13:CC:BC:02:69
X509v3 Authority Key Identifier:
keyid:3A:4A:03:4E:77:C1:44:B3:18:7C:3D:E5:E3:BB:A3:E6:04:C7:E4:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OkoDTnfBRLMYfD3l47uj5gTH5Js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9a3898-f8fd-4add-b85d-4c5d3518472c/1/OkoDTnfBRLMYfD3l47uj5gTH5Js.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9a3898-f8fd-4add-b85d-4c5d3518472c/1/OkoDTnfBRLMYfD3l47uj5gTH5Js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:ce:35:49:22:00:af:40:5b:4c:3a:bb:f9:48:4f:40:3d:49:
75:1d:2c:b3:fd:95:96:98:88:13:06:17:29:f5:db:7d:a8:db:
55:00:49:47:81:25:37:42:ea:90:d4:42:3b:4f:cd:c2:be:06:
66:c3:2d:a2:c4:65:fd:1f:16:02:4d:f3:ac:79:64:db:a2:76:
d9:6b:80:f2:6a:e2:4c:ad:fd:e5:99:92:f9:f1:e7:9c:07:76:
c0:ec:91:7c:80:d4:69:f1:97:2b:9d:cd:b8:f0:0f:12:0e:0f:
dd:7d:10:05:28:e7:6f:17:9f:e7:b2:fb:a2:39:20:49:23:ef:
97:37:ae:36:3f:bd:49:7d:bb:09:86:c1:9e:1c:98:71:f2:ef:
96:a9:a2:70:a9:20:02:0d:c0:67:48:1e:6e:96:85:85:c4:76:
48:30:8e:c8:25:a9:f5:ca:a2:ed:86:4e:9a:7a:f5:7f:fd:f5:
9a:fb:fc:6b:93:42:d3:6c:fd:5d:f2:1e:cb:2a:38:3e:ed:b8:
bd:0f:15:91:4a:ce:06:fa:0d:1d:5a:3d:60:62:05:e8:ac:14:
48:02:89:aa:bd:83:5b:46:3e:e3:39:1b:d8:55:83:08:5d:dc:
8c:d9:cc:dc:e3:89:f1:d1:df:33:62:7c:07:4d:af:72:7a:62:
17:5a:9b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:53 2024 by rpki-client on console-fra.rpki-client.org