Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/02ac2d-0e8b-4b77-8d29-486334de7127/1/OheASNEnrzQz8XvM2l0H1lfspog.mft
File: OheASNEnrzQz8XvM2l0H1lfspog.mft (raw, json)
Hash identifier: baWyoh2oUcyDyOYLNa1P1+3JitgoS88P5Xemi9yAHK8=
Subject key identifier: 89:E0:F5:FA:D5:9B:E9:26:2E:C9:84:C4:B3:A4:E7:D3:32:FE:00:5B
Authority key identifier: 3A:17:80:48:D1:27:AF:34:33:F1:7B:CC:DA:5D:07:D6:57:EC:A6:88
Certificate issuer: /CN=3a178048d127af3433f17bccda5d07d657eca688
Certificate serial: 018CC871A0F40EC3D10586C9FE936EB2C7F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OheASNEnrzQz8XvM2l0H1lfspog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/02ac2d-0e8b-4b77-8d29-486334de7127/1/OheASNEnrzQz8XvM2l0H1lfspog.mft
Manifest number: 06EF
Signing time: Tue 02 Jan 2024 04:32:18 +0000
Manifest this update: Tue 02 Jan 2024 04:32:18 +0000
Manifest next update: Wed 03 Jan 2024 04:32:18 +0000
Files and hashes: 1: DaflifduOvx8XnynsSC18Ns2FDk.roa (hash: NVb26ZMrRnESth466UkBvPDKrFy7xZoa4FK3FPbQQy0=)
2: OheASNEnrzQz8XvM2l0H1lfspog.crl (hash: rnqYsuP2ztGLH0WAnRaV9uVEgFAkiGoqZ2kR4Jtd9u4=)
3: hvhqUhTz67fDoCy0uDEL2m06Sq4.roa (hash: LvmxVhwuQLi6cavkDM45F1sKuZFObGZE9Qo+Od1Su50=)
4: pWgXMg0WeniP4BAwveHEJNkqAL4.roa (hash: S6I8GBZNTgc1UuCFAnHUG02m0xYFmX2sohsEhbah7cI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:a0:f4:0e:c3:d1:05:86:c9:fe:93:6e:b2:c7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a178048d127af3433f17bccda5d07d657eca688
Validity
Not Before: Jan 2 04:32:18 2024 GMT
Not After : Jan 3 04:32:18 2024 GMT
Subject: CN=89e0f5fad59be9262ec984c4b3a4e7d332fe005b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6e:ec:d8:41:d7:00:fb:c5:a6:4d:09:8c:96:
32:d3:01:b2:82:dd:2d:ca:75:84:8a:59:c5:98:ef:
63:8b:5f:87:59:04:a1:bf:d7:f2:2e:13:7a:9f:03:
10:dd:f1:29:94:24:3c:5b:99:ac:3a:6b:0c:ed:45:
24:b3:58:51:40:9c:75:fb:a1:aa:81:9d:d7:68:d1:
ca:6f:5a:8a:c5:8b:2f:52:12:0d:f6:75:f0:ba:e9:
38:c9:3f:d9:69:f0:8e:e0:09:7a:90:0c:ed:3a:84:
d6:3a:cd:38:42:20:92:75:00:24:ee:81:28:26:b1:
02:a0:5f:8c:5a:10:f7:ef:dd:27:2d:f5:20:d4:37:
8a:27:6e:bd:aa:55:34:5c:b1:b1:e1:4a:b1:7e:08:
a5:4d:f1:c7:63:d8:33:0a:f9:69:7a:84:a1:0d:02:
4e:52:6c:1b:1a:66:91:d4:fb:29:29:4b:ab:7c:b5:
88:1b:af:51:4b:dc:9a:79:b0:60:59:21:53:90:72:
49:c9:39:2e:b9:f8:96:4a:dc:c2:d0:2e:b7:f2:cd:
c0:b2:28:a6:c7:20:72:5c:98:7d:cc:33:37:f8:37:
e4:1c:c4:ba:3e:c1:19:cf:20:fa:13:57:c0:92:29:
4f:46:18:f2:5c:18:96:5c:d1:58:7a:51:42:c4:eb:
07:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E0:F5:FA:D5:9B:E9:26:2E:C9:84:C4:B3:A4:E7:D3:32:FE:00:5B
X509v3 Authority Key Identifier:
keyid:3A:17:80:48:D1:27:AF:34:33:F1:7B:CC:DA:5D:07:D6:57:EC:A6:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OheASNEnrzQz8XvM2l0H1lfspog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/02ac2d-0e8b-4b77-8d29-486334de7127/1/OheASNEnrzQz8XvM2l0H1lfspog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/02ac2d-0e8b-4b77-8d29-486334de7127/1/OheASNEnrzQz8XvM2l0H1lfspog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3d:03:ed:52:2b:cb:75:08:75:9c:0b:96:cb:d9:79:49:ba:
c3:52:23:2f:21:db:ca:aa:70:3c:a7:9d:42:4f:e5:62:90:71:
d4:6d:10:f4:f7:f7:9b:0a:99:f8:6e:cd:22:90:9b:01:e4:87:
e9:2b:df:1c:44:8c:ca:90:b7:84:62:d8:ba:4b:44:e8:fc:35:
02:53:2f:92:8d:f0:73:19:0c:15:13:11:b6:5b:bc:5d:13:32:
d8:a3:91:6b:87:f4:38:9b:77:57:83:67:d6:c2:8a:62:bf:fb:
1e:05:83:be:06:b8:b6:e7:10:d0:65:bf:81:ba:00:e3:42:57:
97:21:17:74:16:cc:34:82:c3:3e:3d:78:cb:5b:fe:74:3e:7e:
ea:a1:ba:0b:7f:1b:30:54:fd:0f:29:58:3d:56:fc:cc:ba:6c:
c1:b5:fa:29:78:a3:78:42:58:fd:c1:15:a8:e0:48:5a:4e:9c:
05:6a:10:06:0c:69:ff:99:4b:e5:9e:b9:bf:df:93:50:8a:f4:
ad:e3:b9:95:ba:6b:16:b9:09:ee:17:6d:59:c2:7d:94:af:27:
f2:10:8b:99:3c:0a:41:f6:e8:f9:35:37:6d:27:bf:af:b4:d7:
b5:29:94:8b:b7:22:f1:fa:46:16:c5:98:bd:54:fe:b3:bb:58:
65:c3:08:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:46 2024 by rpki-client on console-fra.rpki-client.org