Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/OIPJVHClukqHxQW2g7gWV2Nx48g.mft
File: OIPJVHClukqHxQW2g7gWV2Nx48g.mft (raw, json)
Hash identifier: /XUyCj9WmkJhgZOrIp2QBYLGChOyCkz3u+XT+tKH34U=
Subject key identifier: BE:23:31:29:F2:DF:55:62:DD:49:20:77:2C:83:71:0F:E8:98:E1:0C
Authority key identifier: 38:83:C9:54:70:A5:BA:4A:87:C5:05:B6:83:B8:16:57:63:71:E3:C8
Certificate issuer: /CN=3883c95470a5ba4a87c505b683b816576371e3c8
Certificate serial: 018BD123B36AB3F0445E3B4FBB096D004E70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIPJVHClukqHxQW2g7gWV2Nx48g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/OIPJVHClukqHxQW2g7gWV2Nx48g.mft
Manifest number: 088D
Signing time: Wed 15 Nov 2023 04:00:59 +0000
Manifest this update: Wed 15 Nov 2023 04:00:59 +0000
Manifest next update: Thu 16 Nov 2023 04:00:59 +0000
Files and hashes: 1: IaekO2oCBc3g9mW5K-F9OYerIUk.roa (hash: iRwL6OkS81sE24Gf5aLxUDmZGjaGIY3LJoNO/6tJ6dk=)
2: OIPJVHClukqHxQW2g7gWV2Nx48g.crl (hash: QbY8RwQwzyiOTuiuNR4u7+4g8hh9kOtQqBlzDNoPX/U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d1:23:b3:6a:b3:f0:44:5e:3b:4f:bb:09:6d:00:4e:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3883c95470a5ba4a87c505b683b816576371e3c8
Validity
Not Before: Nov 15 04:00:59 2023 GMT
Not After : Nov 16 04:00:59 2023 GMT
Subject: CN=be233129f2df5562dd4920772c83710fe898e10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:eb:01:0a:33:15:a2:95:9c:0c:d2:0a:5b:13:
7a:81:56:8c:67:1f:ec:0f:1f:8a:64:bd:bd:35:d3:
cc:70:03:00:ad:8a:d8:85:23:e2:65:7b:44:48:c3:
51:c8:35:35:c4:9b:cd:bf:0d:75:51:c6:0e:c2:d2:
72:8b:c3:20:0a:51:7d:24:86:2d:ec:68:11:8b:90:
10:8e:96:31:37:5e:1d:72:be:81:3f:f9:f6:ec:13:
b4:e6:ef:fe:2f:06:32:2c:ba:81:80:a7:87:52:9a:
4a:42:8e:93:18:77:d4:d3:f7:97:ea:ac:e1:d6:38:
e9:09:b9:d0:58:79:cd:db:20:5c:fe:29:3c:c1:8b:
8d:46:4b:32:d9:c3:43:ea:e3:b3:cf:7d:42:b5:76:
ff:7b:66:f1:a7:dd:3e:46:3e:22:fb:06:3d:53:ef:
f3:fc:e3:90:42:b4:cf:3e:7f:10:fc:32:72:0f:bf:
19:9a:10:21:ee:fb:d9:0a:33:94:87:cb:88:63:35:
00:b4:ce:28:18:84:65:9b:4c:c2:3a:c9:4b:77:23:
75:aa:19:6e:05:0b:2d:99:9e:19:e6:22:2b:5d:81:
7c:ec:3c:55:21:f8:22:ef:9e:fa:0c:df:d7:bc:1f:
a7:68:49:14:96:c5:bd:e7:53:2e:ee:7a:dd:a6:4d:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:23:31:29:F2:DF:55:62:DD:49:20:77:2C:83:71:0F:E8:98:E1:0C
X509v3 Authority Key Identifier:
keyid:38:83:C9:54:70:A5:BA:4A:87:C5:05:B6:83:B8:16:57:63:71:E3:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIPJVHClukqHxQW2g7gWV2Nx48g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/OIPJVHClukqHxQW2g7gWV2Nx48g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/908b7e-81b9-478f-9543-b1f3eaa15212/1/OIPJVHClukqHxQW2g7gWV2Nx48g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:11:a7:5a:de:2b:c6:cc:1b:36:35:b3:d7:16:65:d1:a5:68:
fb:e2:1c:21:c9:8a:96:28:bc:49:a9:bb:64:ee:37:f1:c7:c5:
f1:44:93:3c:52:7c:8c:47:6c:70:39:67:fc:84:6f:09:ff:45:
59:4b:31:b3:08:bd:c3:fe:33:6a:df:e6:51:36:9e:37:e2:83:
c2:b6:da:6e:41:21:ab:3d:cd:1f:01:64:9c:05:e0:d4:fb:e7:
97:af:bf:a3:bd:2a:6c:e6:3e:35:ef:63:65:3f:86:44:78:9e:
08:0e:1f:9b:13:a4:72:d9:6c:05:54:65:0b:29:f3:73:bc:ff:
21:8a:c6:16:fb:76:08:7b:af:a9:c5:bd:c0:18:50:70:df:ea:
9c:8a:bd:4a:cf:4a:70:49:a3:0f:8c:52:6e:4c:10:8e:d0:78:
c9:0b:eb:70:8f:17:e9:33:71:dc:6e:e0:af:af:5c:34:70:1a:
fe:38:88:63:11:09:67:c3:b3:79:e6:c1:c4:76:dc:cc:83:30:
80:63:ac:3d:12:7b:01:f8:1d:88:48:33:4c:13:fe:22:e5:ed:
df:f8:7f:aa:ec:8e:48:5d:99:10:70:e9:9f:e9:9a:fb:fb:e0:
68:d7:b9:ab:42:71:76:ea:9e:e0:d2:51:a5:61:e1:3f:2d:3e:
ca:f4:7a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:22 2025 by rpki-client