Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
File: oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft (raw, json)
Hash identifier: HPn9QgwR0AP4ir/tMGczaDhtN7csWpgP0yB35cU4cm4=
Subject key identifier: 83:06:1C:4C:FF:AB:B4:C6:C8:20:63:CE:71:E0:EE:23:34:1E:6B:54
Authority key identifier: A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
Certificate issuer: /CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Certificate serial: 0194BD4E74117B5357D7115D178B77EA18A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl (hash: KjT+yuJncXS6tFxe7ZnCUjtZQXYgzbuIIbEjEkquDSk=)
2: yDa2dQgeJJIFzKakaTK1-AlXD1I.roa (hash: mJdwofIlP4KR52j+bqtWhT0oD7xOVgPS7SMsHC+21ug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:74:11:7b:53:57:d7:11:5d:17:8b:77:ea:18:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a21eb407f76cfa5c7da15218397b3c4317762ac0
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=83061c4cffabb4c6c82063ce71e0ee23341e6b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:40:ea:3b:44:15:67:64:70:df:a4:ee:2e:
50:e0:43:80:21:73:f6:7c:c7:fd:a9:0f:ca:cd:53:
f7:80:a1:49:d9:e7:cc:7e:9a:82:f2:94:82:68:a6:
37:4c:05:76:6b:ad:90:9c:0b:e3:06:cc:2d:18:8e:
87:c1:d1:ca:4f:d4:a3:25:9f:34:6f:aa:ca:9d:3f:
aa:87:11:76:64:1c:82:04:7d:04:40:60:8a:aa:f1:
be:58:57:a7:8d:d2:67:d7:0f:8d:f4:50:32:38:ca:
a4:49:b8:04:8b:52:2d:00:bf:4c:f9:27:ec:37:e3:
67:2e:bb:b2:40:7e:67:9c:cc:fa:af:79:45:eb:da:
8d:7a:b0:66:f5:76:76:e3:4f:3f:ce:4f:ec:fa:43:
df:74:ce:d2:d9:21:e1:ad:d1:e2:76:97:bc:92:3f:
c6:0a:e1:a4:62:f8:eb:db:f8:a6:00:81:72:5c:02:
3e:74:6f:c9:ca:22:d9:a9:c5:f0:32:81:62:27:cd:
9e:de:2e:f4:af:30:b7:6c:7a:01:fd:57:68:cf:d8:
e6:dd:7c:ce:92:67:cf:8f:a5:48:21:7b:60:96:b1:
8d:97:eb:64:aa:ca:30:7f:72:13:f4:81:79:f0:00:
fa:68:9c:3e:63:8d:24:c5:70:19:df:c1:d4:3c:d1:
a6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:06:1C:4C:FF:AB:B4:C6:C8:20:63:CE:71:E0:EE:23:34:1E:6B:54
X509v3 Authority Key Identifier:
keyid:A2:1E:B4:07:F7:6C:FA:5C:7D:A1:52:18:39:7B:3C:43:17:76:2A:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oh60B_ds-lx9oVIYOXs8Qxd2KsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/98b278-068a-468f-acd7-26cd3871f365/1/oh60B_ds-lx9oVIYOXs8Qxd2KsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:13:11:09:aa:b0:57:0f:12:a6:8c:2f:dd:13:17:50:dd:ab:
5b:0a:ec:6c:4f:51:19:e0:a3:fe:61:13:1a:83:31:b0:ee:f0:
e6:25:b0:8b:b6:cd:b1:e6:f0:41:4b:ff:a1:53:2d:1b:d0:d3:
5e:2b:b4:73:78:d5:0e:28:ba:a4:44:67:d7:f4:8f:46:e9:b6:
1f:de:ef:32:94:13:90:90:cc:e7:ab:e9:2e:98:cf:84:a2:ba:
e4:a0:a9:bf:70:d6:a7:37:13:22:95:1d:41:f0:3c:50:49:a8:
f0:16:6e:a3:97:32:b9:e3:ad:30:8b:65:d8:a1:27:a8:87:90:
a8:73:dc:b5:44:cc:e0:83:91:62:e5:1b:d2:ec:88:73:81:13:
b1:6c:77:46:87:20:63:dc:f8:62:9b:7e:9f:8f:c8:0f:1a:ba:
e5:38:8e:4a:b1:ae:55:91:9e:45:c6:83:51:88:de:fd:c1:f6:
3d:19:c6:fe:1b:40:90:62:42:af:a0:f9:50:0a:ca:f0:fd:c0:
b2:37:20:57:23:7b:28:1f:49:4b:a0:7a:31:0f:9c:db:08:8a:
c5:73:f0:9c:64:e3:a8:ad:e0:ec:18:2c:84:c0:ef:f4:01:db:
05:50:23:07:aa:72:69:11:1b:57:30:29:8b:10:b1:b1:a3:3b:
97:90:0b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:37 2025 by rpki-client