Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3bd00f-6dfe-4d78-8d87-10a37f8d9606/1/OQSULP-zxVYHyWvTx9d6rC4kNlc.mft
File: OQSULP-zxVYHyWvTx9d6rC4kNlc.mft (raw, json)
Hash identifier: kd5C47CUb7x6cck6QdqCXHQvHD2/sz/ktS87VTnO95U=
Subject key identifier: 6F:50:74:A4:7E:38:31:F0:DE:63:3C:37:6C:83:D8:CD:EF:B4:7C:04
Authority key identifier: 39:04:94:2C:FF:B3:C5:56:07:C9:6B:D3:C7:D7:7A:AC:2E:24:36:57
Certificate issuer: /CN=3904942cffb3c55607c96bd3c7d77aac2e243657
Certificate serial: 018C43B96384678842D81B2B288BEF4ACEAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQSULP-zxVYHyWvTx9d6rC4kNlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3bd00f-6dfe-4d78-8d87-10a37f8d9606/1/OQSULP-zxVYHyWvTx9d6rC4kNlc.mft
Manifest number: 025A
Signing time: Thu 07 Dec 2023 10:01:12 +0000
Manifest this update: Thu 07 Dec 2023 10:01:12 +0000
Manifest next update: Fri 08 Dec 2023 10:01:12 +0000
Files and hashes: 1: D7YBFj1KvUy8Dm8oKzV7FDdFGTY.roa (hash: 4g2pwvTwUNENVZH1J82BX0KWI8zXYG8Zdn0qjqCc9AU=)
2: OQSULP-zxVYHyWvTx9d6rC4kNlc.crl (hash: HzHUPaXrQ1faLd31Wa2MpQCy6Nz6FdyIxV9TYxBwU2o=)
3: TI5UIbxO2ysWALs0frq1IVCZ-e8.roa (hash: UQsVeZAiv8UPX8wRE4ochHR73GOLxhkVOiFbhh+1UCg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:b9:63:84:67:88:42:d8:1b:2b:28:8b:ef:4a:ce:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3904942cffb3c55607c96bd3c7d77aac2e243657
Validity
Not Before: Dec 7 10:01:12 2023 GMT
Not After : Dec 8 10:01:12 2023 GMT
Subject: CN=6f5074a47e3831f0de633c376c83d8cdefb47c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:7f:5f:e7:27:a6:7e:b2:94:53:5c:27:e7:
ca:8d:a9:0c:c5:4a:c0:f7:d1:46:7c:b0:3b:2f:ba:
09:ce:17:21:63:c3:21:25:90:61:68:4d:52:2f:4b:
4c:c6:3e:a1:a3:4f:01:76:fb:b5:a2:3f:21:68:c7:
23:77:8a:72:55:c6:62:fb:76:1b:46:62:cb:25:31:
87:70:96:ac:44:f9:93:d2:cc:c3:ce:60:04:a1:e2:
8f:eb:c7:c1:4c:02:8d:28:b4:3c:5c:0e:8d:2d:9c:
c6:6e:37:a8:86:88:ea:82:e2:9d:0f:e3:2a:62:f1:
ba:68:20:7c:9c:3b:59:d8:2b:83:61:81:e4:3a:2c:
40:e8:f2:dd:03:3b:5c:8a:4d:f5:c8:24:0c:3a:56:
ad:4f:42:74:eb:27:0c:a3:b5:cf:0b:b3:1a:51:22:
58:36:2f:76:06:b5:ce:98:b3:28:95:cb:85:58:78:
43:b4:89:17:c7:d9:43:79:0f:57:cb:4c:6f:7f:4c:
0e:f3:62:0f:86:f8:e2:bc:3e:b2:08:3c:3d:43:d6:
ce:91:92:7e:fc:75:8e:2a:09:97:1a:48:3c:2e:e5:
b2:b8:a9:c8:73:71:45:82:0b:68:da:65:2c:52:ce:
37:7a:14:8e:0f:c9:66:ac:d9:c7:a5:6e:9d:ce:6f:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:50:74:A4:7E:38:31:F0:DE:63:3C:37:6C:83:D8:CD:EF:B4:7C:04
X509v3 Authority Key Identifier:
keyid:39:04:94:2C:FF:B3:C5:56:07:C9:6B:D3:C7:D7:7A:AC:2E:24:36:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQSULP-zxVYHyWvTx9d6rC4kNlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3bd00f-6dfe-4d78-8d87-10a37f8d9606/1/OQSULP-zxVYHyWvTx9d6rC4kNlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3bd00f-6dfe-4d78-8d87-10a37f8d9606/1/OQSULP-zxVYHyWvTx9d6rC4kNlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:65:8e:f9:83:1f:0f:09:a6:8c:5b:20:a0:5c:31:49:3a:75:
7c:e0:fc:c8:02:46:2c:a5:68:f3:74:3a:3b:b0:f9:87:09:e3:
61:ea:c3:82:61:fe:41:53:8b:d2:91:1b:7b:f9:8c:8f:1e:33:
fe:8e:cf:7a:84:b4:69:9d:2e:80:15:4e:d0:21:84:f0:54:58:
64:62:47:98:6b:a2:61:ae:0c:cc:3b:70:50:15:e6:18:a5:a7:
8d:ca:e8:f2:14:0f:7b:70:71:46:6a:de:7c:b5:53:cc:0b:4d:
74:d4:86:28:2c:27:5e:f4:14:7b:4f:b7:6c:f7:8c:a8:2a:40:
df:e5:92:f2:ba:07:c6:48:4e:ec:ee:64:62:ab:9f:43:57:5a:
06:c7:f9:2e:d9:fc:e7:1b:0c:90:ff:a1:ae:5f:8d:15:77:4b:
11:18:23:92:9c:46:04:e3:a7:4c:d1:7b:69:1d:84:f2:6a:26:
4f:01:77:6e:3f:c4:10:03:dc:51:b3:0f:6a:d5:22:76:d6:dc:
9d:e2:7a:39:b2:c2:71:e3:b7:77:3f:c6:2e:96:34:2d:83:e3:
a0:c3:88:3a:b5:2c:12:9c:27:24:14:8d:83:47:3f:e1:53:b3:
c2:d9:56:86:5d:ba:ac:85:d7:7e:23:9b:f1:43:10:97:73:e9:
e5:3c:da:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:40:48 2025 by rpki-client