Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3ce1f0-51e0-49e7-b092-3e431cf74fce/1/ojGVApZeNIuFASAoIq_lSJfEu1E.mft
File: ojGVApZeNIuFASAoIq_lSJfEu1E.mft (raw, json)
Hash identifier: l1IfbHrrWwztgrd/cq49upeK22dUo9RjF8FPWuf4e/w=
Subject key identifier: AB:D9:E0:46:81:F7:D3:A4:EA:DB:38:A0:45:C3:EB:9A:CB:4C:EF:1A
Authority key identifier: A2:31:95:02:96:5E:34:8B:85:01:20:28:22:AF:E5:48:97:C4:BB:51
Certificate issuer: /CN=a2319502965e348b8501202822afe54897c4bb51
Certificate serial: 08D91BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojGVApZeNIuFASAoIq_lSJfEu1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3ce1f0-51e0-49e7-b092-3e431cf74fce/1/ojGVApZeNIuFASAoIq_lSJfEu1E.mft
Manifest number: 08DE
Signing time: Wed 06 Apr 2022 04:12:33 +0000
Manifest this update: Wed 06 Apr 2022 04:12:33 +0000
Manifest next update: Thu 07 Apr 2022 04:12:33 +0000
Files and hashes: 1: GV6h0XX9UzopQJA5ON54GgXQ0CE.roa (hash: 3Bz5ceh2HOxWA8IlgczDm7zy/S6X1g0IW+KI+2IRCb8=)
2: ojGVApZeNIuFASAoIq_lSJfEu1E.crl (hash: MCQHazjKIeXoZJwZPIh2JFUWUDNX85Q5gBbPLChzhDg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 148446170 (0x8d91bda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2319502965e348b8501202822afe54897c4bb51
Validity
Not Before: Apr 6 04:12:33 2022 GMT
Not After : Apr 7 04:12:33 2022 GMT
Subject: CN=abd9e04681f7d3a4eadb38a045c3eb9acb4cef1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e6:8a:ba:65:1f:b3:aa:29:52:7d:b6:51:97:
7a:61:9b:7d:43:c2:a3:53:bc:50:f2:e1:f4:38:74:
42:dd:92:e9:fa:f4:67:9f:b6:55:0a:b8:e5:55:f6:
fe:a1:a2:4b:bb:1d:50:0b:33:57:f9:9e:da:e5:38:
d8:5f:18:43:03:b6:d7:6a:7d:43:76:70:99:14:05:
c8:e4:33:3a:49:07:0c:5a:c0:38:28:f1:f6:b7:4d:
7c:5c:53:7b:ab:47:a2:a3:1f:c1:f9:49:84:84:a0:
05:4f:70:86:e1:ca:26:9c:6a:19:a8:85:90:14:45:
0c:3f:21:35:b5:f9:2e:d5:9b:0e:b9:cf:51:6e:7c:
d8:6f:80:bf:f7:3e:4c:75:85:f2:14:c7:6b:0c:5a:
60:a5:1d:d7:c8:8c:f4:e7:44:e2:57:e8:1e:95:ac:
9d:22:d6:b6:ae:12:d8:bd:5d:8e:0b:2d:f0:ab:8f:
61:4f:cf:40:dd:24:47:f3:a9:49:0d:de:57:30:86:
4a:b0:5b:f7:8b:d6:2c:50:c0:4a:6e:de:ff:97:ec:
af:c0:d0:92:81:0b:3f:4a:f4:ca:5d:9a:b8:36:a0:
2e:d0:39:5a:4c:65:c1:ee:71:c8:21:a9:83:d2:fe:
b0:20:47:86:ec:06:cd:9f:e6:8d:66:25:df:1c:53:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D9:E0:46:81:F7:D3:A4:EA:DB:38:A0:45:C3:EB:9A:CB:4C:EF:1A
X509v3 Authority Key Identifier:
keyid:A2:31:95:02:96:5E:34:8B:85:01:20:28:22:AF:E5:48:97:C4:BB:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojGVApZeNIuFASAoIq_lSJfEu1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3ce1f0-51e0-49e7-b092-3e431cf74fce/1/ojGVApZeNIuFASAoIq_lSJfEu1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3ce1f0-51e0-49e7-b092-3e431cf74fce/1/ojGVApZeNIuFASAoIq_lSJfEu1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:47:bb:76:63:d8:94:98:01:ed:7d:7f:ab:25:e3:9e:23:24:
05:b1:1f:a1:92:d4:52:17:d5:9f:90:41:a2:d7:65:b3:f7:c8:
23:24:34:b5:33:19:cf:e7:d5:e5:6d:07:8a:75:a2:b5:e4:f6:
ea:18:cd:d0:29:c8:e3:c2:b8:dc:ee:27:f0:1e:a6:8f:2a:82:
24:4e:44:1a:8c:b1:54:13:25:6a:93:53:c7:4d:0b:c1:48:6c:
5f:0c:45:e6:c0:42:95:b4:66:f6:28:8d:06:84:8d:79:6d:7b:
35:7e:ff:17:f4:59:4a:b6:92:d7:a1:a8:5b:90:2a:f2:05:48:
bf:7c:ee:60:f2:1e:b4:00:fe:67:76:0b:75:a5:60:38:ef:62:
96:57:0b:84:16:17:f9:62:f6:c8:03:d3:82:f5:21:2a:89:d5:
be:fa:bb:f4:68:c9:f3:da:3d:19:8e:4c:44:ed:85:37:0c:21:
0b:12:b8:68:1e:b3:5f:63:69:b5:6c:24:e5:94:fd:41:66:43:
53:df:d7:66:a4:00:1a:d5:c8:4d:4b:34:13:24:9d:a8:a5:02:
14:b9:b6:5d:fd:a0:92:00:29:35:aa:da:c1:98:79:3f:dd:d1:
8f:de:08:d7:10:ae:36:11:c7:5b:db:cf:83:5a:9c:66:34:a4:
2d:19:97:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:42 2025 by rpki-client