Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2abc5e-f146-420f-9225-d93193290f0d/1/OCszlXQLKewb6iWAi2ds6bo92Aw.mft
File: OCszlXQLKewb6iWAi2ds6bo92Aw.mft (raw, json)
Hash identifier: j1yGXKIxO8KtLzYJQ/+RvoL/xVAwlEkBemry53oN1xc=
Subject key identifier: 30:6F:30:74:08:65:59:28:63:6E:68:D5:BD:00:52:5F:30:6E:E9:D5
Authority key identifier: 38:2B:33:95:74:0B:29:EC:1B:EA:25:80:8B:67:6C:E9:BA:3D:D8:0C
Certificate issuer: /CN=382b3395740b29ec1bea25808b676ce9ba3dd80c
Certificate serial: 018C5C66347D1FFCC7AD51AF6E594877DFC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCszlXQLKewb6iWAi2ds6bo92Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/2abc5e-f146-420f-9225-d93193290f0d/1/OCszlXQLKewb6iWAi2ds6bo92Aw.mft
Manifest number: 0235
Signing time: Tue 12 Dec 2023 05:00:50 +0000
Manifest this update: Tue 12 Dec 2023 05:00:50 +0000
Manifest next update: Wed 13 Dec 2023 05:00:50 +0000
Files and hashes: 1: OCszlXQLKewb6iWAi2ds6bo92Aw.crl (hash: 4lrhFbsnukNhMo2tgPU6HKRjLj5s3FVOEraPS4IMqe4=)
2: PpEKGvU8hClGRfyUXsUKDY1t6ek.roa (hash: /M+8LhNgYGjrUOKyu2Zyoi+hHrEyeZR0wx91ZnwvDZE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5c:66:34:7d:1f:fc:c7:ad:51:af:6e:59:48:77:df:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=382b3395740b29ec1bea25808b676ce9ba3dd80c
Validity
Not Before: Dec 12 05:00:50 2023 GMT
Not After : Dec 13 05:00:50 2023 GMT
Subject: CN=306f307408655928636e68d5bd00525f306ee9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:10:cf:77:5a:2b:53:5b:a8:71:a7:4d:04:
da:05:66:b7:24:1d:88:f8:8d:b6:f9:b0:d6:0f:cd:
4c:14:8d:20:8b:27:c9:b8:e4:d0:8f:76:f6:35:86:
85:96:30:a3:6c:6f:ce:9d:ba:e2:ab:df:a4:61:7c:
d2:8f:c5:27:3b:29:e2:e0:6c:87:76:60:0c:79:da:
22:6e:ca:d6:05:bf:70:10:ae:27:03:b2:f2:d4:82:
b6:00:6d:a2:70:29:22:15:17:55:dc:a2:73:c0:47:
14:d1:7d:08:a8:78:2c:83:ab:6c:41:1c:59:b8:58:
08:a4:77:cc:21:34:86:f8:41:1c:ca:af:60:c2:fd:
e4:89:03:29:7f:50:eb:ec:15:10:0a:cc:d6:9f:25:
75:2a:dd:9d:60:87:20:59:d4:59:cb:37:c8:21:50:
b0:cc:dd:62:15:6b:65:b2:66:ea:26:09:43:9e:18:
67:e2:b1:4a:6a:a1:74:b0:7f:9c:1c:a2:20:3f:22:
eb:25:67:7a:36:09:35:61:d1:fb:f6:b7:09:35:cf:
d6:43:76:99:b5:7c:94:89:bd:0e:4b:98:3a:92:98:
f5:58:a4:d1:50:a5:87:19:33:91:ea:14:cf:6e:4d:
4d:5e:4a:94:a9:3b:95:5b:50:b0:91:4e:aa:49:15:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6F:30:74:08:65:59:28:63:6E:68:D5:BD:00:52:5F:30:6E:E9:D5
X509v3 Authority Key Identifier:
keyid:38:2B:33:95:74:0B:29:EC:1B:EA:25:80:8B:67:6C:E9:BA:3D:D8:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCszlXQLKewb6iWAi2ds6bo92Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2abc5e-f146-420f-9225-d93193290f0d/1/OCszlXQLKewb6iWAi2ds6bo92Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2abc5e-f146-420f-9225-d93193290f0d/1/OCszlXQLKewb6iWAi2ds6bo92Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:06:de:c1:50:11:d4:9d:3e:b2:25:90:6f:e8:ba:c1:29:f9:
