Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/OGLm3g4x6NKKk3wBK2AohayTXRU.mft
File: OGLm3g4x6NKKk3wBK2AohayTXRU.mft (raw, json)
Hash identifier: vLq+9/5GmgoyV9aN3iHpcbsHDiKbC/adsZoBzf37B7U=
Subject key identifier: F9:16:37:A3:B1:A8:99:E8:62:E7:38:C5:DA:16:93:09:06:D8:70:AF
Authority key identifier: 38:62:E6:DE:0E:31:E8:D2:8A:93:7C:01:2B:60:28:85:AC:93:5D:15
Certificate issuer: /CN=3862e6de0e31e8d28a937c012b602885ac935d15
Certificate serial: 018CEDAB22E399947D39A06A6CBB5DB3A0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGLm3g4x6NKKk3wBK2AohayTXRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/OGLm3g4x6NKKk3wBK2AohayTXRU.mft
Manifest number: 1020
Signing time: Tue 09 Jan 2024 10:01:04 +0000
Manifest this update: Tue 09 Jan 2024 10:01:04 +0000
Manifest next update: Wed 10 Jan 2024 10:01:04 +0000
Files and hashes: 1: 4g4zNWWgq6AMZvnZbT0nQ9XOy7g.roa (hash: xtBT0mc0u50La00WQhkr6RmBjJhKDDcOlQHFNU7WDlQ=)
2: OGLm3g4x6NKKk3wBK2AohayTXRU.crl (hash: Yk8r9yOq18aZSXRGDYFH1venIauF1GegsX4j1TfsxO0=)
3: buih1zZWBw24ZSRK1jMwyBks2XM.roa (hash: vJzZxIwgv82ppIo40QbV7Ug4zEtukEr2Vul/nkqRjZA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:ab:22:e3:99:94:7d:39:a0:6a:6c:bb:5d:b3:a0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3862e6de0e31e8d28a937c012b602885ac935d15
Validity
Not Before: Jan 9 10:01:04 2024 GMT
Not After : Jan 10 10:01:04 2024 GMT
Subject: CN=f91637a3b1a899e862e738c5da16930906d870af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:41:17:77:d4:3f:c1:f6:6d:1e:f6:b8:8c:dc:
1a:86:75:75:4f:ed:6b:bb:e5:51:16:53:19:66:c9:
9f:fe:25:c5:2f:f6:4e:15:ef:f8:72:20:b1:88:23:
c9:68:a9:19:61:a9:4f:75:68:61:88:50:f8:7a:49:
a6:08:cf:35:85:92:b0:85:a8:75:1c:e1:3e:c7:e2:
b5:62:35:fb:30:4d:46:85:c1:a4:09:2d:11:ba:30:
b7:e8:88:7d:e4:09:f9:16:75:8c:7a:ed:cb:d0:57:
65:01:7e:df:9d:44:0b:2a:d1:f9:4c:c7:7f:69:76:
d7:86:af:6a:00:85:83:df:17:5f:98:28:f7:50:8e:
2d:1f:59:71:05:52:73:36:38:20:42:3c:5c:71:8d:
fc:a6:70:e0:32:db:91:0f:14:98:57:27:8b:89:d8:
a6:e3:57:d9:fb:b9:10:08:4e:99:91:cf:ef:e2:7a:
71:e2:5c:e3:c3:15:8f:37:6b:cc:6c:66:16:3b:6e:
17:69:71:20:a8:f1:e2:80:61:ac:0d:e0:08:d4:33:
5d:1a:4b:94:9c:ed:49:04:fa:1f:a5:57:dc:20:6f:
68:51:bc:ac:14:74:5b:0d:76:fd:06:09:69:96:a9:
25:5b:7b:1a:35:2f:3c:f0:c6:51:62:e4:cb:05:89:
45:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:16:37:A3:B1:A8:99:E8:62:E7:38:C5:DA:16:93:09:06:D8:70:AF
X509v3 Authority Key Identifier:
keyid:38:62:E6:DE:0E:31:E8:D2:8A:93:7C:01:2B:60:28:85:AC:93:5D:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGLm3g4x6NKKk3wBK2AohayTXRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/OGLm3g4x6NKKk3wBK2AohayTXRU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/7557f0-990e-4bab-b152-ceff2994c667/1/OGLm3g4x6NKKk3wBK2AohayTXRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c5:8e:38:30:94:67:43:07:f3:f5:15:2f:a6:6e:3c:11:8a:
76:42:90:5b:31:02:93:59:f0:59:b9:ac:9d:76:b1:47:1f:74:
e6:23:44:fd:80:ce:0f:9d:d3:aa:5a:2b:d5:70:26:66:78:97:
bd:de:48:4a:cd:94:c8:3c:ff:7e:f6:84:6c:c3:05:00:47:a5:
fc:ce:65:77:43:8f:4f:e1:27:7c:a7:19:c2:26:14:ab:b4:c4:
74:3d:fc:7e:3e:73:19:e6:9e:2f:70:81:8d:df:40:8b:c1:64:
63:4a:bf:1d:49:77:1e:a2:ba:58:05:d4:b9:f6:31:24:9d:e5:
fe:f8:cd:ed:e5:c9:b8:3d:b7:87:62:27:8b:18:28:74:29:e1:
27:55:fc:11:49:d5:3c:3d:97:a0:51:40:94:35:b5:ed:fd:26:
b2:33:0e:3d:c2:a6:92:16:f7:98:f3:e5:b4:51:dd:c7:be:ab:
b4:69:99:15:06:e9:fd:d0:fa:98:62:b3:00:94:78:97:88:7a:
c9:4f:80:01:c5:34:c1:a3:c4:fd:8c:fa:11:c3:f3:41:7e:4d:
0a:8d:5d:bb:78:1b:72:8c:c2:fb:65:b9:6e:31:7f:ee:89:ae:
07:65:9a:22:5b:06:85:47:f9:e7:07:c7:aa:f0:bc:78:36:c8:
54:b9:e9:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:01 2024 by rpki-client on console.sobornost.net