Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c45e69-fd97-4c4f-b663-84146079d0b9/1/okSlwiuw0bcu277f1aeyYHkiM0o.mft
File: okSlwiuw0bcu277f1aeyYHkiM0o.mft (raw, json)
Hash identifier: nT7B4Sxh4o+Y9JxcrYWQovFuIh8d9sagmjIIjIBKiz0=
Subject key identifier: C9:8B:32:0D:CC:0F:48:F1:B1:96:7A:57:B8:FD:C8:DD:77:D4:F3:80
Authority key identifier: A2:44:A5:C2:2B:B0:D1:B7:2E:DB:BE:DF:D5:A7:B2:60:79:22:33:4A
Certificate issuer: /CN=a244a5c22bb0d1b72edbbedfd5a7b2607922334a
Certificate serial: 018DF2CED85D0D09796E9778C154B55A10DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okSlwiuw0bcu277f1aeyYHkiM0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/c45e69-fd97-4c4f-b663-84146079d0b9/1/okSlwiuw0bcu277f1aeyYHkiM0o.mft
Manifest number: 08AF
Signing time: Thu 29 Feb 2024 03:00:58 +0000
Manifest this update: Thu 29 Feb 2024 03:00:58 +0000
Manifest next update: Fri 01 Mar 2024 03:00:58 +0000
Files and hashes: 1: YCu9Rc0smCTK0ynVtwDuHNDgjNY.roa (hash: m3t1oOjMLNoRLMT8edXCvCZa++dEm/vdN4VIMvVuJhE=)
2: okSlwiuw0bcu277f1aeyYHkiM0o.crl (hash: 7sZOzL1vyL6C2VJ/uMPjru8b5lPZ/nOCKg4gdUtfftQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f2:ce:d8:5d:0d:09:79:6e:97:78:c1:54:b5:5a:10:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a244a5c22bb0d1b72edbbedfd5a7b2607922334a
Validity
Not Before: Feb 29 03:00:58 2024 GMT
Not After : Mar 1 03:00:58 2024 GMT
Subject: CN=c98b320dcc0f48f1b1967a57b8fdc8dd77d4f380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:37:44:f0:1c:3f:f6:15:b8:38:8b:c7:fa:28:
11:32:70:c1:5e:3c:a8:cc:0c:fd:aa:64:d2:0f:14:
f1:90:51:50:11:77:38:7c:99:37:b5:49:e2:3f:98:
90:22:75:41:5c:f3:4f:06:27:4d:06:54:23:72:ce:
a9:ae:be:1d:9b:42:26:02:ac:55:2e:ba:38:ff:81:
4f:30:bb:70:96:96:e3:be:b4:c2:cf:b3:f3:05:7b:
4c:ba:7f:08:41:dd:fc:14:25:ca:e0:93:0f:8f:5f:
9e:3c:86:ef:1a:60:78:3e:b3:28:bd:87:03:f7:f7:
ed:fc:12:46:12:52:67:d8:d6:da:b7:e9:b0:e8:2b:
7d:6b:a7:c1:82:e2:26:26:21:77:5a:01:84:66:79:
5a:eb:74:5c:58:00:0c:a1:d9:1e:8e:f3:31:3d:09:
d6:8b:a9:f4:cd:71:0d:ff:dd:f8:c7:38:2c:2c:0d:
a9:07:46:df:00:af:24:4c:f2:bc:c5:62:e2:1c:16:
1b:0d:82:87:06:8e:63:0c:53:6e:56:54:95:6c:79:
73:54:89:34:2e:74:04:c9:fe:85:43:2a:6a:04:1a:
9b:2d:23:56:06:58:34:31:06:b0:b1:ea:4a:17:e4:
fd:e9:f4:76:b7:12:4a:b4:f6:a1:90:ea:06:11:bb:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8B:32:0D:CC:0F:48:F1:B1:96:7A:57:B8:FD:C8:DD:77:D4:F3:80
X509v3 Authority Key Identifier:
keyid:A2:44:A5:C2:2B:B0:D1:B7:2E:DB:BE:DF:D5:A7:B2:60:79:22:33:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okSlwiuw0bcu277f1aeyYHkiM0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c45e69-fd97-4c4f-b663-84146079d0b9/1/okSlwiuw0bcu277f1aeyYHkiM0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c45e69-fd97-4c4f-b663-84146079d0b9/1/okSlwiuw0bcu277f1aeyYHkiM0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bb:ba:5e:08:4a:c6:13:c9:d1:a4:38:9b:0e:b7:00:a3:dc:
21:5b:88:a3:f9:91:c7:f3:ff:be:48:3e:82:44:d3:88:e9:84:
16:14:a9:f8:69:79:e6:23:04:bf:56:39:5f:82:59:47:c4:02:
a8:fd:6f:c5:09:84:3b:ca:51:70:6f:af:54:ae:c4:ff:6d:25:
6c:0a:8a:52:04:b1:b5:45:8f:2b:01:99:df:bc:e6:e0:8e:f6:
c7:68:eb:77:47:0a:85:f9:fb:70:ba:f3:8c:b4:c0:77:05:43:
b2:2c:c6:47:7b:fc:ac:89:27:f9:66:b4:96:a4:81:87:be:f4:
2b:97:a4:a2:66:3c:4e:f5:3a:8f:26:5b:bd:58:b9:d1:e6:b2:
d3:3f:a0:d9:f0:bb:94:1e:94:25:6f:af:82:5a:d9:b3:28:6d:
98:f8:b3:ce:d1:a0:45:4f:c7:e0:91:7a:f4:cf:e4:15:0b:3e:
68:59:a4:a6:9b:d3:2d:37:b1:52:92:59:1c:0c:ed:7f:85:a8:
ad:25:39:61:c8:c3:2a:f2:23:f5:9b:46:e6:79:44:a1:e1:43:
ea:27:d9:6b:84:e2:fc:c6:7e:a2:b5:9e:c5:08:e2:fc:3f:7a:
82:51:b9:ce:26:08:8d:86:af:2d:32:3e:e6:b6:28:c2:77:a6:
f2:7e:e2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:03 2025 by rpki-client