Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5eccff-b140-44e9-9d1b-da07bfe851fe/1/OTjBInZ3WM__L947EaF8lZF2hCs.mft
File: OTjBInZ3WM__L947EaF8lZF2hCs.mft (raw, json)
Hash identifier: t7a5ifw9e4xN26onCoclqwCabd6atXGEgDvVp+lE1U0=
Subject key identifier: 96:6E:25:37:21:8A:9F:78:BE:05:9C:96:37:6F:F8:1A:2D:44:EF:33
Authority key identifier: 39:38:C1:22:76:77:58:CF:FF:2F:DE:3B:11:A1:7C:95:91:76:84:2B
Certificate issuer: /CN=3938c122767758cfff2fde3b11a17c959176842b
Certificate serial: 018C6CEBB70EFE52193FFE62172D4A644AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTjBInZ3WM__L947EaF8lZF2hCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5eccff-b140-44e9-9d1b-da07bfe851fe/1/OTjBInZ3WM__L947EaF8lZF2hCs.mft
Manifest number: 0FDE
Signing time: Fri 15 Dec 2023 10:00:36 +0000
Manifest this update: Fri 15 Dec 2023 10:00:36 +0000
Manifest next update: Sat 16 Dec 2023 10:00:36 +0000
Files and hashes: 1: MI4d5HJsQ7Z0fU9D7RB8OJwAZyQ.roa (hash: MaJNAuYLIcVIDXeqY4L0pDhoN4RGSONls5somxhCxx0=)
2: OTjBInZ3WM__L947EaF8lZF2hCs.crl (hash: 660QwIy465WsOh7tIxhfyu+C8ahagDGPTiu5XVqFvNM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:eb:b7:0e:fe:52:19:3f:fe:62:17:2d:4a:64:4a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938c122767758cfff2fde3b11a17c959176842b
Validity
Not Before: Dec 15 10:00:36 2023 GMT
Not After : Dec 16 10:00:36 2023 GMT
Subject: CN=966e2537218a9f78be059c96376ff81a2d44ef33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c5:ca:66:87:5e:48:8c:f6:76:1d:b8:a5:09:
e6:f9:54:de:16:e4:94:c3:34:93:38:fa:28:a2:a4:
cb:bb:49:80:7d:0b:42:9a:9c:63:ad:1e:d2:fa:c3:
a8:76:5c:d5:39:8d:6a:e5:42:56:e9:f6:58:88:72:
2a:fb:47:ce:10:3a:dd:13:dc:8b:98:fe:cc:1b:fe:
c7:44:17:b0:eb:4d:97:de:02:aa:ff:33:3a:17:4a:
73:29:df:29:1b:a5:20:fb:8c:09:ae:31:32:dd:d1:
63:42:65:c6:40:cb:07:69:0b:b2:2f:29:46:64:c2:
dc:77:2f:6d:4d:75:0b:60:28:97:44:91:ca:0e:cb:
6c:74:cd:25:cf:48:ec:a6:ed:1f:c4:a8:3f:23:a7:
de:fa:a6:db:c3:f3:46:70:c8:7c:d6:f1:de:b4:56:
d8:cd:e6:7e:5f:6f:97:45:46:a7:36:24:ff:32:eb:
9a:83:95:94:4b:c8:ee:3e:ed:f3:ac:a3:f5:2d:2a:
a0:84:4a:d0:26:a1:7d:0b:6f:15:0b:ee:4f:5d:95:
20:a2:e1:af:a1:66:d6:94:43:30:eb:d8:a9:4c:7a:
43:ac:d4:67:34:c4:cb:a8:92:d5:59:35:9e:cb:52:
f0:20:00:b6:e4:f7:47:9b:b4:a3:2a:b2:bd:d4:56:
71:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6E:25:37:21:8A:9F:78:BE:05:9C:96:37:6F:F8:1A:2D:44:EF:33
X509v3 Authority Key Identifier:
keyid:39:38:C1:22:76:77:58:CF:FF:2F:DE:3B:11:A1:7C:95:91:76:84:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTjBInZ3WM__L947EaF8lZF2hCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5eccff-b140-44e9-9d1b-da07bfe851fe/1/OTjBInZ3WM__L947EaF8lZF2hCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5eccff-b140-44e9-9d1b-da07bfe851fe/1/OTjBInZ3WM__L947EaF8lZF2hCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:00:11:6a:0e:0c:b0:81:c6:d6:2a:c8:d4:cb:ad:5e:ec:51:
f1:1b:3b:27:13:bf:d2:5a:9b:c1:8a:43:15:43:1a:61:a4:c7:
59:9f:12:f2:79:74:4e:fb:ff:f8:e6:82:6e:cb:d2:91:c4:cb:
7d:6d:94:b2:8f:c9:c8:94:0f:b3:4a:ab:6f:dc:39:38:22:97:
15:c4:f6:45:56:f1:c1:1d:4c:10:6d:31:f2:a0:74:f0:8f:f4:
69:69:4e:dc:81:1b:cb:97:c4:25:83:a3:76:ca:16:2f:85:a7:
94:6c:90:17:60:c8:9e:65:88:56:e2:a2:57:3f:eb:59:33:6d:
33:9d:f0:32:11:6f:e3:1f:64:a0:11:fb:1b:17:dc:ed:e3:87:
99:72:62:93:e4:5e:e9:cb:43:80:ee:83:c1:7d:92:bd:b5:ae:
a6:42:03:86:df:7e:7c:60:2b:72:a5:ee:c5:aa:b8:db:14:53:
5c:f1:28:37:e9:06:36:3b:d1:f2:43:d0:b5:8d:96:ff:fa:2c:
11:76:91:d4:69:4d:ff:9d:6f:48:a7:ca:08:3d:fb:5d:0a:0f:
59:6c:4e:9e:09:8f:70:22:88:01:76:9a:63:04:96:3e:46:00:
41:d3:82:75:2b:07:44:67:64:9b:7c:af:d2:05:a5:08:d1:11:
4c:36:72:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:34 2025 by rpki-client