Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/9bb275-86b0-42b2-a6ce-305b7ceeb796/1/OmsIRCbZ3gsQ4BQdHeQ8dinBloI.mft
File: OmsIRCbZ3gsQ4BQdHeQ8dinBloI.mft (raw, json)
Hash identifier: Rg60QaJxbFg+8VeEBWkE1XS9Oyk2apyd0UK9kmAsBTo=
Subject key identifier: 44:08:B6:C2:4F:ED:1A:7D:4B:C3:48:2B:FC:0F:71:81:F9:B3:BE:1F
Authority key identifier: 3A:6B:08:44:26:D9:DE:0B:10:E0:14:1D:1D:E4:3C:76:29:C1:96:82
Certificate issuer: /CN=3a6b084426d9de0b10e0141d1de43c7629c19682
Certificate serial: 0194BCA9B49BFDEE4EEC367B1283AD3A9ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmsIRCbZ3gsQ4BQdHeQ8dinBloI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/9bb275-86b0-42b2-a6ce-305b7ceeb796/1/OmsIRCbZ3gsQ4BQdHeQ8dinBloI.mft
Manifest number: 0ADE
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: OmsIRCbZ3gsQ4BQdHeQ8dinBloI.crl (hash: 9t7VOb2G7ewqKO6wbQmpyyVh16SggNngxBbnKFXqzsE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b4:9b:fd:ee:4e:ec:36:7b:12:83:ad:3a:9e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6b084426d9de0b10e0141d1de43c7629c19682
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=4408b6c24fed1a7d4bc3482bfc0f7181f9b3be1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:54:e6:67:3e:ac:75:9f:3f:cb:d8:17:cd:
0d:83:01:49:25:26:5b:51:57:91:b8:b2:ac:68:c9:
e8:6f:e5:28:fa:bc:eb:c3:84:d9:54:49:2f:70:81:
46:02:f2:8d:7b:5a:78:17:11:85:ec:f9:d9:f9:f4:
c1:80:a1:29:f4:90:d2:dd:bf:06:ab:d0:2e:48:41:
ab:3f:0d:ce:5c:12:f4:89:6d:de:c0:0c:48:be:99:
76:83:b1:cb:b4:dc:d9:80:49:d7:18:df:66:8a:b0:
5e:10:fa:b1:dc:e3:a9:b3:3c:19:ef:1c:8f:44:10:
5b:7a:4a:d2:8e:5a:a6:ca:55:55:66:c2:d4:74:c0:
32:4d:ea:70:b2:98:0f:29:e9:e5:ba:df:bc:b0:e8:
b8:92:3f:43:ae:53:20:3f:69:da:3f:f1:f3:94:4c:
c3:90:2c:35:d9:59:ca:d2:e4:91:c2:c1:42:c4:7b:
da:83:7e:a1:0f:c2:2a:64:13:e7:b2:81:28:c0:42:
c2:54:3b:cc:49:c3:8c:4e:4c:8d:f4:47:8c:f6:a9:
13:ec:7a:5d:4e:dd:56:cc:e0:45:42:77:61:16:c2:
b5:e1:d0:7e:05:ed:9a:5a:e4:fc:23:90:3a:a0:b1:
19:0a:d8:58:75:5d:cb:8e:9b:12:5d:a3:ab:e7:14:
84:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:08:B6:C2:4F:ED:1A:7D:4B:C3:48:2B:FC:0F:71:81:F9:B3:BE:1F
X509v3 Authority Key Identifier:
keyid:3A:6B:08:44:26:D9:DE:0B:10:E0:14:1D:1D:E4:3C:76:29:C1:96:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmsIRCbZ3gsQ4BQdHeQ8dinBloI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9bb275-86b0-42b2-a6ce-305b7ceeb796/1/OmsIRCbZ3gsQ4BQdHeQ8dinBloI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/9bb275-86b0-42b2-a6ce-305b7ceeb796/1/OmsIRCbZ3gsQ4BQdHeQ8dinBloI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:88:21:67:7f:26:5d:c8:db:d5:df:b0:e0:4e:53:81:e4:84:
