Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/12f56c-be48-4152-8182-1591ea07d4d9/1/oVj7BgQ377l_TAPf-3UXFp8gScQ.mft
File: oVj7BgQ377l_TAPf-3UXFp8gScQ.mft (raw, json)
Hash identifier: obmqInKKwlL5VVRYi/F0q1wDCdwkvMnbglu6Eymw7uo=
Subject key identifier: DB:B2:3F:AB:A2:24:E1:6F:0E:D4:60:8B:B7:61:C8:76:AE:89:D0:FB
Authority key identifier: A1:58:FB:06:04:37:EF:B9:7F:4C:03:DF:FB:75:17:16:9F:20:49:C4
Certificate issuer: /CN=a158fb060437efb97f4c03dffb7517169f2049c4
Certificate serial: 018BAD170FAA24A1B91EB6FA1F0299A2C3FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oVj7BgQ377l_TAPf-3UXFp8gScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/12f56c-be48-4152-8182-1591ea07d4d9/1/oVj7BgQ377l_TAPf-3UXFp8gScQ.mft
Manifest number: 013B
Signing time: Wed 08 Nov 2023 04:00:51 +0000
Manifest this update: Wed 08 Nov 2023 04:00:51 +0000
Manifest next update: Thu 09 Nov 2023 04:00:51 +0000
Files and hashes: 1: 6QoZHp3yiHBK-dsbPM3b4uWIDJE.roa (hash: jUWmxOQhTFfpDkf1Q5GkJgTJKweogOJgQmZjnZRSbEk=)
2: oVj7BgQ377l_TAPf-3UXFp8gScQ.crl (hash: E3zg5JcpLnOfmq5TVdlzJy+HxLQLoegKfX3tcH+L5nw=)
3: rOnRX0BWglyVdGwFT0JEEkRLrac.roa (hash: IJWIIlxS2zvvtvxxqi+4SsIYHHUfpDAW/sL3xWX4oIk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ad:17:0f:aa:24:a1:b9:1e:b6:fa:1f:02:99:a2:c3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a158fb060437efb97f4c03dffb7517169f2049c4
Validity
Not Before: Nov 8 04:00:51 2023 GMT
Not After : Nov 9 04:00:51 2023 GMT
Subject: CN=dbb23faba224e16f0ed4608bb761c876ae89d0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:44:0a:11:d3:66:42:94:ac:9f:c9:40:13:aa:
6c:25:3b:7f:19:c3:6f:83:4d:d1:0a:d7:13:a2:a5:
6c:b1:9d:a4:a3:c3:91:7e:8a:5f:12:50:e1:5c:dd:
d3:d4:92:b7:8c:a6:ca:d9:c7:68:98:40:39:41:d7:
cb:d7:53:40:20:f2:27:a7:0f:08:52:45:3b:cb:27:
c8:cc:bd:21:ae:e0:a8:7a:f2:ba:5b:0f:29:71:ed:
65:79:e0:d0:34:20:fd:7b:1d:cc:1d:fd:64:56:6f:
29:6c:65:6c:53:2c:6d:be:e9:0c:22:f2:7c:81:87:
90:16:1c:5a:58:a4:f8:35:43:33:a0:6e:6b:db:61:
53:ad:86:bf:85:01:44:0d:4f:a6:73:da:5b:eb:b2:
cc:1a:5c:6a:59:3f:82:bc:6f:90:e1:9f:6c:04:87:
bd:23:dc:88:1c:64:7a:6f:f7:d2:a1:f3:7c:a3:4d:
5c:9a:7d:05:94:89:39:96:ba:63:54:5c:ff:3c:f2:
f3:12:20:1e:44:6a:ff:bb:79:62:05:aa:a0:dd:86:
02:86:c9:2e:bc:2f:1e:59:7c:df:60:b0:d2:48:29:
e3:f2:68:f7:f2:36:91:c4:a9:3d:c9:c9:dd:5e:a6:
4f:97:5e:88:07:00:2e:66:c8:5f:e1:6c:ba:fc:73:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B2:3F:AB:A2:24:E1:6F:0E:D4:60:8B:B7:61:C8:76:AE:89:D0:FB
X509v3 Authority Key Identifier:
keyid:A1:58:FB:06:04:37:EF:B9:7F:4C:03:DF:FB:75:17:16:9F:20:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oVj7BgQ377l_TAPf-3UXFp8gScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/12f56c-be48-4152-8182-1591ea07d4d9/1/oVj7BgQ377l_TAPf-3UXFp8gScQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/12f56c-be48-4152-8182-1591ea07d4d9/1/oVj7BgQ377l_TAPf-3UXFp8gScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:01:cd:c9:aa:93:dc:d5:6c:2d:88:da:de:48:b3:05:d6:60:
d5:9a:15:68:29:c4:36:87:cb:d9:89:3a:59:07:c8:f2:85:a3:
dd:1d:cb:1e:89:a8:e5:01:64:89:93:a3:91:5b:ff:e9:32:6f:
f6:d5:32:ed:8e:11:60:68:0d:ca:4d:4f:09:62:78:6b:fd:7c:
c9:26:80:14:fd:91:74:1d:07:18:17:0b:03:ce:e8:bf:bc:96:
da:51:9d:b9:a5:4d:f3:51:b8:26:12:63:27:9c:f7:dc:9d:36:
93:14:06:fe:b2:85:64:74:e1:e6:8c:b2:81:36:8c:84:54:7c:
c4:c6:1c:11:2b:25:f9:de:18:38:44:87:b1:e8:ab:b5:d6:53:
49:3a:02:9f:a0:9b:a2:fa:19:06:ed:e1:fe:4d:2b:a4:7a:90:
69:c9:08:df:07:1c:0d:b8:ca:8f:17:93:57:d1:34:7c:a2:82:
28:2c:16:8b:52:c4:25:ba:37:7c:44:41:34:0b:78:31:b7:3f:
dc:01:bc:94:33:b3:0f:0a:9d:d0:60:d1:66:48:80:15:cb:a5:
ad:c1:fd:a3:3c:49:85:a1:16:db:94:8d:56:ce:3b:b5:8e:5d:
4e:56:d6:95:08:19:f1:5c:7e:a4:1f:9d:01:86:65:d3:7d:3c:
81:62:47:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:35:32 2025 by rpki-client