Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/3bb9d8-bf54-4e8f-83e5-3ffc01fcbfb6/1/M_XOH8N5J8taTmexdsemOzL_bok.mft
File: M_XOH8N5J8taTmexdsemOzL_bok.mft (raw, json)
Hash identifier: yTuPhYH8ir4DtYelSE9E8FfW0xtwAefoVqIJvtCqRQ0=
Subject key identifier: C4:58:E4:DB:F5:D9:8F:B3:6F:88:93:65:B7:CE:8B:CC:E3:E0:74:D3
Authority key identifier: 33:F5:CE:1F:C3:79:27:CB:5A:4E:67:B1:76:C7:A6:3B:32:FF:6E:89
Certificate issuer: /CN=33f5ce1fc37927cb5a4e67b176c7a63b32ff6e89
Certificate serial: 018E076885852AE9065044BB0547F686F15F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_XOH8N5J8taTmexdsemOzL_bok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/3bb9d8-bf54-4e8f-83e5-3ffc01fcbfb6/1/M_XOH8N5J8taTmexdsemOzL_bok.mft
Manifest number: 08A4
Signing time: Mon 04 Mar 2024 03:01:14 +0000
Manifest this update: Mon 04 Mar 2024 03:01:14 +0000
Manifest next update: Tue 05 Mar 2024 03:01:14 +0000
Files and hashes: 1: 1SGbgqfDXJQx81eNzc8gCrEywUg.roa (hash: fTmYHTOCNdzUOjqtYsN247DrVecxcSoZtQse9+YczCU=)
2: 2JMXwsoJYrb0Q9kMnk-FxxeCF8E.roa (hash: OCQ5NfIbEyKV183D8DIImolNUtHTXf7dtN3QR+hnfDQ=)
3: 2TpsUVpvmlUVpjnat0dAd2NcvXo.roa (hash: PglYAhR79dqInmjyzwL1nH4LlK6VJ8KhS8oMj72Dkp8=)
4: KmIs3bltG0RlRXDQw8WOmr3TNds.roa (hash: zPvglX+4nnp/F0j03bN/ET+TFqy4ClowjFnoLlbTQl8=)
5: M_XOH8N5J8taTmexdsemOzL_bok.crl (hash: D+KTcWcZgOZbcanbE+QXrNA5Xhl81f2kaauTT+DxdBs=)
6: ONtHC74OPZMc4B5Lq7MQgwAjlLw.roa (hash: c5Sg8lM8WKG/3WDYwpyBENIbZu+yC1xb3TchagYCWXs=)
7: _qwYG4WPS8RJb3TzXAVyEtA_0NM.roa (hash: oQp7EFt8GMAXZs1sVltFwzBG+b+Jy+Qvr30bHUEQsIw=)
8: bt98pLNUirGvmkzkcXjKij5SZ70.roa (hash: c5DEWJffvzeBV4iaLH/BvrIwDZjVdpf3tS/VPdKPtyo=)
9: hoFSh1vt4Rc-4L27G1bY8bwX06A.roa (hash: tiz3irNdSWQ+W5OjYdyqfIdzSvRSqRE4M+EUKvO5Vwg=)
10: htAIENfJGZEfAHbzNv2LblgrGaI.roa (hash: Ea/cEdcjdGYyP36vzmpEi1CBFhn0o+CYoIBE8UpFTmo=)
11: mujLwpJxi_HIMfoiK9e_F3pGIkc.roa (hash: FeJwKr/9X+dWKcq0RtI/4DgHPxj8YXgnF9nEk7YjZO0=)
12: trxKzRiOlTWE3dLj5Rv3_9o1MVQ.roa (hash: LO8/VmQS0NPoLmznh3F8dYF2hacpDmEY7KZw2DJ/Aos=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:07:68:85:85:2a:e9:06:50:44:bb:05:47:f6:86:f1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f5ce1fc37927cb5a4e67b176c7a63b32ff6e89
Validity
Not Before: Mar 4 03:01:14 2024 GMT
Not After : Mar 5 03:01:14 2024 GMT
