Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e2ee66-41a2-4f08-8ed9-0907ee1e3d52/1/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.mft
File: OCJ_r3UTYQM0MgrZs_lb4f8QmcU.mft (raw, json)
Hash identifier: WnkRsZSZ35fkqJbrDdpLTcJ+rg3dRFNvqMpwqgGq7Go=
Subject key identifier: 39:17:CC:9F:AA:45:36:A5:9A:76:1E:BC:42:44:62:CD:88:85:B8:63
Authority key identifier: 38:22:7F:AF:75:13:61:03:34:32:0A:D9:B3:F9:5B:E1:FF:10:99:C5
Certificate issuer: /CN=38227faf7513610334320ad9b3f95be1ff1099c5
Certificate serial: 018CEE4F9CEDEACF0E75835F5F935BAE7BFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e2ee66-41a2-4f08-8ed9-0907ee1e3d52/1/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.mft
Manifest number: 0812
Signing time: Tue 09 Jan 2024 13:00:44 +0000
Manifest this update: Tue 09 Jan 2024 13:00:44 +0000
Manifest next update: Wed 10 Jan 2024 13:00:44 +0000
Files and hashes: 1: Ghk__EufXRXOQXGCalH34VVlERk.roa (hash: iJjF7gPcMbffRIyjzhGCltxjk1WVsWRpP/wJXIhQulY=)
2: OCJ_r3UTYQM0MgrZs_lb4f8QmcU.crl (hash: lPClp4d8MyZqY0lhEZbNZHPLa49FWmeiMcSC7ID4v4c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:4f:9c:ed:ea:cf:0e:75:83:5f:5f:93:5b:ae:7b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38227faf7513610334320ad9b3f95be1ff1099c5
Validity
Not Before: Jan 9 13:00:44 2024 GMT
Not After : Jan 10 13:00:44 2024 GMT
Subject: CN=3917cc9faa4536a59a761ebc424462cd8885b863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:6d:82:ea:c7:07:5f:66:a3:9e:a3:6d:d0:
18:c6:e9:05:eb:18:ae:23:84:8e:fc:3e:0e:5f:5a:
d7:75:ba:44:58:eb:cb:e2:8f:7d:5a:a7:41:d3:1b:
55:0d:34:6c:96:b8:26:7f:f2:f8:2e:fe:65:4e:9c:
1c:a4:ba:58:11:13:b0:27:8d:7a:05:eb:2b:c1:0e:
fb:14:62:5b:fd:d3:6a:31:1a:10:00:5b:fc:3c:f4:
e8:ed:50:5a:27:94:1d:5a:d7:94:47:7c:61:09:53:
98:73:ee:d6:24:62:81:92:dd:8a:43:06:cc:7e:8e:
ee:5f:7b:a9:cd:d9:51:7b:c0:74:e3:ce:2d:15:6b:
19:f3:0b:0a:ca:0f:b6:20:6b:37:5c:53:ea:4e:7e:
45:4e:6a:c7:3a:7c:a7:96:ae:0b:aa:71:fc:a4:5d:
8d:03:39:72:bc:07:7b:67:65:17:c7:b5:01:91:ac:
60:6c:c0:3e:16:43:1d:95:c6:1e:c2:b8:1a:a9:41:
00:ef:9f:d1:1e:dd:bb:43:24:d6:db:9b:32:12:24:
8e:b0:2c:0f:6e:3c:2b:80:98:99:0b:7c:b5:0d:77:
b7:77:2c:06:60:4d:57:94:08:7c:c2:93:b9:32:7e:
57:a4:54:79:03:9b:db:df:57:b0:d2:13:8d:4c:76:
71:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:17:CC:9F:AA:45:36:A5:9A:76:1E:BC:42:44:62:CD:88:85:B8:63
X509v3 Authority Key Identifier:
keyid:38:22:7F:AF:75:13:61:03:34:32:0A:D9:B3:F9:5B:E1:FF:10:99:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e2ee66-41a2-4f08-8ed9-0907ee1e3d52/1/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e2ee66-41a2-4f08-8ed9-0907ee1e3d52/1/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:0a:3d:35:e0:f7:32:38:e3:24:96:5d:d7:02:e6:ca:e2:02:
d8:d1:1e:e4:d1:c6:0a:44:c6:04:4f:7b:31:7f:71:57:c5:1b:
f5:35:25:8f:5d:6f:8d:6e:04:ea:2e:cf:52:c9:28:f5:c7:41:
60:ad:4c:ff:31:7c:f3:7b:c7:7c:ee:b6:99:fa:ec:38:9f:0c:
06:72:d1:15:a4:a1:4c:2c:33:c1:49:bd:0a:b1:bb:38:9e:a6:
f7:02:b3:68:dc:cf:98:48:e7:07:a2:f7:59:36:8e:15:8e:61:
db:9a:6d:71:34:ac:05:b6:bb:27:53:88:b2:31:cd:92:0f:e0:
77:b7:58:8d:19:e3:9d:ac:27:e8:2f:2d:65:a1:df:ad:23:e4:
a6:68:22:e6:97:4b:54:7d:30:e6:fe:07:d0:af:b6:e0:c2:08:
2e:01:16:0c:a5:36:19:4c:91:a7:bb:b0:a2:92:cd:b2:bf:1d:
08:bf:d2:cf:a6:99:f0:6d:81:fd:81:d7:e5:58:22:ac:ec:de:
be:14:a8:d5:fc:49:fb:a1:19:af:b0:cf:1c:dd:d5:35:68:05:
e9:9b:d6:53:cc:9d:03:3d:e5:6d:88:c9:12:6c:2f:bb:8a:a2:
a9:a7:74:66:ba:68:73:06:41:63:10:ca:ac:89:f6:7d:be:af:
c7:9b:78:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:00:55 2024 by rpki-client on console.sobornost.net