50:69:4e:c0:cc:20:d4:7e:0c:2d:a9:83:04:b9:7e:db:20:5d:
ab:20:14:7b:17:a8:86:02:8c:c4:4f:62:b1:7c:45:5d:cc:3a:
80:ab:ac:74:4f:62:ce:23:d9:a5:e9:d2:6e:bf:12:b8:4e:91:
33:96:46:ef:f6:80:b1:bf:2d:0e:d7:d9:62:3d:d8:44:66:b8:
75:45:7e:34:3a:b5:6e:2b:87:81:4b:39:e6:5e:d1:e6:82:5c:
dc:11:f9:42:b8:01:7c:62:f0:29:e8:89:f7:11:31:b8:74:32:
5e:45:43:e6:a5:7e:51:e8:ce:55:f2:c9:cf:63:1e:ad:0b:83:
5c:b8:b5:94:bd:e6:ea:0a:99:7e:fa:ed:73:89:63:52:d1:15:
29:d3:8f:ca:37:6b:42:29:c7:28:6b:91:d9:a6:91:4b:af:4c:
cd:60:2b:ac:65:ea:9a:8b:b1:12:6e:83:aa:cf:38:24:6b:4c:
18:cf:64:60:e7:0a:c9:7c:e5:c4:85:c3:bb:22:ad:24:17:fb:
06:52:f5:8b:9d:9b:9f:bf:24:db:3b:cb:80:2a:a7:80:af:69:
b5:87:1d:9a:64:06:e6:91:32:cf:4b:7e:27:f2:d9:99:51:2d:
5e:f3:e6:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qbSb/e5O7DZ7EoOtOp7SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNmIwODQ0MjZkOWRlMGIxMGUwMTQxZDFkZTQzYzc2Mjlj
MTk2ODIwHhcNMjUwMTMxMTQwMDI1WhcNMjUwMjAxMTQwMDI1WjAzMTEwLwYDVQQD
Eyg0NDA4YjZjMjRmZWQxYTdkNGJjMzQ4MmJmYzBmNzE4MWY5YjNiZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhxU5mc+rHWfP8vYF80NgwFJJSZb
UVeRuLKsaMnob+Uo+rzrw4TZVEkvcIFGAvKNe1p4FxGF7PnZ+fTBgKEp9JDS3b8G
q9AuSEGrPw3OXBL0iW3ewAxIvpl2g7HLtNzZgEnXGN9mirBeEPqx3OOpszwZ7xyP
RBBbekrSjlqmylVVZsLUdMAyTepwspgPKenlut+8sOi4kj9DrlMgP2naP/HzlEzD
kCw12VnK0uSRwsFCxHvag36hD8IqZBPnsoEowELCVDvMScOMTkyN9EeM9qkT7Hpd
Tt1WzOBFQndhFsK14dB+Be2aWuT8I5A6oLEZCthYdV3LjpsSXaOr5xSE/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEQItsJP7Rp9S8NIK/wPcYH5s74fMB8GA1UdIwQY
MBaAFDprCEQm2d4LEOAUHR3kPHYpwZaCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT21zSVJDYlozZ3NRNEJRZEhlUThkaW5CbG9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC85YmIyNzUtODZiMC00MmIyLWE2Y2Ut
MzA1YjdjZWViNzk2LzEvT21zSVJDYlozZ3NRNEJRZEhlUThkaW5CbG9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC85YmIyNzUtODZiMC00MmIyLWE2Y2UtMzA1YjdjZWViNzk2
LzEvT21zSVJDYlozZ3NRNEJRZEhlUThkaW5CbG9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoghZ38m
Xcjb1d+w4E5TgeSEUGlOwMwg1H4MLamDBLl+2yBdqyAUexeohgKMxE9isXxFXcw6
gKusdE9iziPZpenSbr8SuE6RM5ZG7/aAsb8tDtfZYj3YRGa4dUV+NDq1biuHgUs5
5l7R5oJc3BH5QrgBfGLwKeiJ9xExuHQyXkVD5qV+UejOVfLJz2MerQuDXLi1lL3m
6gqZfvrtc4ljUtEVKdOPyjdrQinHKGuR2aaRS69MzWArrGXqmouxEm6Dqs84JGtM
GM9kYOcKyXzlxIXDuyKtJBf7BlL1i52bn78k2zvLgCqngK9ptYcdmmQG5pEyz0t+
J/LZmVEtXvPmDw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:02 2025 by rpki-client