Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f02a9c-8336-4713-b4e5-6e4534d3c220/1/onfamAUXp9gLHedloMTQsiwRQV4.mft
File: onfamAUXp9gLHedloMTQsiwRQV4.mft (raw, json)
Hash identifier: 7DF8FfexzE/KJhY3a7qhSgtUcLqNIHQso6Bwk2NIAJw=
Subject key identifier: 0A:C1:97:C7:52:B2:D4:96:22:78:39:87:4E:D0:BC:DB:A6:35:9F:60
Authority key identifier: A2:77:DA:98:05:17:A7:D8:0B:1D:E7:65:A0:C4:D0:B2:2C:11:41:5E
Certificate issuer: /CN=a277da980517a7d80b1de765a0c4d0b22c11415e
Certificate serial: 018B1787D7ED9374F63904AD5FA3A32334B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onfamAUXp9gLHedloMTQsiwRQV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f02a9c-8336-4713-b4e5-6e4534d3c220/1/onfamAUXp9gLHedloMTQsiwRQV4.mft
Manifest number: 086D
Signing time: Tue 10 Oct 2023 03:01:00 +0000
Manifest this update: Tue 10 Oct 2023 03:01:00 +0000
Manifest next update: Wed 11 Oct 2023 03:01:00 +0000
Files and hashes: 1: 6nI0MPGLwSdatN2mc5moNfP_G1w.roa (hash: 3/DN9V0eaLNIXK0Cjtg88PdHuXKomSFzhnQsRrkMqk0=)
2: aabhNqGkRUcrG4L5VRMY4gkHO1I.roa (hash: 4zyWw5C0wZavJvlGhv7lRJjuRw20wzcAcodp2H+X9rA=)
3: onfamAUXp9gLHedloMTQsiwRQV4.crl (hash: O49RndJRV6X/9/sLmeb3eWRjHBESJ9lL/LG4DuV2xFc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:17:87:d7:ed:93:74:f6:39:04:ad:5f:a3:a3:23:34:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a277da980517a7d80b1de765a0c4d0b22c11415e
Validity
Not Before: Oct 10 03:01:00 2023 GMT
Not After : Oct 11 03:01:00 2023 GMT
Subject: CN=0ac197c752b2d496227839874ed0bcdba6359f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1b:b9:a3:df:32:f2:23:a3:26:bb:93:9c:33:
8e:49:17:fa:05:a4:1f:24:bc:b1:8e:b2:3f:99:80:
5c:cf:7d:de:35:ae:b2:28:5b:cd:ae:82:00:b8:69:
d0:d4:b8:53:ac:47:56:fc:7b:c1:e4:4b:8b:c8:9e:
f3:58:f4:d0:c6:1b:d8:be:ac:60:dd:dd:4b:f0:12:
27:a1:17:18:19:0a:43:67:17:c0:36:54:4d:9e:43:
f9:4c:fe:a4:74:33:f4:7c:16:ef:3c:bc:40:db:6f:
a2:b0:4c:10:b1:90:c8:8e:bc:96:67:7e:04:db:56:
ae:29:ea:74:ce:59:28:f0:29:e3:77:53:1d:7b:af:
5b:e8:74:95:d4:91:57:27:7e:8e:84:b0:4d:d1:6d:
59:d9:9f:3a:94:9b:34:81:63:a2:3e:42:f5:b8:6f:
bf:6e:5c:9a:d3:fd:4c:04:f8:65:b1:28:cd:1c:d2:
04:fa:69:1d:84:ff:ae:50:26:e0:2e:e7:ea:93:09:
e8:8a:23:a2:54:11:10:8e:6f:46:7e:42:64:b1:51:
b6:3b:e9:59:eb:c9:d7:97:46:8a:c2:4a:39:9c:e7:
bb:47:8d:ff:9d:0c:03:f2:8d:00:b6:c6:97:14:9c:
21:d3:5b:d0:73:9a:92:be:87:11:9b:4b:19:cd:b9:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C1:97:C7:52:B2:D4:96:22:78:39:87:4E:D0:BC:DB:A6:35:9F:60
X509v3 Authority Key Identifier:
keyid:A2:77:DA:98:05:17:A7:D8:0B:1D:E7:65:A0:C4:D0:B2:2C:11:41:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onfamAUXp9gLHedloMTQsiwRQV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f02a9c-8336-4713-b4e5-6e4534d3c220/1/onfamAUXp9gLHedloMTQsiwRQV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f02a9c-8336-4713-b4e5-6e4534d3c220/1/onfamAUXp9gLHedloMTQsiwRQV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9b:6d:88:49:cb:35:29:e8:f7:6e:d8:50:6a:35:41:47:31:
75:c5:10:e6:e2:d9:f2:49:02:21:7e:7c:98:07:f7:3c:38:b0:
6b:98:80:37:ab:a7:32:49:12:85:68:24:cd:32:30:85:5b:b5:
9d:02:f4:94:3c:d4:f5:d7:1a:88:11:15:2e:77:93:77:b1:31:
b8:d1:66:7e:4b:36:e7:52:e6:d3:d4:d8:b9:92:46:77:5e:fe:
9e:9f:28:ec:4a:60:78:d7:fe:3f:a1:90:08:2c:03:c6:35:f5:
e0:77:76:01:3e:4d:26:f9:88:3c:df:99:f3:ee:58:d2:6e:61:
67:52:71:28:48:7d:1c:81:ff:6c:48:1a:c7:60:d3:df:19:0d:
99:03:a6:b3:13:df:a2:10:19:c4:c5:87:d1:ba:cd:73:28:0d:
3a:6b:fe:2a:5e:5f:d1:c7:57:29:6c:4e:8e:bc:79:db:ff:91:
58:bc:0b:43:e9:86:85:c7:f9:be:14:36:25:61:9b:26:fc:5d:
48:3c:4a:68:b5:4a:20:c9:f1:1b:cb:7b:d9:d4:0f:98:a5:36:
fd:eb:76:e5:66:59:3e:04:45:2c:eb:8d:85:8d:63:f4:28:27:
a3:88:b0:97:0d:b1:7f:cc:4f:ec:5b:61:25:7e:ea:23:32:93:
51:6c:58:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:41 2024 by rpki-client on console-fra.rpki-client.org