Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a380fb-dc03-4868-86b2-991b6e88f57a/1/oaor0Lb2IjmxJYQfggD4ui2-DIk.mft
File: oaor0Lb2IjmxJYQfggD4ui2-DIk.mft (raw, json)
Hash identifier: orPwylNKfyE0JpNckQ6bTJ+f1cJ3J3fmXtWs0lEYtH4=
Subject key identifier: 13:0B:3C:68:A1:F4:DA:88:1D:CA:0B:D5:C6:16:E9:D0:9D:AE:5E:66
Authority key identifier: A1:AA:2B:D0:B6:F6:22:39:B1:25:84:1F:82:00:F8:BA:2D:BE:0C:89
Certificate issuer: /CN=a1aa2bd0b6f62239b125841f8200f8ba2dbe0c89
Certificate serial: 018B8E30C7ED5A0426568677F955977E5F24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oaor0Lb2IjmxJYQfggD4ui2-DIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a380fb-dc03-4868-86b2-991b6e88f57a/1/oaor0Lb2IjmxJYQfggD4ui2-DIk.mft
Manifest number: 65
Signing time: Thu 02 Nov 2023 04:00:43 +0000
Manifest this update: Thu 02 Nov 2023 04:00:43 +0000
Manifest next update: Fri 03 Nov 2023 04:00:43 +0000
Files and hashes: 1: g8dOf8YdTgMF3N3B9mtRD5HtigA.roa (hash: lMLL5wcYRnw0HlLlQ0lX3v5bNu4XfnUQYAPAB+hTjEI=)
2: oaor0Lb2IjmxJYQfggD4ui2-DIk.crl (hash: VWaX1k3tN5ySiVpbtecBPn9ZP+hRan9QIHlJFsC5BVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8e:30:c7:ed:5a:04:26:56:86:77:f9:55:97:7e:5f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1aa2bd0b6f62239b125841f8200f8ba2dbe0c89
Validity
Not Before: Nov 2 04:00:43 2023 GMT
Not After : Nov 3 04:00:43 2023 GMT
Subject: CN=130b3c68a1f4da881dca0bd5c616e9d09dae5e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:80:17:c5:a2:60:29:31:a8:61:29:94:17:
8a:2f:9a:ba:ba:10:3f:c9:75:58:94:9b:2b:42:b6:
8d:be:16:bc:3e:1a:60:fe:8e:63:5b:7c:3e:05:c2:
ee:a6:bc:bf:11:41:3e:f1:0e:05:9c:bf:ca:e0:f3:
fc:8f:c7:b0:76:bd:fd:f8:e2:e9:06:30:13:7d:ac:
02:1b:89:de:94:56:20:f6:60:24:2b:4b:e7:26:ce:
84:ed:7d:1d:23:07:a6:13:74:82:7f:24:b7:b6:0b:
22:28:d7:16:33:d6:b6:35:e2:33:f0:99:85:af:0f:
68:26:e1:f5:cd:0d:ff:43:2f:45:6d:7d:4b:44:53:
34:aa:dd:e5:49:26:2a:a9:94:b1:92:e4:29:67:b4:
69:43:4b:ce:cf:b8:82:21:d2:57:5a:46:7f:15:32:
6f:e4:07:e1:77:c8:29:18:02:7f:6d:d2:1b:6d:a8:
b1:53:34:1d:d0:20:8e:c4:8a:e5:dd:60:74:f9:11:
46:df:38:e4:b9:4a:36:57:80:c0:a4:32:2e:df:4c:
7e:2d:64:0b:3e:69:9f:58:4f:72:83:bc:01:16:22:
2c:75:6f:c8:63:d3:0e:be:97:92:5f:50:d0:55:58:
55:6b:6f:6d:8f:59:80:e4:92:dd:d1:2f:4a:30:15:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0B:3C:68:A1:F4:DA:88:1D:CA:0B:D5:C6:16:E9:D0:9D:AE:5E:66
X509v3 Authority Key Identifier:
keyid:A1:AA:2B:D0:B6:F6:22:39:B1:25:84:1F:82:00:F8:BA:2D:BE:0C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oaor0Lb2IjmxJYQfggD4ui2-DIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a380fb-dc03-4868-86b2-991b6e88f57a/1/oaor0Lb2IjmxJYQfggD4ui2-DIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a380fb-dc03-4868-86b2-991b6e88f57a/1/oaor0Lb2IjmxJYQfggD4ui2-DIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:90:96:63:6f:c7:48:7b:4a:b5:38:d3:02:63:d0:d7:ba:53:
c0:73:aa:e5:9d:46:e9:51:b3:fd:cc:20:1e:5c:ef:3e:09:da:
3f:a5:30:e9:cb:01:2d:80:65:83:35:a7:37:02:9a:55:c6:29:
c2:36:ed:48:4b:81:83:62:9f:48:13:e2:58:4a:12:71:a0:04:
94:57:aa:fd:f2:94:44:f7:e5:86:2a:37:84:c3:31:94:5c:4f:
03:61:81:ba:6d:17:e4:e1:e1:fb:01:b4:87:7b:29:43:e2:49:
9d:1d:7f:53:94:df:1b:3d:bb:73:c5:ff:70:db:6b:5a:c8:ee:
9b:01:1d:58:59:a8:b2:59:0b:01:45:c1:23:59:23:b2:00:02:
1f:53:d2:7e:5d:27:87:fd:a3:4d:a2:62:a0:80:97:fb:23:42:
e4:89:fe:20:1a:e6:7c:6c:e1:b3:fb:7b:e0:da:2c:55:de:db:
b6:fb:77:fa:d9:80:3f:48:dd:bc:de:fa:57:e0:01:e6:a6:86:
ff:03:bd:73:e4:cd:d6:96:37:41:1f:78:b4:f1:b4:e6:5f:db:
9b:3a:a3:fc:f6:71:0f:b7:19:06:aa:d6:a0:75:b9:3d:cd:d1:
b4:76:4d:cd:df:65:d2:56:68:60:1a:15:82:14:54:19:54:5d:
6d:71:27:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:02 2025 by rpki-client