Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/14cec6-41b6-49a3-8d1d-271038b7693f/1/oGJSYTyWafW6XRpZI05WhN4hoLw.mft
File: oGJSYTyWafW6XRpZI05WhN4hoLw.mft (raw, json)
Hash identifier: Yc0TB5tA4WmK2VjmaZ4nmc/yA8ctF+KfiGWy7g94PH8=
Subject key identifier: 96:63:CF:E3:5C:03:E3:8C:C6:8F:44:B7:78:30:0C:5C:C3:7D:08:44
Authority key identifier: A0:62:52:61:3C:96:69:F5:BA:5D:1A:59:23:4E:56:84:DE:21:A0:BC
Certificate issuer: /CN=a06252613c9669f5ba5d1a59234e5684de21a0bc
Certificate serial: 018BB83F9DA977A661F70344957B0FFE8CD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGJSYTyWafW6XRpZI05WhN4hoLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/14cec6-41b6-49a3-8d1d-271038b7693f/1/oGJSYTyWafW6XRpZI05WhN4hoLw.mft
Manifest number: 087E
Signing time: Fri 10 Nov 2023 08:00:58 +0000
Manifest this update: Fri 10 Nov 2023 08:00:58 +0000
Manifest next update: Sat 11 Nov 2023 08:00:58 +0000
Files and hashes: 1: 8vAbQZnz_l5_3G8cQc0LvsgpGnU.roa (hash: tJqCv/imju9XFTRZQL2fELPuh56u87wZv4sqMflqqzM=)
2: oGJSYTyWafW6XRpZI05WhN4hoLw.crl (hash: QTj2U5miI3qtnafN1h2JAnsPdn6HMTjKftf99NW9cHE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:3f:9d:a9:77:a6:61:f7:03:44:95:7b:0f:fe:8c:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a06252613c9669f5ba5d1a59234e5684de21a0bc
Validity
Not Before: Nov 10 08:00:58 2023 GMT
Not After : Nov 11 08:00:58 2023 GMT
Subject: CN=9663cfe35c03e38cc68f44b778300c5cc37d0844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ae:04:4c:39:ef:94:a0:a3:f2:01:a2:54:6e:
73:1c:d2:c9:c7:60:85:9c:18:30:30:54:74:c3:98:
1f:d9:05:64:df:87:17:39:3b:99:ed:ff:d8:c0:ab:
8d:57:9c:c2:99:38:08:5f:18:30:af:c2:17:a3:f5:
b5:ce:32:b7:00:4a:fd:b5:de:12:04:db:42:e2:44:
7c:f3:a8:e4:e8:8e:1b:e0:93:97:27:88:75:c3:05:
96:68:56:9b:59:f2:ed:82:65:dc:24:22:ce:70:f9:
4a:0f:5b:f2:a2:9e:bc:8f:57:c5:9c:e3:20:77:f5:
f2:54:a6:60:da:06:9b:02:e4:2d:69:28:bc:e6:17:
6b:9f:53:03:3c:63:4a:3d:22:ee:8a:23:bb:cd:ff:
17:c7:b6:4a:d7:00:40:8a:88:8e:0f:c1:07:6b:8c:
38:f9:04:e9:9c:f5:60:2b:47:5e:af:09:87:c8:97:
b2:03:99:e7:29:41:1f:c6:bb:99:56:b2:91:c2:2d:
e8:d3:e9:c5:6c:fc:67:dd:1d:77:af:a3:5a:76:3e:
0a:e9:91:f2:cf:11:a1:4a:da:ea:13:ff:ef:5a:56:
76:e6:80:57:95:41:28:21:d0:17:30:1b:e2:a0:f2:
9d:e6:95:57:68:14:ee:60:57:d7:82:99:58:7f:b4:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:63:CF:E3:5C:03:E3:8C:C6:8F:44:B7:78:30:0C:5C:C3:7D:08:44
X509v3 Authority Key Identifier:
keyid:A0:62:52:61:3C:96:69:F5:BA:5D:1A:59:23:4E:56:84:DE:21:A0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGJSYTyWafW6XRpZI05WhN4hoLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/14cec6-41b6-49a3-8d1d-271038b7693f/1/oGJSYTyWafW6XRpZI05WhN4hoLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/14cec6-41b6-49a3-8d1d-271038b7693f/1/oGJSYTyWafW6XRpZI05WhN4hoLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:59:49:7e:54:ee:cd:ff:ae:9e:da:20:76:b3:45:5f:90:dc:
81:42:74:d8:9b:42:f3:1d:9c:39:cc:7f:3b:cb:1b:87:ee:f9:
75:0a:16:09:f2:95:7f:02:54:93:84:de:f3:71:19:74:52:06:
36:c8:1b:80:6d:01:bc:ad:57:53:7b:0c:39:3e:8e:bb:5c:94:
2f:86:8a:ec:2c:65:7a:7e:78:d0:de:31:8f:71:c0:83:41:11:
cf:38:db:43:dc:24:72:09:cc:7b:c7:2b:f1:32:3f:50:a2:ac:
5f:50:6f:0b:b3:32:7b:74:0c:07:c4:eb:ec:3d:83:a2:cb:aa:
8a:d9:91:e2:bd:d4:56:ec:72:f6:b3:37:6b:23:11:59:d8:7a:
30:18:0d:6b:8b:39:39:13:c6:d7:80:27:a3:52:ea:07:0c:91:
b5:fc:d3:dd:16:cd:00:dc:14:4c:34:e1:0c:a4:99:0b:a6:01:
66:9a:7c:47:63:ea:17:55:57:78:a8:ff:fb:ad:76:5d:3b:aa:
c1:b4:b3:23:8f:d4:8a:a1:e3:f4:86:0f:5f:7c:aa:cc:f8:ab:
ce:8a:93:a6:91:6e:86:cc:59:6e:00:45:00:2f:65:01:cd:ca:
bd:7d:c8:d6:1d:8f:4e:d5:ef:0b:11:74:29:65:e1:26:7f:c9:
31:97:bb:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:06 2025 by rpki-client