Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4a132d-233b-4740-93c4-46dd63ea76f3/1/OTS-oEAkKAYJ-Re4e-0IDa9MfqQ.mft
File: OTS-oEAkKAYJ-Re4e-0IDa9MfqQ.mft (raw, json)
Hash identifier: kL2KIdPnX9kPnoB6bwnYkOjvJjlwHzZDxumpDQApWs8=
Subject key identifier: FD:A4:F1:AE:AE:B5:ED:86:91:99:2D:2C:E8:C4:7F:30:6C:3A:17:C3
Authority key identifier: 39:34:BE:A0:40:24:28:06:09:F9:17:B8:7B:ED:08:0D:AF:4C:7E:A4
Certificate issuer: /CN=3934bea04024280609f917b87bed080daf4c7ea4
Certificate serial: 018D8C3D116BAB60090A378DCFCCA9367D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTS-oEAkKAYJ-Re4e-0IDa9MfqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4a132d-233b-4740-93c4-46dd63ea76f3/1/OTS-oEAkKAYJ-Re4e-0IDa9MfqQ.mft
Manifest number: 085F
Signing time: Fri 09 Feb 2024 05:00:28 +0000
Manifest this update: Fri 09 Feb 2024 05:00:28 +0000
Manifest next update: Sat 10 Feb 2024 05:00:28 +0000
Files and hashes: 1: OTS-oEAkKAYJ-Re4e-0IDa9MfqQ.crl (hash: AhfsFXtYErjtCR/fBhv+8MZnUkoIJsexR75cwDtaYHI=)
2: eqaKKWWHOn5nDL2Ic1yW4Sg6tsk.roa (hash: l87/Wk5IbnuFAVlnIcuAFhP0RTGnWzpvHROeIyA1n1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8c:3d:11:6b:ab:60:09:0a:37:8d:cf:cc:a9:36:7d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3934bea04024280609f917b87bed080daf4c7ea4
Validity
Not Before: Feb 9 05:00:28 2024 GMT
Not After : Feb 10 05:00:28 2024 GMT
Subject: CN=fda4f1aeaeb5ed8691992d2ce8c47f306c3a17c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c5:32:6c:c7:69:bc:86:ac:5d:09:59:e7:25:
4b:b9:44:3c:d5:78:79:42:09:15:3b:f8:8d:0f:60:
31:09:0c:80:61:57:ec:57:23:3b:77:92:14:db:5c:
19:de:c1:30:a4:37:d0:ee:47:80:30:ff:5c:1d:15:
59:08:c7:09:12:73:2e:94:2d:1f:87:6f:e3:d5:66:
1c:74:56:02:20:0b:ec:50:4a:22:33:f0:81:ba:c6:
c9:db:ba:f0:e9:04:62:9f:fd:25:b4:6e:c7:0e:7e:
e8:43:66:79:ef:bc:27:1c:bc:71:71:c6:34:cd:8a:
04:d8:18:ab:0d:b8:84:7a:a8:84:0d:b6:2d:ce:1d:
cb:87:80:bb:83:97:aa:cc:85:17:0b:5f:07:36:43:
93:90:18:37:b1:34:cc:04:bb:4d:e6:5c:19:3a:1b:
98:08:9a:88:4e:36:42:b2:12:f5:1f:af:20:0d:f5:
6e:66:3d:a2:b6:ba:a5:8a:56:63:d7:1f:62:ed:55:
50:43:a0:32:cc:8b:e6:61:50:06:97:ca:eb:d4:cc:
b8:28:c5:97:5a:7f:96:a4:45:42:76:7b:07:c7:80:
30:5a:29:d4:38:5e:78:8e:62:fd:89:b9:2b:4c:14:
43:a9:7f:c3:48:30:58:dc:93:7a:12:5e:75:52:3a:
e5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A4:F1:AE:AE:B5:ED:86:91:99:2D:2C:E8:C4:7F:30:6C:3A:17:C3
X509v3 Authority Key Identifier:
keyid:39:34:BE:A0:40:24:28:06:09:F9:17:B8:7B:ED:08:0D:AF:4C:7E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTS-oEAkKAYJ-Re4e-0IDa9MfqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4a132d-233b-4740-93c4-46dd63ea76f3/1/OTS-oEAkKAYJ-Re4e-0IDa9MfqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4a132d-233b-4740-93c4-46dd63ea76f3/1/OTS-oEAkKAYJ-Re4e-0IDa9MfqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7b:35:4e:a2:d5:72:85:04:79:65:cc:9d:35:e4:e3:44:b6:
c2:ef:c3:7d:07:bc:ab:d4:7f:27:70:2c:4a:c0:4c:5c:0c:c1:
cb:fe:08:83:8b:2e:9b:c8:42:ae:0b:4c:cb:c4:0e:f1:f3:b5:
97:18:0f:80:0f:3e:ab:1e:13:ec:8d:ec:c8:85:f7:96:68:bb:
98:2e:d8:fe:00:ba:6f:0f:b2:7b:84:55:0d:64:a9:23:27:63:
25:ec:6b:a5:3d:14:6d:2a:9f:ed:64:5b:1c:af:d2:43:7d:20:
20:0b:60:4a:35:20:4e:0d:4b:6f:ee:16:e7:98:bb:82:b2:b5:
7b:cf:e6:f3:7f:04:64:bf:f1:c9:ef:90:52:48:e5:ef:b2:e6:
df:6c:5d:e3:30:36:c6:0e:0a:8a:3f:c2:4c:1d:e5:c0:0d:6f:
19:3d:7b:e4:dc:13:39:d2:77:0b:39:c9:94:38:0f:10:c4:ad:
fd:f6:c4:68:f9:87:10:25:09:f2:36:df:00:06:18:7c:8f:d8:
cf:6f:7e:2a:87:bd:a3:1b:52:a9:5d:d8:13:65:72:bc:b9:4f:
23:9e:f6:c1:a9:90:7e:f0:ff:b7:72:81:72:66:7e:c8:de:d7:
4b:31:e1:77:46:29:9f:7e:25:03:a3:f3:d5:b9:30:77:e4:23:
08:fd:5c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:27 2024 by rpki-client on console-ams.rpki-client.org