Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/15319c-2b61-4075-af83-2123df050cf2/1/oNYCAPTSXAwb19d9ZnJ1Vu9dqfQ.mft
File: oNYCAPTSXAwb19d9ZnJ1Vu9dqfQ.mft (raw, json)
Hash identifier: LpLehCkwI4cep8+J2apnLtwleykpuNQExOAsVBsxKCw=
Subject key identifier: FE:A2:DB:99:20:66:6B:EA:0E:69:BE:67:2A:78:58:5D:0C:6F:8C:C0
Authority key identifier: A0:D6:02:00:F4:D2:5C:0C:1B:D7:D7:7D:66:72:75:56:EF:5D:A9:F4
Certificate issuer: /CN=a0d60200f4d25c0c1bd7d77d66727556ef5da9f4
Certificate serial: 018C6720A791815A67B9700AAA3A6299C084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oNYCAPTSXAwb19d9ZnJ1Vu9dqfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/15319c-2b61-4075-af83-2123df050cf2/1/oNYCAPTSXAwb19d9ZnJ1Vu9dqfQ.mft
Manifest number: 091A
Signing time: Thu 14 Dec 2023 07:00:42 +0000
Manifest this update: Thu 14 Dec 2023 07:00:42 +0000
Manifest next update: Fri 15 Dec 2023 07:00:42 +0000
Files and hashes: 1: oNYCAPTSXAwb19d9ZnJ1Vu9dqfQ.crl (hash: 0jiVTIQtxj7xpvXPT5uYunnI/SA19OEx00sruk0HvyY=)
2: yxVB6AnpltjBrPYnKYDmvCExB38.roa (hash: ZTcqGdRmA0igb1D+40nh9J7+ROYxF8OGz3XSyYsQCr4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:67:20:a7:91:81:5a:67:b9:70:0a:aa:3a:62:99:c0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0d60200f4d25c0c1bd7d77d66727556ef5da9f4
Validity
Not Before: Dec 14 07:00:42 2023 GMT
Not After : Dec 15 07:00:42 2023 GMT
Subject: CN=fea2db9920666bea0e69be672a78585d0c6f8cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:84:0c:ac:fe:67:25:92:74:59:0d:bb:ca:
25:0b:f7:d8:8f:bc:ab:e8:74:bf:38:4d:fc:8c:ad:
10:95:8a:a3:93:a5:6d:1c:15:ac:50:74:74:ec:1f:
e7:67:be:6c:e6:75:d6:3c:30:45:02:bf:3e:fd:7a:
d2:94:04:1f:bd:1d:95:33:18:3d:8c:f2:21:5d:87:
00:72:5c:99:46:5a:25:39:f1:6a:f4:6b:82:86:b3:
38:e5:6c:34:09:57:12:fd:19:32:cb:32:54:24:a5:
9c:c8:6a:47:60:c9:65:dc:2c:fa:a8:e3:cb:d4:cd:
66:b4:85:c0:72:7a:76:64:58:fe:9f:59:ee:2c:33:
a9:22:20:fb:e0:b2:a7:30:64:b9:b1:88:47:73:22:
f3:ea:26:06:7f:4c:70:75:8a:60:63:11:bc:6f:4b:
0b:43:68:73:bd:64:84:ac:bf:61:86:1f:c2:d1:8d:
78:12:56:e1:34:58:0b:ce:0a:1d:d3:ed:7c:5e:8d:
85:9e:83:ea:87:f5:27:2b:8f:23:c7:b4:83:21:a2:
84:32:e6:ec:cd:28:fd:92:ff:b3:36:6a:70:7e:60:
b7:98:cb:a7:5f:c5:51:f4:df:df:5f:9d:6d:62:dd:
54:8a:48:68:87:13:ee:ed:87:af:5d:7b:10:72:3e:
fd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A2:DB:99:20:66:6B:EA:0E:69:BE:67:2A:78:58:5D:0C:6F:8C:C0
X509v3 Authority Key Identifier:
keyid:A0:D6:02:00:F4:D2:5C:0C:1B:D7:D7:7D:66:72:75:56:EF:5D:A9:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oNYCAPTSXAwb19d9ZnJ1Vu9dqfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/15319c-2b61-4075-af83-2123df050cf2/1/oNYCAPTSXAwb19d9ZnJ1Vu9dqfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/15319c-2b61-4075-af83-2123df050cf2/1/oNYCAPTSXAwb19d9ZnJ1Vu9dqfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7a:77:df:2d:1a:ec:5d:aa:3a:e8:dc:22:af:a5:39:c8:1f:
d0:33:b7:68:08:f2:ea:32:4a:4d:20:cc:9f:ae:95:d7:ea:36:
78:e4:f4:96:aa:2c:45:04:b4:37:5a:48:60:c1:04:dc:f9:57:
a9:38:72:3f:f4:7c:5d:b1:18:9c:eb:d7:de:fb:75:a5:a1:b9:
5e:b3:39:01:b6:7b:eb:7e:98:3f:84:c9:ce:f4:91:96:35:93:
50:24:db:d8:52:d2:32:86:9a:6e:80:82:58:ea:24:ea:5c:27:
4e:ae:c7:46:a9:2f:52:12:ea:9f:17:9a:22:7a:d5:74:c9:5e:
a9:6a:55:6f:56:fc:79:ee:ba:21:49:3b:70:5f:79:b0:14:95:
ff:2d:ab:ec:98:cb:e4:70:5a:8a:75:2f:eb:fb:e7:bf:0f:f1:
93:ea:b6:d2:ee:40:5d:ee:6d:84:65:ed:6f:5b:26:c8:ec:5f:
63:e7:d4:48:cd:cf:a7:52:ea:94:df:91:37:d5:84:13:22:05:
38:4f:63:3d:4f:2f:0f:7a:52:65:24:d2:0b:59:43:36:42:16:
2b:41:84:99:b4:8d:8b:49:7a:c7:9d:d5:e2:1a:5d:db:fe:65:
80:a7:d5:2f:55:c9:a8:6c:39:c7:c4:fe:e4:da:2d:6f:38:1b:
ec:7f:ec:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:34 2024 by rpki-client on console-fra.rpki-client.org