Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/OUBxIwZclV0Z1PrpY7DQVfSJshU.mft
File: OUBxIwZclV0Z1PrpY7DQVfSJshU.mft (raw, json)
Hash identifier: rdEug+lKi9VmZ6RSfx5T10pu3A9j/Bhy7aPjEkMAyyQ=
Subject key identifier: 76:9E:9A:F1:1C:EF:B1:78:1C:6B:34:CD:2F:DE:95:13:01:4F:5F:82
Authority key identifier: 39:40:71:23:06:5C:95:5D:19:D4:FA:E9:63:B0:D0:55:F4:89:B2:15
Certificate issuer: /CN=39407123065c955d19d4fae963b0d055f489b215
Certificate serial: 018BCCD9EC26B5EC7F3A490835CD151B1417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUBxIwZclV0Z1PrpY7DQVfSJshU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/OUBxIwZclV0Z1PrpY7DQVfSJshU.mft
Manifest number: 0708
Signing time: Tue 14 Nov 2023 08:01:55 +0000
Manifest this update: Tue 14 Nov 2023 08:01:55 +0000
Manifest next update: Wed 15 Nov 2023 08:01:55 +0000
Files and hashes: 1: 36kIkhn1asWFhNR_ew1YpVJl5t0.roa (hash: eWlPzJKsjPhIhN22PK3yftMciBkx2+KGpXfaGjme6oA=)
2: 95wvAQ1byyC8kjkA_qlKfk8OXi8.roa (hash: sBTr+M7TAMqjBTX1Yv9bB8DUGt1zVFuT5Ugo7LKYTdk=)
3: OUBxIwZclV0Z1PrpY7DQVfSJshU.crl (hash: +U+QY6QiMGNZVhXrsu2rOxl8itRIs+VYOF4RvZYpvqw=)
4: dXPzTjbaiy-IXPRRTjOA0bkqzLo.roa (hash: SV5kK7I7rmRqofqFPABZ0YHIwyAOku53VtII5zhZAi8=)
5: v2TS3poNrx67RxE7vFGIEhMWRqA.roa (hash: Gl8XGsvnyDQBH31ZbDJ+T6loQFlP6+e6x8LK3c6k/Ik=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cc:d9:ec:26:b5:ec:7f:3a:49:08:35:cd:15:1b:14:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39407123065c955d19d4fae963b0d055f489b215
Validity
Not Before: Nov 14 08:01:55 2023 GMT
Not After : Nov 15 08:01:55 2023 GMT
Subject: CN=769e9af11cefb1781c6b34cd2fde9513014f5f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a0:f1:7b:90:b3:ca:9e:09:f4:fa:65:98:b2:
18:02:31:9c:04:5e:ba:2a:62:fc:85:25:ca:e8:2e:
1e:da:a6:7c:5b:3e:32:c6:d5:40:7d:10:cf:09:bc:
53:f9:47:e8:a8:8f:7b:6d:ab:18:fc:5c:fe:7d:83:
87:0b:b1:9a:38:d2:86:b1:db:0a:09:ed:5d:ae:52:
a8:a9:ed:b7:8c:60:2b:74:77:06:9b:a3:58:76:af:
99:b8:1a:19:01:71:d1:07:66:f6:c0:bc:bb:17:0f:
1e:21:89:fe:c9:e1:bf:93:03:08:ab:c3:c7:e2:07:
49:50:f0:6f:21:65:ef:17:e9:46:7b:50:3c:d5:69:
db:32:5c:cc:e3:47:e5:ca:21:e1:bc:53:98:a1:19:
c5:40:88:26:28:08:da:4c:a4:54:6c:38:d9:fc:20:
84:c4:78:eb:02:2c:80:02:d5:8d:2e:e1:9c:11:84:
88:46:66:a7:80:df:76:44:12:f5:76:21:ac:2e:9b:
87:bd:2a:73:9b:4f:b8:fe:60:5c:e8:8f:50:49:9e:
0f:20:3b:32:80:69:11:7b:ca:b1:9e:88:d7:af:ff:
58:fe:5f:0c:01:d7:ed:0d:d3:22:92:1f:60:a9:30:
65:7d:39:03:06:06:b5:59:b8:1f:9a:82:a1:ba:4e:
98:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9E:9A:F1:1C:EF:B1:78:1C:6B:34:CD:2F:DE:95:13:01:4F:5F:82
X509v3 Authority Key Identifier:
keyid:39:40:71:23:06:5C:95:5D:19:D4:FA:E9:63:B0:D0:55:F4:89:B2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUBxIwZclV0Z1PrpY7DQVfSJshU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/OUBxIwZclV0Z1PrpY7DQVfSJshU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/35a6cc-da7f-4e3c-bccb-e73c1244fe68/1/OUBxIwZclV0Z1PrpY7DQVfSJshU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:23:56:02:c3:ce:5c:77:6b:b6:05:fb:e7:37:15:98:22:66:
1a:34:66:a2:3d:b2:c2:6e:bb:53:69:08:4f:ad:da:08:b0:1e:
4c:2c:3e:7e:b9:fc:d5:99:19:d7:b0:7e:30:12:6e:24:78:ed:
ad:17:a8:fe:86:e1:ef:fb:0a:5a:4e:aa:97:e0:bc:70:4e:44:
ab:0b:6f:2c:0d:b5:1a:2e:e0:96:d1:78:7c:39:50:bf:40:f0:
b6:30:95:3d:f6:9d:09:1d:5f:82:b5:1d:45:9d:be:6b:e4:40:
c9:04:19:4b:2b:76:9f:5b:53:a3:fb:ed:81:de:68:7e:a4:61:
53:1c:4e:eb:80:d4:44:4a:13:b6:2a:22:7c:05:8e:d3:d9:df:
f1:f3:50:71:4a:56:b5:66:87:88:28:f5:02:e1:3d:b9:f9:83:
f8:42:dc:dd:b8:e8:eb:78:2e:9c:25:8a:f3:a1:da:76:26:0b:
cf:15:cd:cd:59:ed:35:4f:0d:41:1c:97:0a:54:dd:ba:a6:30:
93:c1:cb:00:4f:66:c8:81:61:6c:ce:21:ff:8a:c8:e1:70:ac:
c7:86:75:01:2d:45:33:48:5c:61:b9:76:4d:f1:69:1e:20:bf:
f0:0a:37:9c:05:c8:a8:0f:9a:cd:4a:b0:b5:76:6e:47:5b:ab:
32:a5:08:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:39:44 2025 by rpki-client