Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9dc00b-0ec5-43f5-88a0-0d7605ad9d71/1/OuY5kLfu5MtdVNtyPD-HNt20MTk.mft
File: OuY5kLfu5MtdVNtyPD-HNt20MTk.mft (raw, json)
Hash identifier: UzlLh5RKqoUAYu3pacZuD8E9CS3qFtXCw5ncmcECZKI=
Subject key identifier: DF:DB:98:91:72:49:1D:A2:C7:F4:25:40:79:28:2C:17:C9:43:3B:5D
Authority key identifier: 3A:E6:39:90:B7:EE:E4:CB:5D:54:DB:72:3C:3F:87:36:DD:B4:31:39
Certificate issuer: /CN=3ae63990b7eee4cb5d54db723c3f8736ddb43139
Certificate serial: 01853487E312364912E664292B2661C0010B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuY5kLfu5MtdVNtyPD-HNt20MTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9dc00b-0ec5-43f5-88a0-0d7605ad9d71/1/OuY5kLfu5MtdVNtyPD-HNt20MTk.mft
Manifest number: 0442
Signing time: Wed 21 Dec 2022 11:53:18 +0000
Manifest this update: Wed 21 Dec 2022 11:53:18 +0000
Manifest next update: Thu 22 Dec 2022 11:53:18 +0000
Files and hashes: 1: OuY5kLfu5MtdVNtyPD-HNt20MTk.crl (hash: H2hmCpltOng/HMsrvXaxaL5yrkNkQ6zq6ccAzjSEUOY=)
2: U7wKTFUYzUOBIgEHJcqiuX1Dlck.roa (hash: j94a+VtDgMz+4hupQOxB7cJwS3HeF8Kz9GyToORlBZY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:34:87:e3:12:36:49:12:e6:64:29:2b:26:61:c0:01:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae63990b7eee4cb5d54db723c3f8736ddb43139
Validity
Not Before: Dec 21 11:53:18 2022 GMT
Not After : Dec 22 11:53:18 2022 GMT
Subject: CN=dfdb989172491da2c7f4254079282c17c9433b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:14:d9:fc:39:44:ba:25:ec:b9:5d:a8:ad:62:
17:72:46:07:17:78:0c:57:70:a5:12:12:10:b2:e1:
53:a7:21:13:46:07:b6:00:f6:66:86:3a:ea:59:0a:
52:2b:5b:37:0a:0d:58:75:9f:55:60:90:2f:3f:30:
00:e9:8f:d6:15:92:61:e0:9d:fb:d8:42:21:81:ae:
42:16:66:05:d5:c4:82:6a:0c:c7:7a:30:0c:d6:55:
a1:92:98:f5:b5:cc:47:d8:bc:16:6c:94:2f:a3:f7:
84:8e:9f:fa:e5:21:15:0b:4c:c7:a9:a9:e2:09:36:
c0:44:b7:d8:4a:9e:b3:a1:fc:68:45:8d:a2:33:02:
89:f4:0e:59:2b:57:df:75:85:8d:f4:61:43:8f:f5:
95:7e:4f:f0:69:63:41:44:38:99:6e:8b:2e:42:a8:
21:e6:56:e8:9f:82:43:b9:ff:8d:a3:89:27:6a:7b:
ff:51:f3:c6:9f:47:e9:b3:78:67:70:27:ea:64:3a:
56:cc:e7:7d:47:ed:e6:b0:e0:ec:05:14:d1:15:a6:
d8:e1:bc:bf:c3:56:da:30:d7:77:8c:99:e9:02:2f:
45:03:01:66:70:7a:67:c3:0b:d0:c3:bd:fe:c2:84:
6f:6b:53:79:5c:e2:74:30:c6:83:69:a6:a2:b1:cb:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DB:98:91:72:49:1D:A2:C7:F4:25:40:79:28:2C:17:C9:43:3B:5D
X509v3 Authority Key Identifier:
keyid:3A:E6:39:90:B7:EE:E4:CB:5D:54:DB:72:3C:3F:87:36:DD:B4:31:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuY5kLfu5MtdVNtyPD-HNt20MTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9dc00b-0ec5-43f5-88a0-0d7605ad9d71/1/OuY5kLfu5MtdVNtyPD-HNt20MTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9dc00b-0ec5-43f5-88a0-0d7605ad9d71/1/OuY5kLfu5MtdVNtyPD-HNt20MTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:32:5a:1c:33:af:1d:64:25:a3:23:ab:4e:73:d1:f8:e6:39:
ac:a2:1f:dd:2c:28:9d:ab:80:7a:0e:7c:72:b2:61:17:b3:35:
60:19:de:97:34:70:a9:95:3c:91:be:ed:e7:c0:03:93:12:27:
e8:f8:cd:ee:b0:cf:1b:e0:d3:e9:c8:ff:c6:ba:27:6f:8f:79:
53:48:b1:7b:ee:23:bf:ef:4a:82:ca:0e:37:35:eb:6f:1c:ee:
d4:ac:09:df:d1:e5:7a:b1:99:9a:c5:fb:62:94:d7:98:a7:f1:
dd:de:ff:81:97:7e:0b:09:4f:d1:c9:37:8f:19:ba:4a:45:12:
da:6c:36:7e:bc:96:95:65:93:02:61:1c:f6:f6:63:e3:a1:ea:
e1:87:39:40:cb:f0:b3:53:49:18:35:06:51:77:bd:07:30:47:
4c:f5:e6:ea:f1:13:16:23:38:07:91:f6:41:40:1f:b2:b9:3d:
c4:28:66:54:e8:54:99:64:f8:23:ba:f9:28:ed:48:35:46:6e:
ef:e8:28:91:7c:13:80:cb:af:c8:02:19:9b:73:6f:63:fb:13:
d5:14:88:a8:9f:8c:1e:5f:3c:4c:95:df:96:0d:e7:e5:cf:58:
3a:c9:2a:0a:63:87:c9:4e:c0:aa:b7:52:bf:ca:fe:b5:a8:10:
a9:dd:d4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:59 2025 by rpki-client