Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/b17acb-af28-4aef-a9dd-847d5e0fbe0d/1/OxAncb6Zye6qQflHI3NURUV1FoA.mft
File: OxAncb6Zye6qQflHI3NURUV1FoA.mft (raw, json)
Hash identifier: YxlUtTVCjEaxkW6WTX6ujR3X3mx2bkQ1qPcTbgvrHYM=
Subject key identifier: CA:0D:BD:40:10:38:1B:E2:48:0B:70:95:DD:45:38:A5:73:4C:34:38
Authority key identifier: 3B:10:27:71:BE:99:C9:EE:AA:41:F9:47:23:73:54:45:45:75:16:80
Certificate issuer: /CN=3b102771be99c9eeaa41f9472373544545751680
Certificate serial: 018BDD5EB2503B62E7CA1DBEC772C6E2C5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OxAncb6Zye6qQflHI3NURUV1FoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/b17acb-af28-4aef-a9dd-847d5e0fbe0d/1/OxAncb6Zye6qQflHI3NURUV1FoA.mft
Manifest number: 02
Signing time: Fri 17 Nov 2023 13:00:52 +0000
Manifest this update: Fri 17 Nov 2023 13:00:52 +0000
Manifest next update: Sat 18 Nov 2023 13:00:52 +0000
Files and hashes: 1: OxAncb6Zye6qQflHI3NURUV1FoA.crl (hash: IjaIG3qXMJaYzH7kaypBdvUDfMg5rlgCQQypJtUNbNs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:5e:b2:50:3b:62:e7:ca:1d:be:c7:72:c6:e2:c5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b102771be99c9eeaa41f9472373544545751680
Validity
Not Before: Nov 17 13:00:52 2023 GMT
Not After : Nov 18 13:00:52 2023 GMT
Subject: CN=ca0dbd4010381be2480b7095dd4538a5734c3438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ac:3a:80:3a:78:43:41:7d:c8:af:bf:62:31:
0a:bb:b2:bb:f5:a8:c1:1d:6f:82:c7:bd:cf:65:ac:
f2:98:78:d7:10:b5:ca:57:b4:49:8b:8a:4a:a3:a9:
67:aa:e5:d6:57:9e:f0:cc:26:f2:6c:11:17:89:2b:
d2:29:9a:43:72:29:f1:04:50:b2:7b:29:4c:5d:1c:
70:98:5e:b3:59:bf:57:23:4e:c5:1c:3b:9b:86:1e:
81:7a:3d:38:4f:c8:c5:6b:d3:14:05:3c:da:0e:eb:
8e:b4:54:36:d5:3b:33:ef:95:05:0a:4a:71:aa:13:
ab:56:03:e1:ff:65:2f:7f:3e:26:a3:b4:db:8d:a1:
4b:c6:20:ce:bb:67:1b:fd:3a:e3:ab:cb:42:d0:cf:
95:c0:cd:9c:cf:0c:5a:9f:42:49:ab:47:12:32:36:
65:23:b5:44:85:41:df:e4:67:37:81:15:ac:c1:a6:
34:56:c8:a1:1e:9a:6e:64:9f:85:84:02:c9:a1:44:
3b:44:0c:29:63:ad:06:30:91:1b:3c:96:b4:3c:3c:
ae:36:30:4a:87:83:c9:6b:2f:cd:12:cb:35:4e:0d:
11:8e:65:e5:b1:1c:45:0a:3f:43:aa:71:43:23:42:
76:c7:fc:fd:28:e5:18:7c:3e:77:73:f7:da:84:ff:
4d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0D:BD:40:10:38:1B:E2:48:0B:70:95:DD:45:38:A5:73:4C:34:38
X509v3 Authority Key Identifier:
keyid:3B:10:27:71:BE:99:C9:EE:AA:41:F9:47:23:73:54:45:45:75:16:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OxAncb6Zye6qQflHI3NURUV1FoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b17acb-af28-4aef-a9dd-847d5e0fbe0d/1/OxAncb6Zye6qQflHI3NURUV1FoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/b17acb-af28-4aef-a9dd-847d5e0fbe0d/1/OxAncb6Zye6qQflHI3NURUV1FoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:83:b3:ac:5e:f2:55:85:c7:26:a7:99:f7:2c:4d:d6:63:36:
