Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d19e49-500d-4531-bde2-76cc678796c2/1/OifGqet_dGR4L5hzOOpoyJygUyY.mft
File: OifGqet_dGR4L5hzOOpoyJygUyY.mft (raw, json)
Hash identifier: zA/nnlSTEZvii2j5PZwKJ0S5zG7CYzdAYHFo6ewDBIY=
Subject key identifier: 40:5F:B8:4C:D3:93:BE:53:08:82:87:08:E2:E1:6D:75:65:F6:A3:8E
Authority key identifier: 3A:27:C6:A9:EB:7F:74:64:78:2F:98:73:38:EA:68:C8:9C:A0:53:26
Certificate issuer: /CN=3a27c6a9eb7f7464782f987338ea68c89ca05326
Certificate serial: 018A5E22DC2C2D1140A244F1E45AF724ACCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OifGqet_dGR4L5hzOOpoyJygUyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d19e49-500d-4531-bde2-76cc678796c2/1/OifGqet_dGR4L5hzOOpoyJygUyY.mft
Manifest number: 8E
Signing time: Mon 04 Sep 2023 03:00:57 +0000
Manifest this update: Mon 04 Sep 2023 03:00:57 +0000
Manifest next update: Tue 05 Sep 2023 03:00:57 +0000
Files and hashes: 1: OifGqet_dGR4L5hzOOpoyJygUyY.crl (hash: Wl5lNfv9iy2Sic6RGjz4+VWrNWg0fhkP3k4l/FCfKog=)
2: cf-UtOXPxs88tDVLhDO4N0tKI8g.roa (hash: 3iuCR+h24EmIVzW26TTPSpoWMfWHWwOoJpTzHiV6ZFA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5e:22:dc:2c:2d:11:40:a2:44:f1:e4:5a:f7:24:ac:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a27c6a9eb7f7464782f987338ea68c89ca05326
Validity
Not Before: Sep 4 03:00:57 2023 GMT
Not After : Sep 5 03:00:57 2023 GMT
Subject: CN=405fb84cd393be5308828708e2e16d7565f6a38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:69:2b:d8:af:ab:1f:c6:ed:c5:29:67:b4:3c:
d1:69:88:1a:88:1b:97:a9:8a:5b:9b:ed:3a:9a:be:
fa:88:e1:4d:41:58:44:7d:d6:c8:ba:60:4a:8d:90:
f2:af:61:9e:c9:2c:cc:2c:e2:b6:aa:0d:55:6f:37:
e1:46:8a:fe:f8:56:f0:e6:85:8d:d6:bf:de:9a:99:
cc:ed:d1:8a:94:d3:a5:9f:0d:c8:a9:1b:78:67:55:
88:fd:39:d2:95:f0:37:24:e8:3b:99:5e:8b:c0:38:
59:52:f0:80:6a:05:d5:43:44:00:b8:66:ab:0b:2d:
5d:69:36:57:02:03:a7:13:31:25:cb:62:2a:16:67:
66:58:75:a5:96:e9:06:f2:14:77:05:f1:a8:a2:7b:
3d:a9:ca:65:41:6a:cf:10:27:e1:60:9c:f3:a7:20:
c7:b0:9c:69:f7:39:0e:a7:27:01:6e:9e:68:47:67:
cc:29:9e:0a:0f:f6:c1:02:90:72:2c:d8:f7:4d:ec:
9c:bc:aa:3d:ae:1f:f0:e6:e8:94:67:83:33:6c:bc:
ad:68:53:27:45:93:85:1c:1e:cb:81:b8:2d:0c:37:
4d:ee:e3:9b:fe:22:2a:46:5b:2b:a8:2f:9f:22:93:
d7:0a:36:c9:c7:81:9c:69:90:09:21:50:2b:a5:c0:
a7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5F:B8:4C:D3:93:BE:53:08:82:87:08:E2:E1:6D:75:65:F6:A3:8E
X509v3 Authority Key Identifier:
keyid:3A:27:C6:A9:EB:7F:74:64:78:2F:98:73:38:EA:68:C8:9C:A0:53:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OifGqet_dGR4L5hzOOpoyJygUyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d19e49-500d-4531-bde2-76cc678796c2/1/OifGqet_dGR4L5hzOOpoyJygUyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d19e49-500d-4531-bde2-76cc678796c2/1/OifGqet_dGR4L5hzOOpoyJygUyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:70:74:b9:e2:87:2a:06:47:be:6f:b9:09:e9:c1:c7:b6:bd:
13:e2:fa:ac:57:4a:cd:f7:85:1c:40:3e:10:93:00:bd:8d:88:
d4:7d:12:6f:a8:6b:01:c0:65:d8:2f:40:91:9a:50:88:0e:18:
b7:fe:8d:c3:d8:4c:a2:fc:8e:ba:75:4c:69:00:e6:1b:8f:f8:
d4:2c:f5:0c:6c:0f:02:36:98:29:a7:1b:0a:c7:3e:33:b1:d5:
7e:70:af:82:42:b0:6b:de:9e:1c:81:51:d2:7e:24:a3:51:a2:
a7:b8:11:83:16:08:85:d3:3e:07:fb:a6:68:a4:64:37:e2:92:
17:5d:4a:c8:27:6f:b6:91:55:f9:3f:c7:39:f3:fc:2e:cb:20:
16:ac:79:df:d9:84:df:ac:13:2c:26:93:40:51:0b:c0:12:2d:
ca:34:db:0b:c4:24:c0:54:de:b7:85:1e:de:a2:9d:81:9d:7d:
16:62:b5:eb:36:7f:be:34:3c:e8:e3:bd:b3:73:a7:db:8b:84:
af:42:cb:70:38:3b:05:5e:01:a7:69:e0:06:79:54:e9:db:73:
ef:79:28:2f:e6:c5:2c:54:b7:c4:ca:bd:ae:94:6d:9b:98:96:
dc:ed:04:c7:7f:e3:ef:4c:3f:0e:19:0c:af:0f:27:36:2b:ab:
ec:94:48:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:21 2024 by rpki-client on console-ams.rpki-client.org