Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2fad84-e8c9-4f13-b6c1-4e6f26dd3ddb/1/OEkzYd9_OKtVdNuCIKbE_lz-a0A.mft
File: OEkzYd9_OKtVdNuCIKbE_lz-a0A.mft (raw, json)
Hash identifier: X5v50RWJeUi/OStD7SBHvDrkbokiuWzbiKoLc8lfhI4=
Subject key identifier: 92:22:EF:08:F9:DC:0A:CC:C4:65:3F:D3:09:FA:89:F5:40:61:84:A0
Authority key identifier: 38:49:33:61:DF:7F:38:AB:55:74:DB:82:20:A6:C4:FE:5C:FE:6B:40
Certificate issuer: /CN=38493361df7f38ab5574db8220a6c4fe5cfe6b40
Certificate serial: 01917016ECC5DBDDBD052B4826FEAC54AA62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEkzYd9_OKtVdNuCIKbE_lz-a0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2fad84-e8c9-4f13-b6c1-4e6f26dd3ddb/1/OEkzYd9_OKtVdNuCIKbE_lz-a0A.mft
Manifest number: 01BA
Signing time: Tue 20 Aug 2024 14:00:35 +0000
Manifest this update: Tue 20 Aug 2024 14:00:35 +0000
Manifest next update: Wed 21 Aug 2024 14:00:35 +0000
Files and hashes: 1: OEkzYd9_OKtVdNuCIKbE_lz-a0A.crl (hash: lMOEvilv/XKkrKScry2U/vhQY9RpfWCGZYBcDik6xKQ=)
2: vGRL3OWhaHljAP5xsmgK5sjCLGc.roa (hash: LoIbpfsK0A0uSUzIaFc4GIV7Mz1GCf9ayNoavk0uae0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:70:16:ec:c5:db:dd:bd:05:2b:48:26:fe:ac:54:aa:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38493361df7f38ab5574db8220a6c4fe5cfe6b40
Validity
Not Before: Aug 20 14:00:35 2024 GMT
Not After : Aug 21 14:00:35 2024 GMT
Subject: CN=9222ef08f9dc0accc4653fd309fa89f5406184a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:15:f4:d7:09:90:5f:ce:bf:5b:e4:93:76:4f:
a2:db:b1:05:2e:02:f9:aa:4e:fd:3b:90:1e:8a:ae:
d7:2e:5f:fb:97:2f:26:64:ad:b0:5c:b4:00:4d:fe:
d0:ed:90:f3:f8:b0:1b:bf:d1:fb:e8:35:da:1a:9b:
d6:96:b9:fc:8e:18:7a:67:d6:70:34:bd:56:85:9b:
fc:e6:08:78:3d:65:73:88:01:77:d7:46:37:47:64:
2d:f6:d2:f7:69:50:f4:a4:06:01:8d:bb:1d:2a:37:
9d:a9:6e:65:bf:bb:5c:3c:f4:85:55:0d:20:ea:f2:
4b:71:6c:18:c9:af:38:d5:fc:b6:45:9e:10:86:a1:
39:10:1f:6a:6a:69:05:4a:90:37:fe:4c:f1:12:65:
53:27:e0:c2:d8:cc:8b:e0:c8:fc:89:b0:99:22:14:
ba:18:fb:c8:86:14:e4:c0:5c:45:b0:fa:2c:72:02:
39:dc:f2:42:9e:15:0d:92:ab:74:51:c9:92:37:07:
d8:b1:63:c7:97:7f:4b:47:0e:24:4b:c2:f9:c0:f2:
2d:a0:c2:36:84:22:11:3f:c4:2b:03:dd:f6:5c:ac:
48:e7:74:b4:f1:fb:c5:c4:dd:67:9d:03:07:f9:e6:
4d:e0:d2:e7:0b:c6:a6:df:e2:1c:6d:67:3d:a1:db:
90:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:22:EF:08:F9:DC:0A:CC:C4:65:3F:D3:09:FA:89:F5:40:61:84:A0
X509v3 Authority Key Identifier:
keyid:38:49:33:61:DF:7F:38:AB:55:74:DB:82:20:A6:C4:FE:5C:FE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEkzYd9_OKtVdNuCIKbE_lz-a0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2fad84-e8c9-4f13-b6c1-4e6f26dd3ddb/1/OEkzYd9_OKtVdNuCIKbE_lz-a0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2fad84-e8c9-4f13-b6c1-4e6f26dd3ddb/1/OEkzYd9_OKtVdNuCIKbE_lz-a0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f4:a7:c1:46:de:58:8c:b2:b4:b9:06:62:4d:35:0f:90:85:
85:0d:15:50:b2:fa:10:e0:f8:f2:70:51:b9:64:de:3c:a1:4c:
c2:b7:af:bb:8d:f9:a1:78:0b:55:5b:16:71:94:e0:79:5f:bc:
83:e0:56:3e:f8:d5:21:4e:cc:4c:a1:e0:ae:d8:48:c2:97:d5:
85:f8:9f:41:6f:cb:30:d3:60:93:4a:20:74:a1:76:1b:cf:dc:
ca:8c:44:0a:a0:35:da:ff:d4:63:a2:9d:a4:ab:d9:64:15:7e:
73:d4:41:56:1b:87:3e:39:f1:2a:99:4e:c9:41:32:fd:4e:ac:
ce:43:60:0d:db:3a:cb:35:a2:bb:dd:99:a2:3d:46:ab:43:36:
6f:57:a2:d5:19:8d:94:14:c5:77:4c:16:16:05:c4:27:2b:a4:
65:71:48:fe:c5:5c:db:92:13:ef:4f:06:50:de:21:2e:c3:df:
f4:1b:1c:ea:0a:04:87:a5:d0:b7:81:f8:c5:f8:a0:bc:e1:47:
1c:35:89:82:3b:62:30:9d:3d:ce:45:c0:84:61:9d:36:cd:6a:
7c:73:46:b3:b2:54:5d:69:cb:c4:ad:1d:88:fd:eb:40:73:dd:
a5:3b:b9:12:82:4c:b2:b3:f5:89:a2:04:ad:84:3f:77:65:f0:
6a:1b:9d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 19:04:54 2024 by rpki-client on console.sobornost.net