Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/dd70a4-1ce5-4048-a106-20b1e2e5be48/1/OYk2YD7bhVi2GYI8B36euGlHWLI.mft
File: OYk2YD7bhVi2GYI8B36euGlHWLI.mft (raw, json)
Hash identifier: /nP52t67MSufufmYHRPH4rRiOICmfSIOhUAqSUCciF8=
Subject key identifier: 14:D2:54:B6:77:F4:99:E7:B3:69:50:3E:47:B3:27:D6:42:F8:E8:E5
Authority key identifier: 39:89:36:60:3E:DB:85:58:B6:19:82:3C:07:7E:9E:B8:69:47:58:B2
Certificate issuer: /CN=398936603edb8558b619823c077e9eb8694758b2
Certificate serial: 0194BCA9FA08B734A8EAFADD1DC5F7ED81F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OYk2YD7bhVi2GYI8B36euGlHWLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/dd70a4-1ce5-4048-a106-20b1e2e5be48/1/OYk2YD7bhVi2GYI8B36euGlHWLI.mft
Manifest number: 0327
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: OYk2YD7bhVi2GYI8B36euGlHWLI.crl (hash: WLuBptAuFVnsNcbYe+ZTk6s6DGSxLV2iUNRxVI/MIrA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fa:08:b7:34:a8:ea:fa:dd:1d:c5:f7:ed:81:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398936603edb8558b619823c077e9eb8694758b2
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=14d254b677f499e7b369503e47b327d642f8e8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:5e:d5:d9:c1:2c:5d:f2:38:ed:04:09:bf:1a:
69:ff:40:2b:25:d3:c7:22:bb:d8:ba:d8:21:a8:cd:
83:41:2f:c2:e6:b6:6b:91:c9:3e:a6:18:79:44:4d:
1a:aa:6e:92:eb:06:ae:c9:f1:10:52:39:7b:6d:b9:
e3:69:89:05:6a:8a:42:15:22:5a:ad:50:c7:80:6c:
ec:38:d4:e2:da:c0:82:fb:f2:64:ca:8d:f5:0b:51:
7b:6c:86:e5:f3:5d:0b:02:14:64:8e:ef:be:d6:3c:
53:d6:18:72:f0:73:7c:85:07:63:b3:81:d3:69:4d:
7d:9d:27:46:2d:9d:a8:57:ae:a1:7e:cf:db:58:18:
85:25:e4:f1:44:2b:01:1f:71:98:ee:e8:c4:04:94:
9a:12:dc:67:60:07:38:b3:53:91:91:3e:35:20:e3:
54:73:5f:29:33:e1:26:c3:f6:4e:45:a3:56:09:4a:
ff:62:1a:c0:69:90:7b:1f:b1:36:bd:ca:cd:84:95:
69:c1:bf:d5:d4:1a:70:7f:39:9c:95:aa:9e:f9:0c:
db:e8:81:70:ab:89:2f:dd:69:13:39:83:7d:23:51:
97:da:9b:f1:00:e3:f7:9e:c9:54:e3:92:fb:97:f4:
08:d5:07:5f:99:e0:6b:38:c5:21:d2:43:49:97:24:
88:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D2:54:B6:77:F4:99:E7:B3:69:50:3E:47:B3:27:D6:42:F8:E8:E5
X509v3 Authority Key Identifier:
keyid:39:89:36:60:3E:DB:85:58:B6:19:82:3C:07:7E:9E:B8:69:47:58:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OYk2YD7bhVi2GYI8B36euGlHWLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/dd70a4-1ce5-4048-a106-20b1e2e5be48/1/OYk2YD7bhVi2GYI8B36euGlHWLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/dd70a4-1ce5-4048-a106-20b1e2e5be48/1/OYk2YD7bhVi2GYI8B36euGlHWLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9c:26:59:42:5c:67:b8:f5:18:23:b8:cc:cb:63:df:2a:2b:
