Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/abc2fc-ef03-4c6c-9248-afeba36a4fd1/1/ocqsBoKykRI6WfVd9q-uJe-CQ_k.mft
File: ocqsBoKykRI6WfVd9q-uJe-CQ_k.mft (raw, json)
Hash identifier: Dfzk6XVN578EBUVBsgnGVNmdmxQ5U/msyxiTHnlETz8=
Subject key identifier: 90:98:4E:D5:AA:F4:BD:E3:5B:D0:B8:5E:B9:CE:AA:D0:8E:AA:84:7C
Authority key identifier: A1:CA:AC:06:82:B2:91:12:3A:59:F5:5D:F6:AF:AE:25:EF:82:43:F9
Certificate issuer: /CN=a1caac0682b291123a59f55df6afae25ef8243f9
Certificate serial: 0189FCAE726747797E3DDC606B535F98CAA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocqsBoKykRI6WfVd9q-uJe-CQ_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/abc2fc-ef03-4c6c-9248-afeba36a4fd1/1/ocqsBoKykRI6WfVd9q-uJe-CQ_k.mft
Manifest number: 05B5
Signing time: Wed 16 Aug 2023 04:50:37 +0000
Manifest this update: Wed 16 Aug 2023 04:50:37 +0000
Manifest next update: Thu 17 Aug 2023 04:50:37 +0000
Files and hashes: 1: ZPDlx1UN2ncL26noLNMguRIoJhg.roa (hash: 02udW6SgodWTOOBx3LvuHQGAwzh3nX2SD6EgG2gpu1o=)
2: ocqsBoKykRI6WfVd9q-uJe-CQ_k.crl (hash: jYcSBl6MwStRTFWpD6W8hMUBe/TvD5sQLP+1ehZRMJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fc:ae:72:67:47:79:7e:3d:dc:60:6b:53:5f:98:ca:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1caac0682b291123a59f55df6afae25ef8243f9
Validity
Not Before: Aug 16 04:50:37 2023 GMT
Not After : Aug 17 04:50:37 2023 GMT
Subject: CN=90984ed5aaf4bde35bd0b85eb9ceaad08eaa847c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bb:15:1d:7f:dc:55:1a:75:54:28:f9:73:bd:
84:07:98:9e:4b:a0:79:fa:bf:14:88:90:4f:9f:aa:
9e:e9:71:1a:5b:6f:a3:c9:90:46:5b:42:ae:4e:87:
92:dd:4a:e1:fb:74:97:70:1d:9c:4c:57:71:3b:06:
d6:6a:36:bd:84:59:38:db:ae:54:01:e5:ca:a7:a6:
06:71:62:ca:f1:0f:62:d0:b3:f8:c6:1e:da:d4:7b:
5c:07:78:0b:4c:ee:ca:36:38:de:6e:79:5b:de:b6:
9a:71:b2:80:95:32:d4:7a:0e:a7:ff:32:00:e0:6e:
da:67:9e:4e:55:69:22:3b:ed:36:14:8e:33:1d:6e:
0b:ca:8f:13:3b:b5:10:3a:12:ab:1f:d0:2d:ad:ff:
28:0b:ef:e3:2e:a0:80:57:8a:1f:c3:e0:2f:61:fb:
a3:6e:dc:a6:af:48:28:e0:44:b8:04:39:bf:88:ce:
cc:fe:51:95:2a:15:67:4f:c5:9f:1c:51:e5:b4:a5:
28:2b:3f:86:a5:ad:e2:af:ba:4b:91:f2:bf:ba:e6:
43:81:51:33:17:e3:3a:21:86:1d:6a:50:54:82:3d:
fc:99:8e:e2:7c:29:d6:a7:9a:52:a5:78:c8:4f:fb:
c0:61:6c:0e:98:cc:92:91:07:5d:0e:54:7d:00:ea:
31:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:98:4E:D5:AA:F4:BD:E3:5B:D0:B8:5E:B9:CE:AA:D0:8E:AA:84:7C
X509v3 Authority Key Identifier:
keyid:A1:CA:AC:06:82:B2:91:12:3A:59:F5:5D:F6:AF:AE:25:EF:82:43:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocqsBoKykRI6WfVd9q-uJe-CQ_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/abc2fc-ef03-4c6c-9248-afeba36a4fd1/1/ocqsBoKykRI6WfVd9q-uJe-CQ_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/abc2fc-ef03-4c6c-9248-afeba36a4fd1/1/ocqsBoKykRI6WfVd9q-uJe-CQ_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:75:0d:c1:c5:70:99:ec:4f:1a:5e:b6:31:d7:16:6e:1b:76:
3d:95:4c:64:b9:85:d9:ff:d6:68:d4:91:47:8b:95:ab:c9:2d:
ba:f5:fa:53:d0:e6:cc:0c:fe:e6:e8:d2:f8:9b:9d:df:bd:72:
25:58:e5:0e:59:16:8e:d7:4c:12:05:c2:38:f1:ef:fd:db:56:
1e:d9:dd:b5:5f:32:13:fc:1a:06:88:c1:f2:f9:04:d3:03:cd:
bb:4d:23:97:11:7d:c3:6f:2a:b6:a7:6c:a6:e3:c3:6e:f1:78:
1c:af:bb:9c:e6:e6:4c:8e:54:0d:e0:99:39:e0:15:4f:3e:9e:
4a:9a:b5:0e:83:7b:2d:c3:49:21:6e:ad:d8:27:37:db:8e:07:
a6:1a:c4:64:ba:68:09:a9:ff:ea:61:01:ec:a6:a0:42:92:09:
b1:3f:06:39:59:72:df:ee:f7:3f:64:2a:a1:d4:8f:c5:b3:fd:
1c:e0:4e:d3:1d:24:ee:d1:b8:8f:87:c7:32:be:77:4d:81:2c:
40:8b:09:2e:1e:2c:f8:de:27:af:15:6b:97:25:b2:83:c4:97:
9b:4f:2b:ef:62:26:eb:77:64:15:4b:41:92:14:de:8b:e1:c5:
9c:94:73:55:5f:03:85:18:1e:9a:4a:71:7b:61:9b:da:56:63:
82:f2:4e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:12 2024 by rpki-client on console-fra.rpki-client.org