c4:45:a0:28:5e:03:98:cc:e4:b3:29:ce:8b:4c:3b:a6:0e:f4:
41:c4:a0:c6:b9:7d:f6:90:ef:a9:16:b3:34:2c:e0:e1:19:64:
52:38:48:ee:2b:70:ca:8a:a4:ee:99:33:e0:9e:43:f6:0e:7b:
62:30:ec:b6:7c:0a:c6:01:c9:e9:cb:95:74:55:ce:cd:e0:eb:
88:3f:cc:c9:40:62:43:0b:7d:33:b0:35:51:4d:f7:f1:e7:26:
c1:a0:d7:b3:73:80:29:5b:4d:4d:19:59:68:52:78:41:9e:6b:
ff:cf:28:26:22:ca:28:e6:69:7c:85:cc:33:ba:e3:3f:2c:74:
4a:9c:30:f7:60:67:f0:44:79:27:b9:52:4a:99:4f:aa:f1:bf:
70:fe:ab:73:08:3f:73:7a:b7:51:bd:76:23:a6:d9:b7:d6:a7:
c2:42:40:a9:7f:4e:ad:c1:26:5b:9a:f2:be:46:5e:28:f8:4d:
c8:5e:9f:fd:82:a2:1f:b9:10:82:31:3e:5c:70:0a:20:2c:3c:
1d:05:1f:d4:8e:4d:ce:7c:86:eb:1d:cc:97:ff:d5:e9:7a:fd:
f5:d8:47:8c:77:bc:98:db:86:a6:02:cf:c9:af:6c:4a:5a:55:
29:09:51:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxcZjR9H/zHrVGvbllId9/HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MmIzMzk1NzQwYjI5ZWMxYmVhMjU4MDhiNjc2Y2U5YmEz
ZGQ4MGMwHhcNMjMxMjEyMDUwMDUwWhcNMjMxMjEzMDUwMDUwWjAzMTEwLwYDVQQD
EygzMDZmMzA3NDA4NjU1OTI4NjM2ZTY4ZDViZDAwNTI1ZjMwNmVlOWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1wQz3daK1NbqHGnTQTaBWa3JB2I
+I22+bDWD81MFI0giyfJuOTQj3b2NYaFljCjbG/Onbriq9+kYXzSj8UnOyni4GyH
dmAMedoibsrWBb9wEK4nA7Ly1IK2AG2icCkiFRdV3KJzwEcU0X0IqHgsg6tsQRxZ
uFgIpHfMITSG+EEcyq9gwv3kiQMpf1Dr7BUQCszWnyV1Kt2dYIcgWdRZyzfIIVCw
zN1iFWtlsmbqJglDnhhn4rFKaqF0sH+cHKIgPyLrJWd6Ngk1YdH79rcJNc/WQ3aZ
tXyUib0OS5g6kpj1WKTRUKWHGTOR6hTPbk1NXkqUqTuVW1CwkU6qSRVpPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBvMHQIZVkoY25o1b0AUl8wbunVMB8GA1UdIwQY
MBaAFDgrM5V0CynsG+olgItnbOm6PdgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0NzemxYUUxLZXdiNmlXQWkyZHM2Ym85MkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yYWJjNWUtZjE0Ni00MjBmLTkyMjUt
ZDkzMTkzMjkwZjBkLzEvT0NzemxYUUxLZXdiNmlXQWkyZHM2Ym85MkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yYWJjNWUtZjE0Ni00MjBmLTkyMjUtZDkzMTkzMjkwZjBk
LzEvT0NzemxYUUxLZXdiNmlXQWkyZHM2Ym85MkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQbewVAR
1J0+siWQb+i6wSn5xEWgKF4DmMzksynOi0w7pg70QcSgxrl99pDvqRazNCzg4Rlk
UjhI7itwyoqk7pkz4J5D9g57YjDstnwKxgHJ6cuVdFXOzeDriD/MyUBiQwt9M7A1
UU338ecmwaDXs3OAKVtNTRlZaFJ4QZ5r/88oJiLKKOZpfIXMM7rjPyx0Spww92Bn
8ER5J7lSSplPqvG/cP6rcwg/c3q3Ub12I6bZt9anwkJAqX9OrcEmW5ryvkZeKPhN
yF6f/YKiH7kQgjE+XHAKICw8HQUf1I5NznyG6x3Ml//V6Xr99dhHjHe8mNuGpgLP
ya9sSlpVKQlRLA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:24 2024 by rpki-client on console-ams.rpki-client.org