Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f568cf-d3ac-4e99-aeac-010c781ecd77/1/Oe1LBj43c7gi3hbptzI-sZXNcGI.mft
File: Oe1LBj43c7gi3hbptzI-sZXNcGI.mft (raw, json)
Hash identifier: SlYRoHYaManN9gF2g0Tve+BafjCcDePutu2MeVvxD9k=
Subject key identifier: 41:B1:71:52:46:17:F0:A3:86:22:1D:19:A5:4A:90:E1:6F:40:19:76
Authority key identifier: 39:ED:4B:06:3E:37:73:B8:22:DE:16:E9:B7:32:3E:B1:95:CD:70:62
Certificate issuer: /CN=39ed4b063e3773b822de16e9b7323eb195cd7062
Certificate serial: 01909B71BF5ED8A5F6EDD094FE7E462EA5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe1LBj43c7gi3hbptzI-sZXNcGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f568cf-d3ac-4e99-aeac-010c781ecd77/1/Oe1LBj43c7gi3hbptzI-sZXNcGI.mft
Manifest number: 08EE
Signing time: Wed 10 Jul 2024 07:00:41 +0000
Manifest this update: Wed 10 Jul 2024 07:00:41 +0000
Manifest next update: Thu 11 Jul 2024 07:00:41 +0000
Files and hashes: 1: 4JMmWYJmvJYVFrtJNRANTwEsYSQ.roa (hash: Jc1okhfIlYaH2Xi+p1d34BC/7r+UPoCAV/lh4C1XFnM=)
2: Oe1LBj43c7gi3hbptzI-sZXNcGI.crl (hash: wFL+/qBM+9sjd05W50jYlmvJun04rybHn9aOwj3vAbY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9b:71:bf:5e:d8:a5:f6:ed:d0:94:fe:7e:46:2e:a5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ed4b063e3773b822de16e9b7323eb195cd7062
Validity
Not Before: Jul 10 07:00:41 2024 GMT
Not After : Jul 11 07:00:41 2024 GMT
Subject: CN=41b171524617f0a386221d19a54a90e16f401976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:69:40:da:60:f2:dc:2f:05:c4:97:db:46:f3:
77:7d:aa:3d:92:66:1b:79:a7:c0:a6:b3:f5:8d:20:
2c:c2:82:54:0b:4d:89:c0:80:be:e6:ef:7c:1d:57:
17:c6:69:5b:59:7a:c1:1a:4b:b7:54:c9:de:ce:2c:
81:bb:5d:c1:58:75:ed:4e:42:9c:e2:3d:2e:56:a8:
e9:31:84:cb:cf:85:da:12:d7:63:b2:cb:e8:ad:c2:
25:6e:ae:2c:2a:70:d3:1f:21:6d:e1:54:6c:25:00:
80:94:d0:6d:d4:40:39:90:dd:ee:58:6e:63:45:b1:
c7:be:05:a4:b3:0d:c8:a6:dc:09:74:73:a0:bd:fe:
ab:b7:34:48:d5:14:45:c7:60:cb:3f:4f:f2:65:c2:
2c:58:ea:3f:b6:21:30:3e:67:6f:e0:87:d4:40:cd:
cd:cb:fd:87:5c:ef:f9:2d:3d:65:50:ab:72:cf:19:
ed:1d:59:06:55:61:c0:53:b0:2c:8a:55:ac:d9:52:
44:20:58:e0:0d:d6:9b:80:11:14:1a:48:9f:7e:5d:
f7:43:81:38:7c:93:3c:fd:7c:0e:1b:f3:ee:fd:de:
32:ac:9c:0e:e7:bb:3c:da:dd:c6:4f:8a:2b:31:69:
9b:e7:e7:9d:d4:a5:6d:91:0e:25:d9:11:26:29:39:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B1:71:52:46:17:F0:A3:86:22:1D:19:A5:4A:90:E1:6F:40:19:76
X509v3 Authority Key Identifier:
keyid:39:ED:4B:06:3E:37:73:B8:22:DE:16:E9:B7:32:3E:B1:95:CD:70:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe1LBj43c7gi3hbptzI-sZXNcGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f568cf-d3ac-4e99-aeac-010c781ecd77/1/Oe1LBj43c7gi3hbptzI-sZXNcGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f568cf-d3ac-4e99-aeac-010c781ecd77/1/Oe1LBj43c7gi3hbptzI-sZXNcGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:9e:c9:f7:02:6d:ba:ac:90:ab:48:dc:d2:cc:a4:d1:5f:c2:
b6:6e:5e:9b:ca:31:64:aa:5b:b0:43:8b:be:77:e4:6b:d7:e4:
0f:0a:15:f4:62:a0:d2:f9:d7:98:21:ed:87:54:c8:85:63:80:
c9:3d:ce:af:b6:80:fa:a8:72:bc:82:b2:91:09:86:28:24:21:
b4:68:f6:04:dd:e7:de:00:54:d6:d1:03:b0:ae:9d:9f:88:82:
5a:9a:17:c4:9d:a0:40:5c:b8:78:d1:90:05:4e:80:34:ea:25:
ba:1d:10:d3:ce:c0:5a:9c:49:ae:1c:d4:f4:f5:b0:42:27:a1:
27:3d:c1:08:b4:09:97:60:fc:0a:20:96:43:ea:a7:1b:9a:f0:
78:58:34:9f:f0:a5:a2:47:2a:4c:29:ff:c9:6c:bc:60:f0:f1:
9b:07:13:52:a9:b1:2b:56:89:2f:62:38:84:0c:7f:03:c5:e7:
62:c5:e2:56:8f:05:30:16:05:5e:ee:33:10:f2:de:f8:03:65:
fb:b7:38:a7:5a:5c:27:98:26:f4:ea:18:46:f6:93:26:8e:4c:
82:19:14:9b:fa:f5:0e:4f:80:f4:24:65:3d:c8:fb:09:f6:08:
9c:ab:1b:df:91:62:6a:25:27:60:89:27:69:c1:a3:00:03:b1:
0e:94:c6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 12:35:04 2024 by rpki-client on console-ams.rpki-client.org