Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
File: OCZCPrAZVSJObBHRnG05OB6L4h0.mft (raw, json)
Hash identifier: UVYPvAesL35FGGhaYyEskBKD6LyfThv0VjbZi2vidtI=
Subject key identifier: D8:9C:AC:1F:3A:89:25:7B:62:A4:FD:6F:82:46:D8:51:37:78:21:92
Authority key identifier: 38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
Certificate issuer: /CN=3826423eb01955224e6c11d19c6d39381e8be21d
Certificate serial: 0194BCA9C21C35C85FF53F538E887E24EA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
Manifest number: 085F
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: OCZCPrAZVSJObBHRnG05OB6L4h0.crl (hash: 2Ce/KGLGI/CnOXwYERKgjQaX86q8AoFA/yINPdDNu7k=)
2: uEaPXwIvt3nd0ncZqWTmGRgN2Co.roa (hash: V/FrvYjkhAUQhpjTMGaHfRf+RO486rwY6D+JJKx9Z6U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c2:1c:35:c8:5f:f5:3f:53:8e:88:7e:24:ea:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3826423eb01955224e6c11d19c6d39381e8be21d
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=d89cac1f3a89257b62a4fd6f8246d85137782192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:6c:af:b3:15:7b:32:3f:d0:0a:e0:5c:e6:
7c:5f:5a:5d:8e:bf:c0:80:a0:89:61:5d:4e:2b:15:
56:7f:c3:b1:dc:bd:bc:22:48:4d:a9:aa:68:ae:e5:
af:dc:60:55:ae:17:96:49:58:7f:91:86:e4:b1:27:
d1:56:a1:b7:66:a4:5c:04:e7:b3:80:ba:bd:04:b5:
3a:a0:aa:9f:33:0e:ea:09:99:df:1c:ef:c8:36:8a:
7e:70:8a:8d:bd:a3:a6:2a:11:2b:5c:fd:2a:5c:57:
bf:6a:f4:63:a2:f2:8c:89:cc:91:40:34:38:a2:41:
72:a8:1f:fa:ca:99:43:67:bd:c7:8d:18:25:da:64:
d8:93:bf:94:bb:d7:14:1c:7f:95:ba:42:fb:05:c1:
cd:ec:a3:07:f1:18:b1:9a:7c:a1:bb:f7:9a:c8:fb:
fb:b3:51:6d:24:aa:22:bd:fb:40:1f:0e:98:3e:80:
59:fe:dc:ef:51:bd:7e:1b:74:5c:28:ac:e2:1e:34:
3c:2b:c5:87:d5:38:c0:bf:6c:78:1b:94:7e:66:cf:
3b:d2:73:eb:51:ae:e0:db:24:9d:10:7b:90:ee:97:
e6:27:b5:47:3e:6b:ca:ec:bb:a2:9c:aa:c9:55:c1:
7c:fe:15:8f:f1:73:0e:2d:67:35:9d:5a:93:d1:1b:
7f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9C:AC:1F:3A:89:25:7B:62:A4:FD:6F:82:46:D8:51:37:78:21:92
X509v3 Authority Key Identifier:
keyid:38:26:42:3E:B0:19:55:22:4E:6C:11:D1:9C:6D:39:38:1E:8B:E2:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCZCPrAZVSJObBHRnG05OB6L4h0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/11d1e5-3cc7-4972-a07a-785e3e8768f9/1/OCZCPrAZVSJObBHRnG05OB6L4h0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:99:34:b1:06:3a:75:62:1c:ee:f8:5e:af:64:fd:50:55:53:
54:d1:38:44:88:98:15:aa:1e:50:93:dc:bf:cb:0c:68:55:cf:
7b:65:b3:d0:c5:65:de:a9:d7:1e:a4:66:e2:2d:68:e4:ed:1c:
9e:da:e8:54:82:a8:c8:78:36:d2:0d:8b:2c:d8:de:1e:4e:3e:
08:a2:89:e5:86:e6:eb:44:06:a7:6f:2a:fe:24:bc:ed:6b:f6:
3d:58:15:68:7a:47:54:fb:a3:c5:45:52:38:a2:f0:73:6a:ed:
03:76:0d:fe:06:e6:39:54:98:a4:20:fe:7d:7d:d8:52:a6:ed:
9d:9d:46:3d:af:ff:c2:27:74:20:ed:b2:fb:eb:45:1c:87:13:
5a:12:e9:ae:28:a5:4c:73:a7:08:9a:0e:46:2a:35:7a:ac:b7:
c3:8d:44:9e:8f:8f:43:c2:c0:6c:21:5c:99:f7:55:48:60:be:
14:5c:c2:9d:0c:30:ab:5d:10:4d:95:12:02:f3:0d:09:6b:18:
bb:cd:85:62:c0:44:73:b4:93:ed:dc:9e:e0:90:ac:e5:6e:59:
e6:34:65:96:e9:82:a9:af:c5:d2:9d:a5:e9:ac:06:6c:e9:5c:
39:37:a9:9d:35:7e:f8:40:9a:37:0c:62:06:74:3a:fd:7f:ea:
41:4f:c4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:25:27 2025 by rpki-client