Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/45ecff-a382-4564-b57f-a3cd0958c7f1/1/Ooa3pzSr5Otz9Mlmr2a-2nRZt18.mft
File: Ooa3pzSr5Otz9Mlmr2a-2nRZt18.mft (raw, json)
Hash identifier: o+Yu7197NFjlYAKlLYkqVJi4uYDWAdAZEI22dWoE+Ic=
Subject key identifier: 1F:F8:E5:F2:5B:B0:4E:BC:F1:5E:A5:D7:FB:2E:53:8B:03:15:9E:D1
Authority key identifier: 3A:86:B7:A7:34:AB:E4:EB:73:F4:C9:66:AF:66:BE:DA:74:59:B7:5F
Certificate issuer: /CN=3a86b7a734abe4eb73f4c966af66beda7459b75f
Certificate serial: 018C8FE632A94967AD638FC556BA3A1AA8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ooa3pzSr5Otz9Mlmr2a-2nRZt18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/45ecff-a382-4564-b57f-a3cd0958c7f1/1/Ooa3pzSr5Otz9Mlmr2a-2nRZt18.mft
Manifest number: 0FF8
Signing time: Fri 22 Dec 2023 05:01:17 +0000
Manifest this update: Fri 22 Dec 2023 05:01:17 +0000
Manifest next update: Sat 23 Dec 2023 05:01:17 +0000
Files and hashes: 1: Ooa3pzSr5Otz9Mlmr2a-2nRZt18.crl (hash: P6umn0SjEBRK0j1l4kOqGh/Wd4T0rvTSU670Toxq+tQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8f:e6:32:a9:49:67:ad:63:8f:c5:56:ba:3a:1a:a8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a86b7a734abe4eb73f4c966af66beda7459b75f
Validity
Not Before: Dec 22 05:01:17 2023 GMT
Not After : Dec 23 05:01:17 2023 GMT
Subject: CN=1ff8e5f25bb04ebcf15ea5d7fb2e538b03159ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:2c:79:c7:c5:a7:36:63:fa:68:b3:35:a6:9f:
bd:b0:74:84:15:b0:e8:f1:7b:7d:43:62:fa:6a:97:
57:ea:7b:0e:00:58:7d:90:46:e9:4b:d8:c5:a3:a1:
54:ab:c1:c0:e7:02:fc:f7:c7:cb:fd:e8:91:bb:e9:
bd:cf:25:2e:e2:d2:8c:dd:c3:67:69:4f:71:72:99:
32:a7:de:0e:fe:97:8c:f5:08:01:05:8c:c4:6c:98:
16:fe:f0:e3:8f:aa:ca:ae:e9:8f:5c:4e:2a:13:97:
f6:c2:05:3d:79:6c:c6:b1:26:9c:f0:c3:03:97:61:
d2:67:d2:d6:25:cb:b5:60:5e:50:a7:31:43:01:6f:
8d:03:b8:b0:63:09:7c:1b:a5:76:36:2f:ef:ee:fb:
64:32:b8:8e:78:fb:d8:4d:dd:2e:ac:28:44:48:ae:
c8:02:6a:8f:5c:48:bd:eb:8e:61:ee:bb:c4:37:0e:
f5:6e:22:79:d4:26:98:ca:95:8f:72:8b:da:3b:e2:
64:03:53:e6:77:6f:d7:14:d4:cf:db:f2:e6:a4:b5:
e6:3e:63:f7:ad:e3:b4:5a:c1:09:9a:99:9b:53:e0:
80:f4:b3:61:6a:8f:5f:0e:21:b8:f1:3b:f6:aa:79:
93:fe:64:5e:df:2e:e5:2b:de:31:c2:f4:b8:ff:7f:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F8:E5:F2:5B:B0:4E:BC:F1:5E:A5:D7:FB:2E:53:8B:03:15:9E:D1
X509v3 Authority Key Identifier:
keyid:3A:86:B7:A7:34:AB:E4:EB:73:F4:C9:66:AF:66:BE:DA:74:59:B7:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ooa3pzSr5Otz9Mlmr2a-2nRZt18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/45ecff-a382-4564-b57f-a3cd0958c7f1/1/Ooa3pzSr5Otz9Mlmr2a-2nRZt18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/45ecff-a382-4564-b57f-a3cd0958c7f1/1/Ooa3pzSr5Otz9Mlmr2a-2nRZt18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:21:a0:be:b0:18:9f:6c:ad:cd:00:6d:f5:05:0a:76:e2:6b:
44:17:b4:3d:33:82:ea:6c:b9:0e:7c:be:d7:dc:55:9b:9e:82:
10:e3:5f:02:99:44:b2:10:8b:7c:b8:5c:9e:f5:40:c4:da:0c:
29:4f:79:c0:5c:42:83:e4:4e:6e:c4:25:9d:81:80:ea:4b:3b:
0f:ee:44:c6:89:d7:50:0e:7a:d6:cb:d8:e9:60:fd:0a:6a:44:
ee:5c:b5:2e:50:d7:4e:a0:2a:71:25:25:43:5e:12:2e:f8:c3:
40:8b:77:3c:d1:3c:88:b3:df:7c:4e:de:2a:18:57:83:a5:54:
95:86:ef:59:69:22:fd:38:4c:7d:1d:09:a2:27:f7:50:c0:57:
62:4d:dc:3f:a5:29:dc:5f:e1:15:ed:3d:cd:d3:18:d1:88:44:
43:9d:d9:37:3b:64:c6:09:d5:91:77:a5:3b:b1:2a:64:b2:08:
03:c5:9e:68:aa:22:a7:80:24:4f:93:ae:b0:b8:ad:cc:00:81:
58:82:d7:7b:8a:4c:68:b1:6b:d8:5b:9a:45:45:81:e5:9b:93:
e7:d6:41:35:91:06:87:25:43:76:3c:58:e1:8e:75:6a:df:89:
4c:c6:5a:77:90:95:17:ea:2e:d0:1d:3d:08:f1:5b:bb:c9:e6:
00:95:da:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:39 2025 by rpki-client