Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/d4f3af-03f6-4ed3-8d31-f993075a86a0/1/tooObaUiLozupM0O87dK3frCkUk.mft
File: tooObaUiLozupM0O87dK3frCkUk.mft (raw, json)
Hash identifier: WG3B5t5LP17FtF35Oq2mtg0cMQe/GYuq3E5tYZBh1zw=
Subject key identifier: 12:90:EB:BD:4F:90:D9:AC:9B:2D:75:8F:54:51:CB:65:32:D0:3C:1B
Authority key identifier: B6:8A:0E:6D:A5:22:2E:8C:EE:A4:CD:0E:F3:B7:4A:DD:FA:C2:91:49
Certificate issuer: /CN=b68a0e6da5222e8ceea4cd0ef3b74addfac29149
Certificate serial: 018510CD9CF13D732CFF3BBAEA2C110105CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tooObaUiLozupM0O87dK3frCkUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/d4f3af-03f6-4ed3-8d31-f993075a86a0/1/tooObaUiLozupM0O87dK3frCkUk.mft
Manifest number: 013B
Signing time: Wed 14 Dec 2022 13:23:08 +0000
Manifest this update: Wed 14 Dec 2022 13:23:08 +0000
Manifest next update: Thu 15 Dec 2022 13:23:08 +0000
Files and hashes: 1: K2tV_ZVrbfCzmDhvNV5QtPrjWZE.roa (hash: K5rcAxeTfUSH9KmOeHMuVaee0k6wonQCXaRscfD8U0A=)
2: tooObaUiLozupM0O87dK3frCkUk.crl (hash: PohuvOlcx5bJBTL/vRNXSUlbA2Ocd8agJdoyUUYB0m8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:10:cd:9c:f1:3d:73:2c:ff:3b:ba:ea:2c:11:01:05:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68a0e6da5222e8ceea4cd0ef3b74addfac29149
Validity
Not Before: Dec 14 13:23:08 2022 GMT
Not After : Dec 15 13:23:08 2022 GMT
Subject: CN=1290ebbd4f90d9ac9b2d758f5451cb6532d03c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ca:93:51:74:25:a1:f0:3c:37:60:3c:67:81:
e6:59:2b:95:39:27:47:12:27:e6:74:1d:9f:94:11:
c0:c0:b7:61:67:46:73:13:0d:06:a5:5a:2c:dd:9a:
ff:00:57:21:66:37:ef:c7:d9:b4:51:0d:54:2e:92:
5a:ac:c6:38:fd:74:41:33:1c:02:8e:80:f6:94:9f:
10:59:f0:d3:9e:43:f4:cd:60:b9:4b:9e:70:43:3f:
db:3b:b1:26:e5:e3:c0:ff:b5:70:50:6b:94:93:2c:
d0:82:db:97:c1:b2:5b:ed:2b:c5:5a:19:8d:86:71:
85:9f:4b:49:c5:85:21:7e:34:64:45:d4:a9:43:8b:
1c:62:f5:46:3c:2e:69:7e:38:55:d7:12:c3:25:22:
d2:cb:26:65:93:2a:96:50:12:b5:ac:66:f6:b0:79:
10:87:e4:e2:b7:7a:d2:af:7b:46:5c:5c:99:37:b9:
86:8f:ff:80:dc:f0:50:ad:a9:5b:48:e9:83:5a:bd:
f1:a8:62:7d:2d:ce:e0:4c:6c:c3:02:cc:af:fa:76:
09:b8:77:92:cd:a8:f8:fc:cd:bf:0f:25:61:c5:a0:
b8:1c:73:85:b6:03:4f:1c:f0:c7:45:05:7f:75:a4:
bc:10:0f:ba:7c:5a:ef:d5:af:92:f2:78:04:13:fd:
50:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:90:EB:BD:4F:90:D9:AC:9B:2D:75:8F:54:51:CB:65:32:D0:3C:1B
X509v3 Authority Key Identifier:
keyid:B6:8A:0E:6D:A5:22:2E:8C:EE:A4:CD:0E:F3:B7:4A:DD:FA:C2:91:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tooObaUiLozupM0O87dK3frCkUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d4f3af-03f6-4ed3-8d31-f993075a86a0/1/tooObaUiLozupM0O87dK3frCkUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/d4f3af-03f6-4ed3-8d31-f993075a86a0/1/tooObaUiLozupM0O87dK3frCkUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ed:d3:35:24:0d:03:d8:6d:e5:56:fa:1b:ff:9f:7a:38:26:
ce:b5:9c:3a:86:e7:b5:b8:fd:b7:a8:b9:03:ad:7d:6d:b3:f6:
03:01:9a:5b:e8:a5:55:24:db:d9:0d:84:28:6f:73:7e:db:68:
01:8f:27:99:7c:d0:dc:04:bd:99:36:de:da:bb:d8:bf:8c:b9:
09:2e:41:d6:fd:90:c8:86:ea:8b:7a:97:88:47:3b:da:25:d8:
64:1b:56:39:1d:a5:51:19:6e:d4:ef:a3:5f:e4:7f:df:29:e4:
8f:fb:ea:83:e8:e5:c5:bf:92:41:e3:f2:37:23:93:cc:c9:be:
40:87:de:1d:09:06:e3:b5:ef:23:f4:e4:ea:77:14:af:4e:b5:
6d:28:06:b1:a9:89:2f:97:be:60:c8:95:74:0e:37:c6:36:1f:
6c:95:2b:ce:df:be:30:cd:24:18:b7:e6:b3:77:5a:19:20:8a:
6d:23:e1:d8:22:86:8a:f0:40:42:01:b9:11:6b:b3:e7:a5:ef:
f2:e2:48:f5:31:c4:e1:88:d6:aa:30:1c:aa:7a:c9:74:19:a5:
89:18:15:6f:fe:cb:db:ac:72:7a:ab:58:70:77:27:9f:66:44:
50:91:90:39:b7:27:dc:31:57:50:5b:1b:48:e7:cd:44:59:00:
29:8a:04:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:44 2025 by rpki-client