Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e2ee66-41a2-4f08-8ed9-0907ee1e3d52/1/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.mft
File: OCJ_r3UTYQM0MgrZs_lb4f8QmcU.mft (raw, json)
Hash identifier: pa9wFFcQDJcHbtOANXAqyYpTTPwp+UtZNM9RxEcksRs=
Subject key identifier: 7B:70:8A:DD:84:A6:69:2E:C8:32:BE:1E:25:B8:51:C0:0B:FA:69:1F
Authority key identifier: 38:22:7F:AF:75:13:61:03:34:32:0A:D9:B3:F9:5B:E1:FF:10:99:C5
Certificate issuer: /CN=38227faf7513610334320ad9b3f95be1ff1099c5
Certificate serial: 018D641D1735F61A94BED8C8A2C8DC515B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e2ee66-41a2-4f08-8ed9-0907ee1e3d52/1/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.mft
Manifest number: 084F
Signing time: Thu 01 Feb 2024 10:00:44 +0000
Manifest this update: Thu 01 Feb 2024 10:00:44 +0000
Manifest next update: Fri 02 Feb 2024 10:00:44 +0000
Files and hashes: 1: Ghk__EufXRXOQXGCalH34VVlERk.roa (hash: iJjF7gPcMbffRIyjzhGCltxjk1WVsWRpP/wJXIhQulY=)
2: OCJ_r3UTYQM0MgrZs_lb4f8QmcU.crl (hash: mHXkUZS0QZzUI1S2kZN0GgcHsRursvck/A5JrD3e8yk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:1d:17:35:f6:1a:94:be:d8:c8:a2:c8:dc:51:5b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38227faf7513610334320ad9b3f95be1ff1099c5
Validity
Not Before: Feb 1 10:00:44 2024 GMT
Not After : Feb 2 10:00:44 2024 GMT
Subject: CN=7b708add84a6692ec832be1e25b851c00bfa691f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a4:f5:8d:3a:74:e1:41:1e:61:14:7c:f0:d8:
73:bd:48:4c:77:e6:f5:23:6b:63:4a:72:f5:40:a6:
d4:18:a5:5e:eb:e4:89:db:d7:48:2e:29:9b:e8:20:
05:eb:5f:94:b1:b5:a7:fc:ce:63:3a:c7:d9:c9:37:
31:2b:dd:22:6a:e3:c4:4d:41:b1:f4:1e:3d:6f:cf:
17:5f:30:ed:fa:f2:fc:ee:7d:55:39:2c:ba:47:a9:
8b:be:bd:2f:4e:0a:61:74:c1:98:59:6d:bb:3f:e2:
58:45:f8:78:26:68:4f:5e:08:ac:da:0c:1c:89:45:
20:8d:01:81:5d:de:08:7a:21:ca:f9:4a:c6:e5:dd:
4d:41:4c:26:5d:60:33:f9:8d:fb:24:1d:ef:78:ac:
49:b7:c4:0e:9f:10:09:7b:e4:7a:b1:a9:3b:14:40:
59:b0:9f:af:87:5b:bc:11:75:aa:f3:e7:53:dc:d0:
6a:60:a2:0b:2b:df:c2:e9:1f:9a:b4:06:03:b6:cd:
72:45:79:c6:54:7c:c5:db:c2:44:e5:72:71:24:d8:
c6:4a:4d:ee:9c:68:72:73:07:11:77:47:a0:b2:05:
08:a6:d6:30:1b:f0:92:f8:14:55:fd:8e:b3:54:c3:
62:f9:f4:0d:52:d1:bd:8f:f3:09:6d:7e:ca:f7:73:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:70:8A:DD:84:A6:69:2E:C8:32:BE:1E:25:B8:51:C0:0B:FA:69:1F
X509v3 Authority Key Identifier:
keyid:38:22:7F:AF:75:13:61:03:34:32:0A:D9:B3:F9:5B:E1:FF:10:99:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e2ee66-41a2-4f08-8ed9-0907ee1e3d52/1/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e2ee66-41a2-4f08-8ed9-0907ee1e3d52/1/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:05:77:47:4b:54:e9:8f:5f:4d:04:37:b3:e8:ad:08:5b:9e:
ba:54:ac:1e:85:21:db:41:33:77:b6:06:9a:e4:7f:a1:f5:4a:
7b:10:ed:30:e7:7e:f1:7a:57:b9:1a:8d:02:06:c7:b8:ef:6e:
56:ae:2d:8c:96:da:4c:01:de:be:d1:ca:5c:8a:fb:a1:96:24:
4d:f0:cf:e2:fe:ad:66:45:db:4e:49:7a:06:50:ba:6e:3d:f2:
eb:81:da:73:c7:0a:92:ca:03:0e:79:0e:cc:44:57:33:78:bc:
cc:b5:60:cf:ce:98:cd:4c:a4:9c:d2:df:4f:d9:7c:af:6b:87:
71:a8:b0:68:fe:f6:5f:d7:09:81:da:4b:5a:91:76:00:5e:12:
b0:1b:db:46:7a:84:27:63:34:d8:08:39:57:ca:cd:e1:af:05:
b6:7f:44:7d:50:9c:81:f1:8a:9e:9c:49:3a:9b:8a:b3:5e:9f:
d0:3a:c9:9e:41:2b:07:3c:81:02:2c:2f:6a:51:9e:3c:17:3c:
c9:1c:02:2f:34:d5:b3:6a:18:00:97:d1:d6:11:89:55:8f:f5:
cf:22:3a:d5:b3:45:be:c1:99:6e:75:c0:8f:40:67:9e:44:b4:
06:8a:f0:ba:d8:49:0f:0b:0a:c0:bb:b0:43:23:f4:64:ff:b0:
54:65:c3:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:39 2024 by rpki-client on console-ams.rpki-client.org