Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c459c2-028c-4776-a3bc-81e3c9e7a06e/1/oSbeI8bX74ew_f-AmPBce3vDR64.mft
File: oSbeI8bX74ew_f-AmPBce3vDR64.mft (raw, json)
Hash identifier: EW1csguyPY9EGUa1vHjfAd/6dqGmYP2YXFDfDGP6iF0=
Subject key identifier: 32:62:59:E6:98:AC:8A:5E:54:EF:BF:2B:5B:96:00:48:6E:5A:CE:9B
Authority key identifier: A1:26:DE:23:C6:D7:EF:87:B0:FD:FF:80:98:F0:5C:7B:7B:C3:47:AE
Certificate issuer: /CN=a126de23c6d7ef87b0fdff8098f05c7b7bc347ae
Certificate serial: 01935319FD775073DC0EEEFEE216C23D7A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSbeI8bX74ew_f-AmPBce3vDR64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c459c2-028c-4776-a3bc-81e3c9e7a06e/1/oSbeI8bX74ew_f-AmPBce3vDR64.mft
Manifest number: 031D
Signing time: Fri 22 Nov 2024 09:00:32 +0000
Manifest this update: Fri 22 Nov 2024 09:00:32 +0000
Manifest next update: Sat 23 Nov 2024 09:00:32 +0000
Files and hashes: 1: 00Ma0-_LO7REqz_Vbtrs_1HFk6Q.roa (hash: +WBS6DtNYV1Q6Yc3PsF6BfmGtYd7zyXdYSS71mGEPh4=)
2: oSbeI8bX74ew_f-AmPBce3vDR64.crl (hash: OYe6z2Ktsq9AY0JcvbkA2VgxXClf9WZvt7Vbs/C5VVY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:19:fd:77:50:73:dc:0e:ee:fe:e2:16:c2:3d:7a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a126de23c6d7ef87b0fdff8098f05c7b7bc347ae
Validity
Not Before: Nov 22 09:00:32 2024 GMT
Not After : Nov 23 09:00:32 2024 GMT
Subject: CN=326259e698ac8a5e54efbf2b5b9600486e5ace9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8b:69:15:9b:2a:cd:67:c1:f5:f2:bf:bd:64:
3f:3c:dc:91:f2:cb:2d:6e:aa:65:13:f4:bd:cd:6a:
1d:63:a9:26:f3:4a:d8:dc:d2:a0:f4:4a:ae:56:9a:
13:27:0c:24:c8:72:83:25:99:0e:68:d7:50:fd:61:
96:11:67:9e:d5:16:07:6f:dd:ab:6b:71:d3:f7:a4:
d2:71:e6:5e:f1:13:7f:24:da:7f:c0:0e:48:b0:79:
7d:e7:40:b1:b1:02:16:47:aa:ed:69:69:af:5b:3d:
43:46:12:89:46:65:74:ab:ac:6a:10:9f:5b:0c:a2:
2a:b9:53:54:94:31:f5:f0:92:14:d5:d2:c1:2b:9d:
c8:1a:1d:c2:8b:1d:23:19:40:88:45:f2:d7:a6:ce:
0b:65:e4:18:84:fd:5d:e5:5a:ed:58:2c:2d:29:bf:
c7:42:fb:a0:3e:16:24:41:d2:2d:df:1f:f0:e5:4e:
e6:40:4d:5c:0d:14:d5:28:05:77:ab:c8:04:b5:36:
52:d7:20:e8:06:75:84:c8:25:af:aa:81:75:57:34:
c8:cc:dc:a0:3c:40:6a:bf:dd:a8:1d:98:12:7f:a2:
8b:59:1d:1a:ee:82:06:f1:c8:54:27:2c:ae:0b:08:
48:69:be:ea:4b:79:fd:25:da:c4:0c:52:65:af:ef:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:62:59:E6:98:AC:8A:5E:54:EF:BF:2B:5B:96:00:48:6E:5A:CE:9B
X509v3 Authority Key Identifier:
keyid:A1:26:DE:23:C6:D7:EF:87:B0:FD:FF:80:98:F0:5C:7B:7B:C3:47:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSbeI8bX74ew_f-AmPBce3vDR64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c459c2-028c-4776-a3bc-81e3c9e7a06e/1/oSbeI8bX74ew_f-AmPBce3vDR64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c459c2-028c-4776-a3bc-81e3c9e7a06e/1/oSbeI8bX74ew_f-AmPBce3vDR64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:09:fa:c4:f8:05:f0:53:41:74:40:d1:c9:c1:27:9c:08:72:
2b:e5:df:15:95:c7:f8:3e:3d:fa:45:d0:89:db:f4:12:58:68:
c9:9d:14:d4:2f:9f:7e:c5:96:76:2d:d1:e9:62:d2:ef:7f:43:
eb:e6:ed:61:01:e6:fb:be:64:3d:c4:cf:02:ce:2a:e5:37:be:
2d:45:fb:49:5f:02:c3:77:0f:dc:f2:fb:40:f5:d0:63:71:30:
34:ed:45:63:03:4b:ae:b4:ba:55:0a:86:8b:b3:d3:f3:2d:21:
1b:ce:5c:cd:6c:a9:2c:5d:f9:61:f6:47:52:c3:9b:84:b6:04:
46:bc:3f:ce:bf:dd:d6:fa:5d:b4:23:c9:2b:51:32:89:7e:6e:
d8:e9:cc:b8:1f:30:da:2f:fe:b0:a6:2d:05:82:90:f2:28:de:
e4:99:f9:2e:e7:cf:61:bd:f2:41:8c:d8:9a:70:31:b1:63:17:
71:59:6f:4e:d7:d0:5d:68:25:68:47:e5:81:54:9b:b9:77:85:
c2:cf:68:b4:19:3b:d9:01:e2:8d:3f:7e:18:4c:0f:44:27:2f:
e8:f3:2f:45:5f:3c:b9:ac:91:3f:26:ee:c3:8b:f1:03:5a:0e:
29:64:be:60:bf:bf:c4:3a:ee:8e:50:94:22:02:40:6c:23:0c:
a1:52:9f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:34 2025 by rpki-client