Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
File: O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft (raw, json)
Hash identifier: rsqVUNVDmy/lW/v6NKnyBAq2RjB4LwrU84fM4Xyqtr4=
Subject key identifier: 9C:67:F7:13:73:19:16:46:F0:9A:F8:34:46:7B:60:D4:EE:B4:31:98
Authority key identifier: 3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62
Certificate issuer: /CN=3b55e7feb907137299f5792c36395efba9b34b62
Certificate serial: 0194BC72859287A7FB0C2EB72CD66BF3DD3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
Manifest number: 0CD1
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl (hash: iXPiZynOiQyPy/LFL0eIhSqBgDEdLFqFj59z2pJska0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:85:92:87:a7:fb:0c:2e:b7:2c:d6:6b:f3:dd:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b55e7feb907137299f5792c36395efba9b34b62
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=9c67f71373191646f09af834467b60d4eeb43198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bd:37:ff:fe:fb:57:41:71:7f:04:78:4e:5a:
72:4a:a2:72:cd:81:1f:a6:ae:d2:d0:c2:b7:f8:f1:
63:26:94:19:42:2d:00:2a:92:c9:e8:87:fd:ff:6b:
61:c8:7b:ee:ba:7e:c7:1c:c5:db:2c:1e:f2:6a:32:
f9:68:34:6c:d2:50:eb:65:00:fb:a9:c8:a7:72:aa:
b5:ad:ce:35:25:81:20:ea:2d:a8:59:bf:53:0d:1b:
86:4e:79:31:9e:84:09:51:b3:b0:fa:4b:8d:84:08:
97:2f:39:51:17:93:96:85:db:de:5e:86:db:e8:39:
c8:5a:2a:75:e8:90:de:32:31:ce:95:e4:9c:7b:1c:
76:81:70:16:3f:c0:51:64:52:f6:1f:ea:34:ea:81:
76:01:3e:5b:50:1b:8d:57:d8:7e:ff:0f:06:43:7c:
aa:d1:cf:4e:3b:55:ec:d5:9a:97:11:c1:d7:42:ab:
39:2c:6b:a9:cf:6b:e9:95:f7:4b:f9:fe:1d:bd:0b:
8f:23:46:f6:54:d2:36:b4:c7:c9:9d:4e:bc:45:6c:
34:dd:df:d4:04:5d:0d:56:a1:35:fd:29:0e:26:9b:
77:aa:21:3b:24:5c:73:46:51:35:d8:e5:79:1d:52:
86:ce:6f:6c:e1:cd:1c:6c:92:77:07:05:fc:33:d5:
cb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:67:F7:13:73:19:16:46:F0:9A:F8:34:46:7B:60:D4:EE:B4:31:98
X509v3 Authority Key Identifier:
keyid:3B:55:E7:FE:B9:07:13:72:99:F5:79:2C:36:39:5E:FB:A9:B3:4B:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1Xn_rkHE3KZ9XksNjle-6mzS2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8b768c-0e0a-4ad3-9100-a441e24be036/1/O1Xn_rkHE3KZ9XksNjle-6mzS2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4b:98:1a:f5:6a:3e:86:c2:02:55:20:11:b3:28:ee:d3:c9:
4b:42:75:e0:c7:93:57:42:97:95:3f:6c:8a:b0:aa:fe:8c:56:
9b:07:41:bc:63:85:69:49:fe:1b:db:33:d4:f9:f5:29:cc:d1:
3d:db:26:94:74:74:28:51:8c:68:95:b0:5a:03:99:ef:9c:ad:
ed:5e:5f:5b:9f:59:29:7a:00:61:0f:52:a8:54:98:f2:09:99:
eb:2a:e0:45:5a:6f:ec:69:91:e8:e3:97:bf:53:4f:70:7f:fb:
13:ad:76:17:90:24:f8:df:b9:b1:15:ff:0b:e7:3e:85:af:4a:
5c:b1:27:1f:dc:73:ae:90:7a:10:4e:3b:36:86:5e:f1:17:c1:
b1:a7:a8:51:27:3a:86:78:14:83:c3:0b:c6:5d:27:4a:15:c8:
49:52:c5:92:76:9c:7e:12:e5:e3:62:c0:a0:00:61:26:f2:7b:
87:63:0b:83:83:d9:a9:83:d2:e7:be:3a:d8:9c:09:de:a3:f3:
e4:16:e1:d4:ef:1e:c8:b4:33:bc:31:68:30:d0:76:e1:50:fe:
ca:df:71:18:92:4c:b8:eb:24:1f:49:01:c1:d0:97:d5:12:bb:
81:1b:ad:23:f4:55:b9:69:74:74:62:f5:3e:e5:62:2e:ac:d3:
29:46:87:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8coWSh6f7DC63LNZr8907MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNTVlN2ZlYjkwNzEzNzI5OWY1NzkyYzM2Mzk1ZWZiYTli
MzRiNjIwHhcNMjUwMTMxMTMwMDA5WhcNMjUwMjAxMTMwMDA5WjAzMTEwLwYDVQQD
Eyg5YzY3ZjcxMzczMTkxNjQ2ZjA5YWY4MzQ0NjdiNjBkNGVlYjQzMTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvb03//77V0FxfwR4TlpySqJyzYEf
pq7S0MK3+PFjJpQZQi0AKpLJ6If9/2thyHvuun7HHMXbLB7yajL5aDRs0lDrZQD7
qcincqq1rc41JYEg6i2oWb9TDRuGTnkxnoQJUbOw+kuNhAiXLzlRF5OWhdveXobb
6DnIWip16JDeMjHOleScexx2gXAWP8BRZFL2H+o06oF2AT5bUBuNV9h+/w8GQ3yq
0c9OO1Xs1ZqXEcHXQqs5LGupz2vplfdL+f4dvQuPI0b2VNI2tMfJnU68RWw03d/U
BF0NVqE1/SkOJpt3qiE7JFxzRlE12OV5HVKGzm9s4c0cbJJ3BwX8M9XL2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxn9xNzGRZG8Jr4NEZ7YNTutDGYMB8GA1UdIwQY
MBaAFDtV5/65BxNymfV5LDY5Xvups0tiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzFYbl9ya0hFM0taOVhrc05qbGUtNm16UzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84Yjc2OGMtMGUwYS00YWQzLTkxMDAt
YTQ0MWUyNGJlMDM2LzEvTzFYbl9ya0hFM0taOVhrc05qbGUtNm16UzJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84Yjc2OGMtMGUwYS00YWQzLTkxMDAtYTQ0MWUyNGJlMDM2
LzEvTzFYbl9ya0hFM0taOVhrc05qbGUtNm16UzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALUuYGvVq
PobCAlUgEbMo7tPJS0J14MeTV0KXlT9sirCq/oxWmwdBvGOFaUn+G9sz1Pn1KczR
PdsmlHR0KFGMaJWwWgOZ75yt7V5fW59ZKXoAYQ9SqFSY8gmZ6yrgRVpv7GmR6OOX
v1NPcH/7E612F5Ak+N+5sRX/C+c+ha9KXLEnH9xzrpB6EE47NoZe8RfBsaeoUSc6
hngUg8MLxl0nShXISVLFknacfhLl42LAoABhJvJ7h2MLg4PZqYPS57462JwJ3qPz
5Bbh1O8eyLQzvDFoMNB24VD+yt9xGJJMuOskH0kBwdCX1RK7gRutI/RVuWl0dGL1
PuViLqzTKUaHlw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:27 2025 by rpki-client