Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/e4bfda-e708-4eef-919a-4b594278e80e/1/OUxPHYvMwUBGCTEC1Xs0yRKbxH4.mft
File: OUxPHYvMwUBGCTEC1Xs0yRKbxH4.mft (raw, json)
Hash identifier: UzuuD1Gpr5Er9q8xL4lJ3hGX5BS4Oy+vv8SQylCeg4s=
Subject key identifier: D5:AC:FD:75:4D:69:DF:D8:DE:17:D7:3B:DE:3C:77:97:AC:5C:CD:27
Authority key identifier: 39:4C:4F:1D:8B:CC:C1:40:46:09:31:02:D5:7B:34:C9:12:9B:C4:7E
Certificate issuer: /CN=394c4f1d8bccc14046093102d57b34c9129bc47e
Certificate serial: 018C396D4C5DA7E5FCE959AD5882C3AE42CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUxPHYvMwUBGCTEC1Xs0yRKbxH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/e4bfda-e708-4eef-919a-4b594278e80e/1/OUxPHYvMwUBGCTEC1Xs0yRKbxH4.mft
Manifest number: 07E0
Signing time: Tue 05 Dec 2023 10:01:53 +0000
Manifest this update: Tue 05 Dec 2023 10:01:53 +0000
Manifest next update: Wed 06 Dec 2023 10:01:53 +0000
Files and hashes: 1: MhZnxgdFl4AXbr8k-xBBa_F2Jak.roa (hash: nsMkpKwDYkXUu0Bz6KDcylbn502j9H7X2/7ghv79iO0=)
2: OUxPHYvMwUBGCTEC1Xs0yRKbxH4.crl (hash: lgAXUXmq3s2YzSJ8Z6r76OT/oMOTCiD013y6eIyKDto=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:39:6d:4c:5d:a7:e5:fc:e9:59:ad:58:82:c3:ae:42:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=394c4f1d8bccc14046093102d57b34c9129bc47e
Validity
Not Before: Dec 5 10:01:53 2023 GMT
Not After : Dec 6 10:01:53 2023 GMT
Subject: CN=d5acfd754d69dfd8de17d73bde3c7797ac5ccd27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cd:3d:f8:e0:96:e4:9d:b0:35:e0:6e:c8:a5:
9d:fe:82:9a:18:76:15:df:da:ee:d1:21:94:b0:00:
df:06:93:f0:6f:37:ea:55:02:c3:41:eb:ee:b0:59:
b1:58:9a:a0:a3:a3:6d:ac:2c:db:de:21:7b:1a:08:
8f:d3:c9:0d:62:34:0c:bd:4b:aa:bf:5f:58:b4:86:
1a:63:4f:ab:86:f1:f9:5d:7f:8e:8d:94:7a:8c:05:
00:a4:06:63:6d:bb:66:12:ed:a2:fe:43:65:c6:e4:
dc:5e:e3:41:ff:80:a5:1b:05:f1:6f:a4:bf:09:be:
ef:e2:b9:9e:3b:1c:1f:a1:74:9b:53:1d:f1:d5:b4:
38:5c:aa:f5:db:85:09:10:fa:a5:67:a5:4d:0d:cd:
d1:a8:d4:b8:79:ae:8d:c7:ec:59:c5:98:21:b7:93:
fb:b1:e1:e6:25:fe:79:5c:d6:8d:3c:01:9e:24:21:
55:70:bf:5f:8b:56:54:ba:33:b9:7f:cd:9d:11:9e:
f6:d8:90:f4:2e:3a:7f:93:01:ad:fa:5e:db:e0:e9:
be:7c:ec:c9:d0:80:6c:4f:cd:25:e5:4c:95:ca:11:
32:4e:47:6b:03:da:8d:53:37:c4:4d:4d:7c:23:e9:
17:04:d7:a6:fb:48:05:e1:75:8f:3b:0e:43:5f:40:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:AC:FD:75:4D:69:DF:D8:DE:17:D7:3B:DE:3C:77:97:AC:5C:CD:27
X509v3 Authority Key Identifier:
keyid:39:4C:4F:1D:8B:CC:C1:40:46:09:31:02:D5:7B:34:C9:12:9B:C4:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUxPHYvMwUBGCTEC1Xs0yRKbxH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e4bfda-e708-4eef-919a-4b594278e80e/1/OUxPHYvMwUBGCTEC1Xs0yRKbxH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e4bfda-e708-4eef-919a-4b594278e80e/1/OUxPHYvMwUBGCTEC1Xs0yRKbxH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d1:69:ba:95:a6:5a:40:aa:66:35:ad:4f:b5:8c:a5:56:f9:
b8:4a:3c:af:e8:4e:19:1a:82:d9:cd:78:24:30:a7:90:a3:f8:
d6:66:e0:0b:9a:a1:65:27:4b:7c:9e:87:a3:38:1e:30:fe:7f:
ff:76:bf:e6:b7:c4:08:9a:fa:20:53:a3:0a:3c:49:b2:93:41:
8f:91:ef:db:fb:8f:dd:c3:a5:f1:75:c6:d5:f5:5d:62:34:05:
8b:46:84:c7:69:9a:5b:1c:ef:bd:00:74:ac:7d:91:91:b3:a9:
df:98:ee:8c:34:c0:1b:93:8f:91:a1:c9:e6:97:b5:c0:66:22:
93:a1:bd:36:ac:1e:03:ec:57:c1:34:ab:a3:af:47:80:22:3e:
50:d7:2e:e0:b5:3b:5c:a8:f0:51:ca:f8:11:aa:12:f5:84:f4:
9a:54:d3:aa:9d:d4:92:05:60:1d:9f:0e:b2:b7:2a:44:d2:bf:
49:90:b5:97:f1:29:b9:ab:c4:a7:2e:6b:df:fd:d9:49:51:cf:
4c:32:4b:ca:19:59:72:b8:75:45:cd:0f:87:2b:93:80:5d:49:
4b:ac:4a:6d:cb:8e:69:7e:00:c8:d4:7a:e8:e6:89:26:f3:fa:
3e:7e:2a:27:68:2c:af:38:25:7a:4b:9f:4a:1c:97:b6:f8:5b:
0a:12:bc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:21 2025 by rpki-client