Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/873136-09d6-42aa-b41c-4ec1036861e5/1/ojC2rCCWeqfAePCku3JmmAUi8ck.mft
File: ojC2rCCWeqfAePCku3JmmAUi8ck.mft (raw, json)
Hash identifier: O7PUh1B5IZuvhuKEezRS8SbhvPNCz0jczsS80MCyhmc=
Subject key identifier: FA:C3:90:01:B3:76:83:20:2F:28:FF:9A:C5:85:65:72:14:12:7D:F9
Authority key identifier: A2:30:B6:AC:20:96:7A:A7:C0:78:F0:A4:BB:72:66:98:05:22:F1:C9
Certificate issuer: /CN=a230b6ac20967aa7c078f0a4bb7266980522f1c9
Certificate serial: 018C80A9076516576785B46B97C7D681BEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojC2rCCWeqfAePCku3JmmAUi8ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/873136-09d6-42aa-b41c-4ec1036861e5/1/ojC2rCCWeqfAePCku3JmmAUi8ck.mft
Manifest number: 0FE8
Signing time: Tue 19 Dec 2023 06:00:10 +0000
Manifest this update: Tue 19 Dec 2023 06:00:10 +0000
Manifest next update: Wed 20 Dec 2023 06:00:10 +0000
Files and hashes: 1: HJIJzgj02eJeo4i4-Oqpquhqd4c.roa (hash: wrZsixGwOR8Feh+sK78jzAvIAujwYuT/f1ROjNNU0mc=)
2: YNr3mjiZWPzcR-CzBEB0HeWQrPw.roa (hash: rQzhq+2YXGRaB+k2ptUVnVBUXOK5IcOq7nmNaqCZBzg=)
3: ojC2rCCWeqfAePCku3JmmAUi8ck.crl (hash: 5JC1HewxFPTDkM9pX+yYRUE50IFhA3fTbPrJzDiqcUg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:80:a9:07:65:16:57:67:85:b4:6b:97:c7:d6:81:be:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a230b6ac20967aa7c078f0a4bb7266980522f1c9
Validity
Not Before: Dec 19 06:00:10 2023 GMT
Not After : Dec 20 06:00:10 2023 GMT
Subject: CN=fac39001b37683202f28ff9ac585657214127df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d8:72:32:7f:3d:de:ec:69:75:87:9a:9d:5d:
89:0e:e6:96:b1:6f:e0:ba:56:92:f5:6d:78:b2:af:
09:a2:2c:b3:10:75:b6:0a:0b:39:ed:aa:92:6a:4a:
57:9f:07:38:34:0a:b3:68:b2:32:d5:3c:f9:46:b0:
17:b0:85:24:36:08:a8:ef:04:4a:56:5f:bd:f9:d7:
c0:bb:e9:31:62:ba:2e:74:32:bd:00:c3:e2:b4:aa:
85:de:e6:07:c9:a2:61:18:1d:91:5f:13:4f:46:11:
8f:e8:a4:f8:b6:47:ac:a5:cf:29:5a:0b:b8:93:8f:
ce:67:16:e0:14:dd:22:60:66:79:06:33:56:34:d7:
b7:d0:a2:4d:84:86:0c:a9:2a:df:3a:51:3a:6c:2c:
49:d6:80:e6:aa:ba:4e:1a:14:24:04:6d:32:28:78:
d1:19:b4:19:7b:0e:4c:fd:36:fa:c2:7d:39:ee:eb:
fa:f3:bf:b6:6d:78:53:86:59:5a:28:fb:7f:25:37:
c4:58:c4:7a:93:ff:96:1a:9b:29:99:67:29:fa:6a:
f8:e7:1f:85:28:ad:0b:2d:e6:e1:df:0f:4c:2f:d1:
a1:ba:89:80:c0:d0:22:da:55:ae:29:f5:35:60:14:
c8:7e:eb:a3:9b:54:49:35:7a:0f:ef:60:34:16:ac:
e2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C3:90:01:B3:76:83:20:2F:28:FF:9A:C5:85:65:72:14:12:7D:F9
X509v3 Authority Key Identifier:
