Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5f657e-90d8-460c-bab0-da33fcfba573/1/OepSPaDwu6EujCLzvkgEUCfdM1g.mft
File: OepSPaDwu6EujCLzvkgEUCfdM1g.mft (raw, json)
Hash identifier: VbNQDm2QyozQWh8L8rGshFC4FupEK1ZiEo128urOgDc=
Subject key identifier: DB:46:35:81:5C:2E:6E:0C:75:41:CD:25:4A:8A:C0:DB:93:1F:7F:98
Authority key identifier: 39:EA:52:3D:A0:F0:BB:A1:2E:8C:22:F3:BE:48:04:50:27:DD:33:58
Certificate issuer: /CN=39ea523da0f0bba12e8c22f3be48045027dd3358
Certificate serial: 018BDACB7D99FF240A02E4384BBAB2C1F14D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OepSPaDwu6EujCLzvkgEUCfdM1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/5f657e-90d8-460c-bab0-da33fcfba573/1/OepSPaDwu6EujCLzvkgEUCfdM1g.mft
Manifest number: 0851
Signing time: Fri 17 Nov 2023 01:00:50 +0000
Manifest this update: Fri 17 Nov 2023 01:00:50 +0000
Manifest next update: Sat 18 Nov 2023 01:00:50 +0000
Files and hashes: 1: OepSPaDwu6EujCLzvkgEUCfdM1g.crl (hash: oY4PnJq6Pt5L8rfKdSURzcdFmpDbRT4EDYuz1PAwzBU=)
2: jdMhMaZUiJSU3nlUyD4HFtd_xW0.roa (hash: c+nGdQEbyMvOj683yDeQrg01Js6zMiAxsqdctYWoAB4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:da:cb:7d:99:ff:24:0a:02:e4:38:4b:ba:b2:c1:f1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ea523da0f0bba12e8c22f3be48045027dd3358
Validity
Not Before: Nov 17 01:00:50 2023 GMT
Not After : Nov 18 01:00:50 2023 GMT
Subject: CN=db4635815c2e6e0c7541cd254a8ac0db931f7f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:89:20:83:6d:1e:e8:65:e2:6e:a3:65:52:
c3:f4:b8:38:df:70:79:c3:0f:bf:a0:83:2d:56:9f:
56:27:27:16:49:7c:c4:8a:f9:a9:2d:74:da:95:1f:
f4:14:a2:b3:42:32:8d:f9:8a:77:07:15:dc:09:a4:
03:79:31:a5:90:91:27:8b:40:34:90:a4:67:01:a6:
d7:61:bd:9a:96:69:4a:4e:80:89:fb:5f:da:b2:af:
a9:ed:fe:ff:f0:8d:21:67:24:58:81:1a:dc:4f:43:
f4:2c:7d:27:7c:33:f0:04:3c:4b:a7:7c:3d:28:fe:
a6:25:be:1c:56:40:78:83:fb:c4:11:f3:70:b4:10:
f2:ba:1b:51:0c:2b:3a:db:3a:b3:bd:3b:f9:f5:91:
97:3f:e5:6b:f2:6a:89:75:1f:eb:23:39:c9:48:36:
b5:bc:f5:85:fb:23:c3:bb:e0:91:09:2a:55:83:a5:
31:b3:65:41:ae:32:4d:0f:57:b5:73:57:9a:7c:b3:
7b:0f:4f:ff:8f:cc:2b:54:43:cd:6c:d3:f0:d0:ad:
a2:15:56:8f:47:74:88:0e:19:d4:23:f8:76:77:14:
9d:a7:70:d1:94:89:24:76:59:ef:a0:a7:54:db:20:
aa:f6:e0:a9:56:eb:69:07:26:8c:cb:5e:07:3b:ac:
a4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:46:35:81:5C:2E:6E:0C:75:41:CD:25:4A:8A:C0:DB:93:1F:7F:98
X509v3 Authority Key Identifier:
keyid:39:EA:52:3D:A0:F0:BB:A1:2E:8C:22:F3:BE:48:04:50:27:DD:33:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OepSPaDwu6EujCLzvkgEUCfdM1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5f657e-90d8-460c-bab0-da33fcfba573/1/OepSPaDwu6EujCLzvkgEUCfdM1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5f657e-90d8-460c-bab0-da33fcfba573/1/OepSPaDwu6EujCLzvkgEUCfdM1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:47:ca:ad:5b:25:3c:45:34:11:b3:22:71:99:05:ef:52:76:
86:d9:cf:27:b4:ba:68:67:00:96:9e:5e:03:67:13:49:8c:95:
c3:ee:65:e3:fb:96:c5:e8:88:4b:70:41:4f:6d:fb:3d:3c:38:
ce:6a:23:24:6f:66:a6:85:57:12:be:c0:02:8a:63:7e:5f:4e:
be:a4:ea:c1:5f:48:1e:51:29:0e:d9:4f:6d:36:34:a4:9f:f5:
04:21:3e:b8:aa:63:d3:02:25:28:2b:f8:c4:85:90:cc:4f:b8:
84:d2:b6:1c:40:dd:da:2b:24:7b:1e:33:b4:e4:28:c1:e2:7e:
95:9d:7b:c7:c7:97:5d:27:96:e0:2c:b9:c7:b5:54:96:9f:43:
d8:5d:d7:a9:db:39:3a:7c:7d:e4:8d:eb:7a:78:26:74:c2:5c:
e7:bd:c3:d1:ec:57:6e:ca:cc:75:73:5a:25:a1:5c:16:0e:3f:
57:36:bc:1f:ef:3f:27:b1:a6:46:d3:17:ba:30:3e:07:70:48:
c7:69:ea:8d:0c:2d:01:16:ae:55:98:0d:0b:c5:d1:52:19:f0:
e9:a0:0b:3d:fa:3a:5c:f5:df:4c:9e:5e:1b:6e:86:2f:32:c7:
7b:b1:cf:9d:fa:2a:6e:b0:46:2b:97:be:56:ec:00:7d:0a:f8:
79:25:2a:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:57:45 2025 by rpki-client