Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
File: OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft (raw, json)
Hash identifier: Omc4JuwNqPwWERqQ3hy8b7stvLhw7IIhcoykvgswQps=
Subject key identifier: EA:AB:A2:1C:54:AE:97:9C:CD:CD:D2:44:CC:2D:11:26:DF:95:9E:61
Authority key identifier: 3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
Certificate issuer: /CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
Certificate serial: 0194BC3C147BE389D1446D759E5B610BC5AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
Manifest number: 0583
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: OzCOm-OoWw9JAfNefPH7dZtJ_uc.crl (hash: wIkInFzWyiJmh51U4sIEC009w3GlAxv/PPfVTdB6Z+A=)
2: rjNkcaWpx4NgEp7EebCLdM3ILZM.roa (hash: gP4yiejn3v7lSwj9QDjHhQARpfcTwm6Zlm/8oXwlSSc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:14:7b:e3:89:d1:44:6d:75:9e:5b:61:0b:c5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b308e9be3a85b0f4901f35e7cf1fb759b49fee7
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=eaaba21c54ae979ccdcdd244cc2d1126df959e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:7e:ea:6f:46:a9:c0:ce:be:c3:2a:5a:dd:
1d:04:98:91:45:73:b8:15:4e:b1:f4:46:f7:d9:a0:
08:39:87:16:42:03:77:1f:0d:ba:0d:0b:40:04:ea:
17:63:ec:62:e8:e6:65:7d:af:04:60:6c:8b:c9:2c:
ed:83:87:89:01:08:c6:c9:70:86:20:ac:bd:5d:7d:
73:0d:2d:fa:08:c7:7e:1e:ac:a2:59:57:4c:4b:42:
8c:d0:7a:75:a3:de:af:b5:e6:9b:00:91:3c:55:e9:
62:25:c5:1c:9c:7d:4e:6f:6e:f1:28:14:90:1f:1c:
2f:57:b5:1c:e1:30:ad:89:23:9a:df:25:72:fa:6c:
6a:df:6b:23:43:18:39:cd:8e:eb:5d:43:61:37:03:
18:f2:28:4a:b1:a5:1f:ae:43:fc:6c:a1:0e:dd:59:
20:ba:97:b5:e6:37:37:fe:cc:78:ca:47:c5:48:d9:
31:46:68:f9:5c:c5:52:9a:cc:2c:cb:1c:9e:84:27:
f4:2c:b7:ae:f9:13:98:ea:0e:2e:f1:c9:c8:37:68:
c1:f3:cb:f4:0e:52:a6:82:00:81:bf:6d:dc:d5:51:
8b:f0:10:9f:76:00:26:79:0a:a7:a8:0e:14:68:5d:
21:58:b8:75:ec:5e:70:71:fc:bb:94:63:4b:89:e9:
7c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AB:A2:1C:54:AE:97:9C:CD:CD:D2:44:CC:2D:11:26:DF:95:9E:61
X509v3 Authority Key Identifier:
keyid:3B:30:8E:9B:E3:A8:5B:0F:49:01:F3:5E:7C:F1:FB:75:9B:49:FE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OzCOm-OoWw9JAfNefPH7dZtJ_uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/14a46d-2d92-4e75-88da-1f9d8e236e25/1/OzCOm-OoWw9JAfNefPH7dZtJ_uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:d5:5d:d3:cb:69:5b:d8:e9:f1:ad:cb:17:cf:e0:0f:92:81:
77:99:42:2b:85:b5:d6:82:57:fc:88:54:d3:1b:35:e0:3d:d6:
13:a6:81:f7:e6:d4:d6:c7:dc:2f:b2:0c:f3:68:ae:8d:0f:60:
1f:e1:b0:3e:cf:d9:ab:47:9f:8e:70:d1:22:d3:6b:e0:6c:b2:
10:08:83:d8:cd:3e:af:05:9d:dd:2d:f6:37:2d:e4:60:de:26:
4a:c9:46:df:e5:9b:1a:d5:63:f3:22:a3:e0:8f:fa:9c:8f:68:
7b:04:61:e9:2b:97:73:e9:4f:ff:5d:b8:9d:4f:5d:11:60:d7:
1b:b4:6a:d8:54:dc:fb:8e:51:28:e5:ce:48:b2:65:48:58:d8:
cb:3e:dd:41:92:e9:c7:52:3f:c9:d1:21:f8:5e:b0:7e:dd:c7:
4c:45:98:1c:a9:82:f0:e3:9c:a8:0c:90:5c:c7:52:1d:d2:bd:
34:88:49:ae:37:7a:cd:09:28:0c:e0:20:c2:c8:78:83:ef:ae:
84:97:5d:52:08:b0:19:0f:76:29:21:6f:59:5c:9e:b8:93:e4:
f9:a8:83:6b:c1:ae:7c:ba:54:65:b8:8a:91:d6:c5:2b:e6:6d:
05:c0:0e:f4:fe:cc:ac:8f:f1:eb:95:ce:af:67:e5:27:a2:c0:
22:3a:3c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:31 2025 by rpki-client