Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/okUQJcYzmmEXEe_8LPg-PXnybug.mft
File: okUQJcYzmmEXEe_8LPg-PXnybug.mft (raw, json)
Hash identifier: XxhkmnmmB/0RyKDsoYfaLjkiCS4G0f7+3iF4eRzZGiQ=
Subject key identifier: 2F:4F:17:3B:D8:52:06:11:F1:24:62:DA:22:31:38:03:3E:EF:F3:B1
Authority key identifier: A2:45:10:25:C6:33:9A:61:17:11:EF:FC:2C:F8:3E:3D:79:F2:6E:E8
Certificate issuer: /CN=a2451025c6339a611711effc2cf83e3d79f26ee8
Certificate serial: 01948F6384A6B8783A5940C5D68D80B3D17D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okUQJcYzmmEXEe_8LPg-PXnybug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/okUQJcYzmmEXEe_8LPg-PXnybug.mft
Manifest number: 77
Signing time: Wed 22 Jan 2025 19:00:51 +0000
Manifest this update: Wed 22 Jan 2025 19:00:51 +0000
Manifest next update: Thu 23 Jan 2025 19:00:51 +0000
Files and hashes: 1: okUQJcYzmmEXEe_8LPg-PXnybug.crl (hash: ZCnLvYC6OczFUwNpp8y3rRA9p2kUzXF/I2tU+rvSmvE=)
2: plCCiJv7EwuYY3WvPYFXgu2S4y4.roa (hash: 90RDlYth3mMRrS/YOLuJ1e0IS2bMcBg9b0jfa1Xa54o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8f:63:84:a6:b8:78:3a:59:40:c5:d6:8d:80:b3:d1:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2451025c6339a611711effc2cf83e3d79f26ee8
Validity
Not Before: Jan 22 19:00:51 2025 GMT
Not After : Jan 23 19:00:51 2025 GMT
Subject: CN=2f4f173bd8520611f12462da223138033eeff3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:cd:9a:b6:cb:50:15:f8:0b:0b:75:f8:2e:
7c:5a:fc:ab:cd:10:14:83:e4:fc:19:5f:cd:9f:9b:
f1:a2:69:e8:c0:86:74:3f:f4:a4:a9:99:03:cf:ec:
d1:5a:6e:71:52:b3:20:01:a1:66:5f:80:86:19:22:
b9:9b:1b:8f:ea:61:8b:9d:63:30:1a:ba:75:dc:b2:
94:de:c1:44:23:56:31:e0:4f:dc:e9:ce:51:d9:f7:
48:83:14:04:eb:f1:39:7d:74:95:ac:e4:8e:24:77:
f3:4e:65:82:2f:30:8e:da:83:0a:ab:a6:0d:a2:fa:
92:36:0f:e6:e0:a8:88:e5:58:62:65:8d:e6:e3:35:
a1:d5:c6:a8:7c:c4:1a:c3:e7:a1:a0:4a:c8:6e:ff:
82:77:7e:ff:23:31:3a:85:51:4c:53:80:f5:65:bc:
0c:d2:80:a0:3f:54:02:41:51:f0:c4:9f:fd:16:29:
7f:eb:af:ef:37:0d:16:cc:e1:0b:ae:0a:09:b7:08:
26:4d:10:0c:cd:e8:ea:f3:bc:78:dc:cf:c2:71:a0:
f8:97:32:56:c4:be:73:4d:88:54:71:b4:bc:e7:0b:
76:d2:7c:b1:bf:26:fc:3c:13:95:25:1d:18:dc:28:
69:53:d3:ee:5b:6a:36:51:7c:c0:bf:00:a9:cf:c8:
48:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4F:17:3B:D8:52:06:11:F1:24:62:DA:22:31:38:03:3E:EF:F3:B1
X509v3 Authority Key Identifier:
keyid:A2:45:10:25:C6:33:9A:61:17:11:EF:FC:2C:F8:3E:3D:79:F2:6E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okUQJcYzmmEXEe_8LPg-PXnybug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/okUQJcYzmmEXEe_8LPg-PXnybug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/okUQJcYzmmEXEe_8LPg-PXnybug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:29:bf:2f:9f:7c:73:65:dc:a3:cf:19:98:2c:7b:8b:24:74:
0e:fb:15:10:c7:bf:95:bb:14:bc:48:cc:a8:59:60:ce:2a:d0:
ac:f4:6e:a8:ab:bc:24:02:1b:fc:1b:95:f2:28:a8:51:8a:b4:
48:2d:f6:bb:ca:ae:e1:1d:91:d8:f4:8e:29:93:10:dd:7e:34:
8c:34:1d:d9:be:a4:b9:80:31:c1:ea:1b:f8:0b:c8:96:dd:f2:
c9:81:60:3d:2a:67:ac:fb:8b:3c:f7:ab:fb:49:2c:fa:7d:11:
04:f6:99:a9:3d:6b:70:1d:c6:27:f0:0e:20:c7:e1:0e:31:69:
15:a0:dc:9c:53:bd:a5:20:6d:04:04:bb:de:1f:d3:6d:f1:d4:
62:5e:43:96:78:37:4c:87:ad:95:7b:62:6f:32:e7:91:f0:f1:
ad:de:99:59:c5:8f:52:a5:c1:a2:26:24:62:90:f8:03:53:58:
9c:23:85:40:ab:e1:b6:10:20:ba:69:83:6c:01:39:32:1d:9e:
5e:28:53:a0:8c:a4:27:67:5c:79:66:ea:c4:5f:dc:d0:7c:2c:
a2:8e:e5:6f:b3:c9:17:f8:6e:fa:b3:02:0c:3e:64:75:e7:3a:
d3:71:5d:90:c5:c5:b8:94:d5:5f:f2:0a:5e:36:50:8b:17:4a:
9b:30:d0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:13:59 2025 by rpki-client on console.sobornost.net