Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
File: ozMRTL_Gv2aDccVofumKRC_Y6jY.mft (raw, json)
Hash identifier: sSmHdXObCvta1AJpzz8JAY4Ev9CCEF1ARQ6Hgv4fDNI=
Subject key identifier: 53:B4:D5:FB:DC:D4:D0:5D:ED:B8:EB:5A:EB:E5:0C:99:32:F9:1A:31
Authority key identifier: A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
Certificate issuer: /CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Certificate serial: 0194BC7293391E86148236CA3527AEE21FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 13:00:12 +0000
Manifest this update: Fri 31 Jan 2025 13:00:12 +0000
Manifest next update: Sat 01 Feb 2025 13:00:12 +0000
Files and hashes: 1: TfTonluQfmH78OzaVxkJLWOPrQc.roa (hash: o/+GwvpVj7XMHL42Lw0eZWO0sJVLD6s9aZvEqCfH3Ic=)
2: ozMRTL_Gv2aDccVofumKRC_Y6jY.crl (hash: DZYHokVY0ZrhiboYmnut1fqceQvTISq8VjDjqCOMqrk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:93:39:1e:86:14:82:36:ca:35:27:ae:e2:1f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a333114cbfc6bf668371c5687ee98a442fd8ea36
Validity
Not Before: Jan 31 13:00:12 2025 GMT
Not After : Feb 1 13:00:12 2025 GMT
Subject: CN=53b4d5fbdcd4d05dedb8eb5aebe50c9932f91a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:a4:85:29:0a:7d:13:ca:96:b5:51:17:25:
9b:a4:f5:bd:33:2f:a6:43:d8:33:4c:a5:c9:8c:cf:
8a:cd:8b:d5:4b:85:b0:30:ec:b3:26:d9:5c:8c:97:
ff:8c:3b:2f:a3:e2:1e:22:ee:a5:9f:d1:fa:e5:d5:
dd:83:61:e0:15:cb:36:a7:28:bd:83:b5:da:c2:b0:
69:cc:e5:43:35:6f:b0:9f:29:f3:13:f2:f1:d2:89:
df:7a:59:f7:74:8a:5c:0d:46:db:a5:eb:82:77:a4:
24:43:58:18:d3:58:73:d6:97:15:2b:0f:74:93:a5:
15:5f:d9:df:0f:ff:bc:57:ac:d1:0b:a7:a8:47:04:
a2:c2:3c:21:5b:8f:33:c2:43:92:51:79:65:3d:21:
7c:4a:b5:55:a3:f0:8e:ec:ac:0b:bf:9e:34:ce:b9:
c9:dc:73:97:f7:b4:d0:e0:3d:57:af:70:1b:aa:1d:
b9:8f:d8:81:14:1d:56:90:8e:de:95:f1:02:e4:cb:
96:1f:ca:9a:3b:15:fd:d5:72:ab:03:01:ac:26:6d:
b0:40:f3:fc:37:d9:c1:83:ed:dc:5d:31:24:5c:e4:
ad:d9:37:00:aa:c0:50:1c:fd:8e:84:0d:c9:3b:d7:
3b:4c:f2:04:40:d3:01:bd:5e:53:57:e9:a6:5a:bf:
c9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B4:D5:FB:DC:D4:D0:5D:ED:B8:EB:5A:EB:E5:0C:99:32:F9:1A:31
X509v3 Authority Key Identifier:
keyid:A3:33:11:4C:BF:C6:BF:66:83:71:C5:68:7E:E9:8A:44:2F:D8:EA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ozMRTL_Gv2aDccVofumKRC_Y6jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/530625-4e46-4563-ae2c-cd49264eaf0b/1/ozMRTL_Gv2aDccVofumKRC_Y6jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:37:b9:29:d0:2b:f0:27:00:94:88:71:e6:c3:13:26:b5:3d:
16:18:b9:9c:89:62:59:7f:d1:9d:37:b4:34:02:bb:15:85:0d:
96:7e:88:9c:f5:8b:c4:d3:e2:52:a3:bc:63:97:32:2e:59:00:
fb:e4:fc:82:2d:2e:c6:e5:88:00:07:f7:45:00:c1:40:e5:fd:
9b:cc:65:b7:48:01:7f:f6:a3:bb:1c:61:11:d6:bc:48:28:d2:
9c:40:7b:96:f6:2a:45:77:ed:2e:65:2e:56:98:43:a1:4b:9d:
64:9f:7a:6f:1d:dd:16:a7:cf:95:25:d6:41:85:95:f3:a7:45:
10:70:9f:bc:e9:8b:13:43:c6:d4:a6:05:78:98:57:d2:52:5f:
89:83:f0:5d:92:79:84:6b:2c:68:bc:1d:d7:2c:36:ff:6d:52:
ea:12:9e:6d:b1:34:70:fc:f7:72:56:1e:2c:8c:89:f1:d3:32:
32:c3:cb:52:cf:c5:df:93:dc:f7:a0:af:28:23:1c:21:f9:43:
a7:c1:af:b0:cf:3c:3f:ba:82:04:b8:3b:ae:9e:aa:d1:95:96:
c4:99:2f:13:46:5e:18:f4:73:35:6f:6a:2f:7d:69:a6:6d:b4:
85:a9:a4:b0:57:14:ba:f6:c1:4d:95:a3:df:87:a3:e1:5b:ac:
d9:82:8e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:48 2025 by rpki-client