Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6c32a6-6242-4cbb-918c-c97e5a6b0b56/1/owxGQcyfydI6K1WIpO9e44hM8co.mft
File: owxGQcyfydI6K1WIpO9e44hM8co.mft (raw, json)
Hash identifier: RRV/N/iSxOVFI3ld0xPDMSNAy06ugsOZDmrTKKyAIAM=
Subject key identifier: 1D:CE:2C:97:06:D8:59:15:F3:83:03:1C:58:DA:87:4A:61:EF:98:FE
Authority key identifier: A3:0C:46:41:CC:9F:C9:D2:3A:2B:55:88:A4:EF:5E:E3:88:4C:F1:CA
Certificate issuer: /CN=a30c4641cc9fc9d23a2b5588a4ef5ee3884cf1ca
Certificate serial: 0193B9AB99DAFE9D0A23B01A158306145DC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owxGQcyfydI6K1WIpO9e44hM8co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6c32a6-6242-4cbb-918c-c97e5a6b0b56/1/owxGQcyfydI6K1WIpO9e44hM8co.mft
Manifest number: 0BA7
Signing time: Thu 12 Dec 2024 07:00:51 +0000
Manifest this update: Thu 12 Dec 2024 07:00:51 +0000
Manifest next update: Fri 13 Dec 2024 07:00:51 +0000
Files and hashes: 1: 10YKb98bOkjpW20GXrbBzE3ASRo.roa (hash: RzVd1LF6A1gnzc77ynhMGzVG8EmOf+bATv9Krd4x570=)
2: owxGQcyfydI6K1WIpO9e44hM8co.crl (hash: ZoerS+gSPFDeFLySLLjxTjclGc6LFWTvdK3Ve7R1ia4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b9:ab:99:da:fe:9d:0a:23:b0:1a:15:83:06:14:5d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a30c4641cc9fc9d23a2b5588a4ef5ee3884cf1ca
Validity
Not Before: Dec 12 07:00:51 2024 GMT
Not After : Dec 13 07:00:51 2024 GMT
Subject: CN=1dce2c9706d85915f383031c58da874a61ef98fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:09:5a:4b:2c:81:ef:e2:c7:9c:1d:f1:ba:09:
21:e7:f1:3a:1c:3f:73:52:1b:cd:cc:ef:df:79:b0:
c5:ac:e2:f9:19:58:c0:49:78:a1:39:39:e4:b0:03:
8c:7b:ee:08:a6:bd:99:88:8b:6d:87:aa:ae:b6:31:
71:e5:ce:c7:ce:21:56:26:be:14:30:2b:bf:b9:08:
24:ce:46:8e:19:33:40:ef:87:ce:ea:95:f0:e2:87:
12:c3:5d:41:a8:26:22:06:02:c1:ef:63:05:e8:67:
e7:64:cc:b0:b9:d4:fa:46:11:cf:61:3e:be:51:5a:
13:86:50:c1:7f:1f:4e:5d:fd:15:50:5c:b1:7c:c0:
51:a1:e6:c9:27:18:24:75:01:bb:68:ea:89:62:9d:
de:76:1a:3a:2f:7b:e0:b5:fe:a9:13:4c:06:12:a9:
21:84:21:b9:d1:c3:d6:94:a7:5f:aa:b1:4d:b6:e7:
61:6f:d7:a6:a5:20:45:33:99:8c:e4:bc:33:92:f1:
ac:35:0c:50:df:84:63:0a:60:3c:b9:77:bc:3f:b8:
61:90:c3:ed:bf:59:91:7a:b5:f1:d5:30:c1:84:71:
14:c2:44:05:9f:a7:d8:e5:9b:94:1c:ff:a6:5e:0f:
23:9c:2d:69:dd:47:cd:ed:9e:ce:b9:1b:c9:68:86:
61:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CE:2C:97:06:D8:59:15:F3:83:03:1C:58:DA:87:4A:61:EF:98:FE
X509v3 Authority Key Identifier:
keyid:A3:0C:46:41:CC:9F:C9:D2:3A:2B:55:88:A4:EF:5E:E3:88:4C:F1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owxGQcyfydI6K1WIpO9e44hM8co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6c32a6-6242-4cbb-918c-c97e5a6b0b56/1/owxGQcyfydI6K1WIpO9e44hM8co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6c32a6-6242-4cbb-918c-c97e5a6b0b56/1/owxGQcyfydI6K1WIpO9e44hM8co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:33:36:7d:26:60:c4:bf:5e:37:db:4f:79:88:bb:29:79:69:
2c:87:b5:2b:d8:5b:ba:6b:42:99:5d:39:4a:51:23:54:df:5c:
d8:76:46:5d:2f:38:93:d3:cf:0c:a3:83:35:75:4b:f7:97:82:
71:27:50:ad:5f:80:4c:40:08:42:f8:4a:44:5d:b9:08:e1:e8:
ad:b9:35:ef:53:b4:ca:f0:c4:03:50:71:94:ea:4e:c1:82:6d:
07:d2:d9:df:db:eb:d1:83:1d:89:68:f7:e1:23:02:00:48:bf:
13:ca:1a:71:80:55:9a:05:c9:0d:57:fb:50:02:95:ff:02:c4:
41:8e:e3:fe:9f:c7:8b:d1:66:01:69:03:0a:68:1a:c7:c0:f0:
eb:80:41:42:43:d5:21:86:50:58:31:0e:af:c7:e9:52:ac:a0:
52:b2:bf:60:62:55:d6:c9:b6:58:49:e9:42:8a:09:70:a7:03:
97:44:a6:84:35:74:c1:fa:11:8d:45:9a:71:d4:67:31:63:18:
0d:0d:cd:bf:53:33:eb:7c:ee:1d:42:8b:27:f3:f9:e2:47:74:
c6:b4:81:22:58:d7:b8:52:8f:e7:e4:e5:8a:dd:59:6d:09:41:
e0:9c:d3:50:5e:30:4b:17:c8:47:3d:69:c2:be:9d:48:1a:99:
82:fc:67:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:27:04 2025 by rpki-client