f4:47:e4:f2:fd:55:23:f4:1f:d6:c5:aa:28:75:ae:18:a1:82:
7e:84:e7:d5:3a:10:4b:fa:32:f2:8e:65:53:6c:71:79:fb:a8:
73:73:1a:17:23:21:7f:98:82:c2:0b:19:7e:d5:20:ad:0a:ff:
5e:a7:99:35:38:cc:a3:4f:ab:0a:3d:c1:8d:42:84:26:9b:a0:
5b:51:8f:1c:e1:f5:0f:7a:dd:21:8d:48:8a:75:63:0b:dd:39:
cd:8d:a3:77:35:51:fc:ac:a1:c3:0c:84:35:59:f8:a9:62:24:
91:8e:f5:cd:5f:fc:98:e2:6a:5c:7e:d6:7d:e2:7b:73:08:df:
0c:10:41:b9:90:11:61:65:bb:4b:5a:2d:a9:73:11:82:5d:70:
e4:51:78:47:ca:b9:19:8d:fb:f7:dc:05:c6:31:2f:88:2c:ec:
7e:84:5f:9b:42:3f:a0:c8:7f:f3:9f:c7:48:2a:46:28:7e:4b:
e4:13:09:a4:9e:da:12:77:27:66:89:fb:96:0d:8c:84:ca:58:
31:5e:7b:86:21:77:ef:87:0e:3c:d4:a6:49:60:9f:65:a0:ce:
0f:af:4a:1d:ad:db:71:33:a5:85:a2:42:a7:01:44:92:e0:b1:
e1:85:a8:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvdXrJQO2Lnyh2+x3LG4sWjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMTAyNzcxYmU5OWM5ZWVhYTQxZjk0NzIzNzM1NDQ1NDU3
NTE2ODAwHhcNMjMxMTE3MTMwMDUyWhcNMjMxMTE4MTMwMDUyWjAzMTEwLwYDVQQD
EyhjYTBkYmQ0MDEwMzgxYmUyNDgwYjcwOTVkZDQ1MzhhNTczNGMzNDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaw6gDp4Q0F9yK+/YjEKu7K79ajB
HW+Cx73PZazymHjXELXKV7RJi4pKo6lnquXWV57wzCbybBEXiSvSKZpDcinxBFCy
eylMXRxwmF6zWb9XI07FHDubhh6Bej04T8jFa9MUBTzaDuuOtFQ21Tsz75UFCkpx
qhOrVgPh/2Uvfz4mo7TbjaFLxiDOu2cb/Trjq8tC0M+VwM2czwxan0JJq0cSMjZl
I7VEhUHf5Gc3gRWswaY0VsihHppuZJ+FhALJoUQ7RAwpY60GMJEbPJa0PDyuNjBK
h4PJay/NEss1Tg0RjmXlsRxFCj9DqnFDI0J2x/z9KOUYfD53c/fahP9NPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoNvUAQOBviSAtwld1FOKVzTDQ4MB8GA1UdIwQY
MBaAFDsQJ3G+mcnuqkH5RyNzVEVFdRaAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3hBbmNiNlp5ZTZxUWZsSEkzTlVSVVYxRm9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9iMTdhY2ItYWYyOC00YWVmLWE5ZGQt
ODQ3ZDVlMGZiZTBkLzEvT3hBbmNiNlp5ZTZxUWZsSEkzTlVSVVYxRm9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9iMTdhY2ItYWYyOC00YWVmLWE5ZGQtODQ3ZDVlMGZiZTBk
LzEvT3hBbmNiNlp5ZTZxUWZsSEkzTlVSVVYxRm9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYOzrF7y
VYXHJqeZ9yxN1mM29Efk8v1VI/Qf1sWqKHWuGKGCfoTn1ToQS/oy8o5lU2xxefuo
c3MaFyMhf5iCwgsZftUgrQr/XqeZNTjMo0+rCj3BjUKEJpugW1GPHOH1D3rdIY1I
inVjC905zY2jdzVR/KyhwwyENVn4qWIkkY71zV/8mOJqXH7WfeJ7cwjfDBBBuZAR
YWW7S1otqXMRgl1w5FF4R8q5GY3799wFxjEviCzsfoRfm0I/oMh/85/HSCpGKH5L
5BMJpJ7aEncnZon7lg2MhMpYMV57hiF374cOPNSmSWCfZaDOD69KHa3bcTOlhaJC
pwFEkuCx4YWolQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:56:44 2025 by rpki-client