keyid:A2:30:B6:AC:20:96:7A:A7:C0:78:F0:A4:BB:72:66:98:05:22:F1:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojC2rCCWeqfAePCku3JmmAUi8ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/873136-09d6-42aa-b41c-4ec1036861e5/1/ojC2rCCWeqfAePCku3JmmAUi8ck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/873136-09d6-42aa-b41c-4ec1036861e5/1/ojC2rCCWeqfAePCku3JmmAUi8ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e6:bb:0c:13:7b:f3:e1:37:4b:fe:2b:03:26:7e:57:91:56:
33:9c:df:18:c3:89:e3:d4:84:cc:bd:ed:cd:5d:f9:0d:00:c6:
64:77:26:1e:07:03:9d:6c:0d:93:3c:32:f6:ea:6a:70:65:48:
86:4e:24:38:48:ce:81:9e:d8:fe:4e:7b:9c:0e:19:6a:da:2a:
0f:17:d8:c2:a2:ab:82:a6:83:6e:25:48:e7:78:df:29:51:1d:
dd:44:8c:7d:fe:be:0e:7b:35:75:44:81:24:c0:b4:1f:65:da:
e9:2a:ed:79:02:8f:8e:80:06:7a:f0:86:4f:96:f6:2a:ee:81:
c0:f8:65:2d:70:a9:5c:f3:eb:2f:32:cf:e2:c1:31:af:74:80:
c1:69:cd:a8:e9:d8:66:e2:ed:56:4f:c1:25:5f:c5:ec:e3:ad:
63:96:1a:3c:2e:b1:93:f7:12:6a:9f:8d:2d:0a:d6:a0:ea:3b:
0f:a1:00:78:c5:3a:38:9b:23:d9:72:d2:4d:54:c2:ed:4d:00:
ee:0f:59:06:59:30:7c:4a:40:4a:1c:77:c0:c2:bc:60:37:58:
e5:09:cc:f8:30:74:6e:5a:99:5d:26:2d:89:fe:cc:eb:83:51:
e0:75:94:bf:c0:ff:b0:2d:db:a5:de:b6:88:52:03:dd:2b:dd:
42:8e:8e:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYyAqQdlFldnhbRrl8fWgb7yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMzBiNmFjMjA5NjdhYTdjMDc4ZjBhNGJiNzI2Njk4MDUy
MmYxYzkwHhcNMjMxMjE5MDYwMDEwWhcNMjMxMjIwMDYwMDEwWjAzMTEwLwYDVQQD
EyhmYWMzOTAwMWIzNzY4MzIwMmYyOGZmOWFjNTg1NjU3MjE0MTI3ZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNhyMn893uxpdYeanV2JDuaWsW/g
ulaS9W14sq8JoiyzEHW2Cgs57aqSakpXnwc4NAqzaLIy1Tz5RrAXsIUkNgio7wRK
Vl+9+dfAu+kxYroudDK9AMPitKqF3uYHyaJhGB2RXxNPRhGP6KT4tkespc8pWgu4
k4/OZxbgFN0iYGZ5BjNWNNe30KJNhIYMqSrfOlE6bCxJ1oDmqrpOGhQkBG0yKHjR
GbQZew5M/Tb6wn057uv687+2bXhThllaKPt/JTfEWMR6k/+WGpspmWcp+mr45x+F
KK0LLebh3w9ML9GhuomAwNAi2lWuKfU1YBTIfuujm1RJNXoP72A0FqzijwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPrDkAGzdoMgLyj/msWFZXIUEn35MB8GA1UdIwQY
MBaAFKIwtqwglnqnwHjwpLtyZpgFIvHJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2pDMnJDQ1dlcWZBZVBDa3UzSm1tQVVpOGNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NzMxMzYtMDlkNi00MmFhLWI0MWMt
NGVjMTAzNjg2MWU1LzEvb2pDMnJDQ1dlcWZBZVBDa3UzSm1tQVVpOGNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy84NzMxMzYtMDlkNi00MmFhLWI0MWMtNGVjMTAzNjg2MWU1
LzEvb2pDMnJDQ1dlcWZBZVBDa3UzSm1tQVVpOGNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUua7DBN7
8+E3S/4rAyZ+V5FWM5zfGMOJ49SEzL3tzV35DQDGZHcmHgcDnWwNkzwy9upqcGVI
hk4kOEjOgZ7Y/k57nA4ZatoqDxfYwqKrgqaDbiVI53jfKVEd3USMff6+Dns1dUSB
JMC0H2Xa6SrteQKPjoAGevCGT5b2Ku6BwPhlLXCpXPPrLzLP4sExr3SAwWnNqOnY
ZuLtVk/BJV/F7OOtY5YaPC6xk/cSap+NLQrWoOo7D6EAeMU6OJsj2XLSTVTC7U0A
7g9ZBlkwfEpAShx3wMK8YDdY5QnM+DB0blqZXSYtif7M64NR4HWUv8D/sC3bpd62
iFID3SvdQo6OlQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:05 2025 by rpki-client