Subject: CN=c458e4dbf5d98fb36f889365b7ce8bcce3e074d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:af:6b:d9:18:93:12:e2:34:6d:a3:e5:fd:7c:
2a:1d:c1:9e:f2:04:ba:77:00:7c:4d:ab:b8:b5:4f:
1e:44:a8:dc:94:9a:7b:b5:44:96:66:db:ed:29:66:
8c:93:e3:56:89:fc:7f:22:a1:32:14:dc:dc:fb:a2:
7a:cf:0d:71:fb:13:e6:bf:af:34:b8:3a:45:de:db:
18:29:08:3d:c5:16:dc:89:9a:7c:e6:90:eb:4e:7a:
fa:19:ec:42:c4:05:a8:ad:31:b9:81:19:7e:25:d1:
65:d4:79:c8:82:79:88:29:33:13:dd:8a:c2:b4:a9:
8b:57:4a:ed:bd:10:4e:af:8f:dc:69:44:4c:bc:17:
1f:98:76:f2:af:0a:f4:cf:1f:14:d8:3c:89:77:3a:
06:5e:24:ac:09:00:ff:ca:0e:44:67:a6:e6:0c:9b:
25:19:e0:c1:f1:09:5f:02:4c:19:df:76:9c:5f:7f:
4a:8b:3d:28:cb:e8:50:39:f0:09:f4:74:dd:0d:88:
a9:a6:ac:6c:3c:ba:3d:3c:1e:81:fd:36:75:96:2b:
38:0d:a2:7b:91:bc:0e:5d:3c:1d:e4:c1:79:d5:fa:
53:eb:da:5f:36:be:ad:fb:80:53:ca:80:d0:64:f6:
5a:e1:6f:1a:1c:36:1e:f4:c4:d7:9b:eb:4c:28:75:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:58:E4:DB:F5:D9:8F:B3:6F:88:93:65:B7:CE:8B:CC:E3:E0:74:D3
X509v3 Authority Key Identifier:
keyid:33:F5:CE:1F:C3:79:27:CB:5A:4E:67:B1:76:C7:A6:3B:32:FF:6E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_XOH8N5J8taTmexdsemOzL_bok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3bb9d8-bf54-4e8f-83e5-3ffc01fcbfb6/1/M_XOH8N5J8taTmexdsemOzL_bok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3bb9d8-bf54-4e8f-83e5-3ffc01fcbfb6/1/M_XOH8N5J8taTmexdsemOzL_bok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e3:ef:2d:35:ee:b8:ae:6a:02:92:ef:78:af:4e:48:04:b4:
62:15:60:3e:6c:6a:3b:60:2a:20:94:bd:a4:98:a2:c1:08:58:
4b:66:e1:fd:86:64:5f:6a:de:4b:1a:67:86:e0:ae:80:46:b1:
f6:28:19:03:2f:de:6a:cd:3a:0c:80:97:31:fb:c3:3b:a2:0d:
42:39:c8:2a:c7:d0:35:9a:cf:61:16:06:af:7f:ed:57:ac:ee:
de:17:37:6c:25:41:1c:71:cc:fd:9e:93:c4:bf:2f:e7:1e:59:
a2:ed:55:ed:71:57:6e:12:60:f8:91:d9:1d:5b:cb:c0:77:2f:
91:bd:a6:fc:86:44:ed:f9:55:5e:d4:08:e0:2f:43:64:cd:51:
68:d4:c7:0c:22:e0:19:f1:91:bb:80:e4:dc:7c:f4:d5:15:eb:
11:d7:d7:64:f7:72:f5:f4:f9:40:62:b1:78:ca:3b:52:0e:ae:
dc:09:30:a9:8d:04:c7:26:ed:52:70:99:01:69:18:ad:96:1f:
69:ba:eb:6d:6f:11:64:d5:86:99:51:05:1d:d9:2e:8d:c5:0d:
c0:7d:12:f2:93:92:07:c5:9a:af:ca:68:2b:cf:45:2d:38:d2:
41:64:49:11:79:44:48:55:74:e6:8a:15:bc:fd:21:c9:eb:00:
62:18:54:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:40 2025 by rpki-client