a6:29:20:db:48:ec:20:16:26:23:3e:a1:6f:55:e6:bd:fc:aa:
f9:5c:70:57:9e:42:b4:aa:14:19:92:ae:b2:cb:59:66:c1:2a:
a2:04:50:31:fd:34:4e:76:35:5a:d6:98:ab:fe:af:6e:f4:6d:
31:c0:9b:5d:6d:82:a2:3f:d0:1d:f6:b4:be:b1:f4:5c:4e:af:
28:de:84:e0:9f:2d:9a:b7:19:0a:32:c9:75:51:67:8a:a7:83:
7f:09:e2:a6:ac:58:20:85:64:48:22:bf:e0:46:18:02:a2:c3:
c2:f1:26:e4:94:b6:62:b6:1d:96:11:eb:b8:84:3f:39:ca:fd:
8e:ed:db:cd:13:f5:c3:ce:90:b1:21:83:ee:c2:d1:2c:f4:09:
34:3f:a6:6f:37:1f:ee:4f:b0:31:06:27:fa:37:70:fc:ef:1c:
5d:70:45:ea:b4:67:a0:ce:ea:2f:71:0f:9a:4e:57:c3:8b:53:
5d:40:fe:7c:b0:5c:e1:c0:3e:4f:85:f5:99:8c:28:cd:88:4a:
42:88:75:c8:0c:91:fe:4c:a3:a0:f8:81:d1:d7:30:db:2f:a0:
95:c7:67:68:a7:bc:cc:69:d5:87:ee:e4:85:60:41:34:57:55:
ef:94:a4:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qfoItzSo6vrdHcX37YH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ODkzNjYwM2VkYjg1NThiNjE5ODIzYzA3N2U5ZWI4Njk0
NzU4YjIwHhcNMjUwMTMxMTQwMDQzWhcNMjUwMjAxMTQwMDQzWjAzMTEwLwYDVQQD
EygxNGQyNTRiNjc3ZjQ5OWU3YjM2OTUwM2U0N2IzMjdkNjQyZjhlOGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA717V2cEsXfI47QQJvxpp/0ArJdPH
IrvYutghqM2DQS/C5rZrkck+phh5RE0aqm6S6wauyfEQUjl7bbnjaYkFaopCFSJa
rVDHgGzsONTi2sCC+/Jkyo31C1F7bIbl810LAhRkju++1jxT1hhy8HN8hQdjs4HT
aU19nSdGLZ2oV66hfs/bWBiFJeTxRCsBH3GY7ujEBJSaEtxnYAc4s1ORkT41IONU
c18pM+Emw/ZORaNWCUr/YhrAaZB7H7E2vcrNhJVpwb/V1Bpwfzmclaqe+Qzb6IFw
q4kv3WkTOYN9I1GX2pvxAOP3nslU45L7l/QI1QdfmeBrOMUh0kNJlySIzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTSVLZ39Jnns2lQPkezJ9ZC+OjlMB8GA1UdIwQY
MBaAFDmJNmA+24VYthmCPAd+nrhpR1iyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1lrMllEN2JoVmkyR1lJOEIzNmV1R2xIV0xJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9kZDcwYTQtMWNlNS00MDQ4LWExMDYt
MjBiMWUyZTViZTQ4LzEvT1lrMllEN2JoVmkyR1lJOEIzNmV1R2xIV0xJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9kZDcwYTQtMWNlNS00MDQ4LWExMDYtMjBiMWUyZTViZTQ4
LzEvT1lrMllEN2JoVmkyR1lJOEIzNmV1R2xIV0xJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5wmWUJc
Z7j1GCO4zMtj3yorpikg20jsIBYmIz6hb1Xmvfyq+VxwV55CtKoUGZKusstZZsEq
ogRQMf00TnY1WtaYq/6vbvRtMcCbXW2Coj/QHfa0vrH0XE6vKN6E4J8tmrcZCjLJ
dVFniqeDfwnipqxYIIVkSCK/4EYYAqLDwvEm5JS2YrYdlhHruIQ/Ocr9ju3bzRP1
w86QsSGD7sLRLPQJND+mbzcf7k+wMQYn+jdw/O8cXXBF6rRnoM7qL3EPmk5Xw4tT
XUD+fLBc4cA+T4X1mYwozYhKQoh1yAyR/kyjoPiB0dcw2y+glcdnaKe8zGnVh+7k
hWBBNFdV75SkMw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:29:30 2025 by rpki-client