Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/02c0cf-489d-4fda-9e39-10133232e759/1/Oz__ceWfNQY_gJ_F6zr0xBn3vzM.mft
File: Oz__ceWfNQY_gJ_F6zr0xBn3vzM.mft (raw, json)
Hash identifier: sr5hqQHane5n+rpI2DXxVcUa2h11we3ikelwS8Am1mc=
Subject key identifier: 90:E6:9D:B9:6A:94:32:23:2E:95:96:0D:D4:B3:96:3D:66:94:39:CA
Authority key identifier: 3B:3F:FF:71:E5:9F:35:06:3F:80:9F:C5:EB:3A:F4:C4:19:F7:BF:33
Certificate issuer: /CN=3b3fff71e59f35063f809fc5eb3af4c419f7bf33
Certificate serial: 0188E39AFC7C852C82F570DA349EF4052E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oz__ceWfNQY_gJ_F6zr0xBn3vzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/02c0cf-489d-4fda-9e39-10133232e759/1/Oz__ceWfNQY_gJ_F6zr0xBn3vzM.mft
Manifest number: 07CC
Signing time: Thu 22 Jun 2023 14:56:05 +0000
Manifest this update: Thu 22 Jun 2023 14:56:05 +0000
Manifest next update: Fri 23 Jun 2023 14:56:05 +0000
Files and hashes: 1: Oz__ceWfNQY_gJ_F6zr0xBn3vzM.crl (hash: I5C+2Hgram7Ol0mAN6dKYkoA07WWpQRmLi1tRbydinI=)
2: TkehTKBQ5fxelBtd5V8T3vNlnKM.roa (hash: UJlOVCdZX9WeconeqrQ9HwZRjBsMPUufUIbhp0txYOI=)
3: xYYSmipaVsbSrBMTtmqUNwnNh_c.roa (hash: jlJDnkfsaPdyUaXC48t8oNiAKVwhsZfv2RkXwGTL6Ec=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e3:9a:fc:7c:85:2c:82:f5:70:da:34:9e:f4:05:2e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b3fff71e59f35063f809fc5eb3af4c419f7bf33
Validity
Not Before: Jun 22 14:56:05 2023 GMT
Not After : Jun 23 14:56:05 2023 GMT
Subject: CN=90e69db96a9432232e95960dd4b3963d669439ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9f:58:8d:20:05:14:ba:e0:85:29:1c:06:77:
e3:34:e4:2a:f1:46:d5:3b:69:fe:b8:93:df:bf:de:
bf:08:ba:85:30:8b:5a:e3:bd:f9:1a:f1:6b:07:41:
c9:f6:fb:e7:4d:75:c3:22:77:8a:c5:de:5b:e9:2d:
77:bf:3f:a7:0a:c8:e9:ea:0c:39:9a:09:48:78:3a:
a4:80:a1:62:91:e4:52:88:f8:74:1c:70:e8:82:29:
f1:74:3b:68:bb:99:21:9b:37:da:a8:c4:2f:06:4d:
7b:e6:c6:65:c7:1d:e4:ff:40:c9:63:39:b1:6b:05:
02:26:9b:c8:cb:1f:1d:14:29:fc:fb:97:53:17:11:
4e:96:fb:6f:fb:cd:16:79:40:22:21:48:5c:dd:2a:
01:6f:ea:e6:08:5e:fa:95:63:72:d6:c7:de:16:c7:
80:32:d9:6a:a0:2b:8b:f2:5b:33:d3:0b:fe:b5:b8:
4b:15:46:ee:6a:31:41:ce:f3:b7:3c:bd:0c:d2:08:
7d:b0:3b:19:63:17:54:6a:95:20:e3:6d:52:11:c5:
a8:a4:85:86:ae:b8:cd:3c:b9:be:1e:84:6b:d1:e0:
52:e4:31:6b:03:94:22:71:7f:d2:21:97:d7:cb:68:
5c:d2:4f:28:cb:1a:3c:b7:c1:ed:12:79:eb:24:5e:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E6:9D:B9:6A:94:32:23:2E:95:96:0D:D4:B3:96:3D:66:94:39:CA
X509v3 Authority Key Identifier:
keyid:3B:3F:FF:71:E5:9F:35:06:3F:80:9F:C5:EB:3A:F4:C4:19:F7:BF:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oz__ceWfNQY_gJ_F6zr0xBn3vzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/02c0cf-489d-4fda-9e39-10133232e759/1/Oz__ceWfNQY_gJ_F6zr0xBn3vzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/02c0cf-489d-4fda-9e39-10133232e759/1/Oz__ceWfNQY_gJ_F6zr0xBn3vzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:66:89:da:85:ff:9b:c6:01:d5:e8:06:96:41:10:f7:f1:54:
d2:9f:b4:c7:b7:d7:8b:93:97:71:e5:06:36:de:fa:0b:37:63:
1d:06:1f:f0:c0:1c:67:ea:bb:08:14:cd:79:47:c8:11:57:30:
20:d8:92:a5:ca:c6:e7:56:31:8e:66:bd:a6:85:30:ce:67:15:
f4:6c:15:b4:bd:18:97:52:e8:9f:ad:08:60:c8:d3:b0:f6:81:
35:1f:d0:5b:4d:ee:d1:76:97:c8:3e:de:83:aa:92:bc:4e:38:
b4:b8:8d:88:08:a5:ed:31:29:6a:3e:d9:7d:6d:f9:a3:42:4b:
0d:cf:84:21:18:9f:a4:5d:ef:87:80:17:a8:20:c8:f5:9e:97:
81:50:d9:b2:cc:ec:59:51:c9:1e:f3:b9:5c:0f:27:b6:99:04:
7e:84:a2:1a:f6:4e:f8:84:20:1f:ac:d6:74:7b:09:ea:51:fe:
6e:7e:4c:bf:61:e5:b4:5c:a0:21:bf:fb:8a:8c:bd:00:aa:da:
9a:bb:50:ea:9d:cb:54:0d:ff:09:87:7c:41:1f:19:5f:48:36:
44:d0:d1:54:a1:cc:9b:0a:a0:97:57:8d:4c:bb:92:f6:20:ed:
f8:eb:5a:3c:74:ab:72:51:83:f4:d6:7d:7b:d6:0b:23:26:de:
4e:d5:8e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:46:58 2025 by rpki-client