Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
File: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft (raw, json)
Hash identifier: cxzzdcUA/DHC47RcborsqNdRVxQtbFkmONnNlaJq5Wk=
Subject key identifier: 31:7C:D8:B9:81:38:D4:3E:6C:A1:B2:B6:75:67:A1:31:3B:6C:81:61
Authority key identifier: 38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
Certificate issuer: /CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Certificate serial: 0194BD8526A54210958135A7AD1C13A01CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
Manifest number: 064C
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl (hash: 7zQsn2lNFdZ99gmEbfg5t64OeyVIs8hSP6QnrTI6F84=)
2: cNiza7IEiNMNBNBagOrbk4czUFI.roa (hash: cxXOTzwPl8qSVNIA1za+AwOz7dJ4d9CdZy9RaFccNUA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:26:a5:42:10:95:81:35:a7:ad:1c:13:a0:1c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3896d9f39201a49fa1369582e18f1a2bb965b283
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=317cd8b98138d43e6ca1b2b67567a1313b6c8161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:1c:e2:d7:ad:b8:66:8d:35:6d:95:cc:92:
de:25:7c:7e:ff:c6:d3:11:43:e1:47:04:ca:ae:02:
97:81:77:7f:ba:b4:17:97:3e:6d:e2:a1:f6:b4:66:
19:b6:e4:6f:4c:58:7b:58:5f:ca:2c:e3:19:f9:85:
16:46:4c:81:eb:d7:61:80:41:05:af:98:7f:ea:f2:
71:af:d7:61:3f:38:7a:c1:3e:61:c2:1b:8e:a0:14:
a4:de:28:8e:d8:06:a5:a3:32:30:cc:20:04:f8:e7:
f1:c2:df:cb:73:94:8f:56:86:2c:a9:1a:b0:dc:6e:
0c:0f:9f:ad:46:9c:f1:73:9f:87:dc:3c:23:1c:f7:
6d:47:87:ba:b0:ae:0e:c1:c5:77:b3:fe:c9:02:c3:
31:ff:e3:20:18:df:5d:1d:e9:66:7c:72:92:aa:c1:
64:02:0e:7a:2d:6d:23:8e:79:a3:82:50:ce:88:58:
ad:ff:ca:87:b4:f3:92:87:3e:bf:05:56:8a:73:b6:
02:50:0e:c7:a5:ad:a0:23:96:fb:af:dd:08:d8:bd:
d7:21:e1:dd:be:52:fb:56:3c:b9:55:2a:c0:1a:87:
50:a6:74:2f:06:64:68:81:33:55:b2:fe:54:9f:3c:
ad:3a:c3:30:95:7e:ab:6b:e8:0a:0f:3c:53:a7:2f:
ed:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7C:D8:B9:81:38:D4:3E:6C:A1:B2:B6:75:67:A1:31:3B:6C:81:61
X509v3 Authority Key Identifier:
keyid:38:96:D9:F3:92:01:A4:9F:A1:36:95:82:E1:8F:1A:2B:B9:65:B2:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/784601-0461-4753-8a52-e80a05e39f4b/1/OJbZ85IBpJ-hNpWC4Y8aK7llsoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:51:45:3b:93:3c:45:43:75:68:bc:e4:ad:83:f1:6f:45:1f:
94:be:90:5f:b4:83:50:57:e9:11:e9:2f:d1:67:dd:c3:7a:c2:
92:05:4f:e2:d9:02:a8:f4:4a:ab:4c:a1:18:e6:62:7a:21:9b:
00:98:eb:df:d8:6b:e4:d0:e8:8a:d7:ce:4a:5e:9b:ae:c7:6b:
ed:aa:59:70:d4:66:4f:30:46:18:bc:0c:4b:bf:a5:b4:76:4b:
fc:68:ca:5b:f7:74:60:95:49:10:4e:8f:06:25:6f:0d:0a:9b:
7b:14:53:ba:ec:f4:5c:72:f0:63:f3:2a:23:67:71:12:d3:e3:
d6:b5:ab:a6:ce:95:e2:78:11:6f:fa:72:0c:69:06:d8:40:66:
ca:f5:11:35:4d:e8:48:6b:d8:2f:35:2c:97:f1:23:7a:0e:22:
b0:3b:75:86:0a:49:56:6b:c9:7f:c0:18:6d:db:96:85:ed:fc:
25:8a:d6:d4:42:70:73:83:ea:a5:95:2a:0f:83:e1:b4:6f:10:
91:78:5e:90:06:a4:08:be:3d:7b:5f:d8:54:12:2c:7f:c1:40:
ec:89:30:86:4d:14:65:8e:dd:23:ea:ac:53:61:89:38:3b:c5:
1f:28:6d:be:1c:ff:d2:95:45:6c:6e:8f:64:67:b5:85:1b:68:
34:ba:6d:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hSalQhCVgTWnrRwToBz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OTZkOWYzOTIwMWE0OWZhMTM2OTU4MmUxOGYxYTJiYjk2
NWIyODMwHhcNMjUwMTMxMTgwMDA3WhcNMjUwMjAxMTgwMDA3WjAzMTEwLwYDVQQD
EygzMTdjZDhiOTgxMzhkNDNlNmNhMWIyYjY3NTY3YTEzMTNiNmM4MTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV8c4tetuGaNNW2VzJLeJXx+/8bT
EUPhRwTKrgKXgXd/urQXlz5t4qH2tGYZtuRvTFh7WF/KLOMZ+YUWRkyB69dhgEEF
r5h/6vJxr9dhPzh6wT5hwhuOoBSk3iiO2AalozIwzCAE+Ofxwt/Lc5SPVoYsqRqw
3G4MD5+tRpzxc5+H3DwjHPdtR4e6sK4OwcV3s/7JAsMx/+MgGN9dHelmfHKSqsFk
Ag56LW0jjnmjglDOiFit/8qHtPOShz6/BVaKc7YCUA7Hpa2gI5b7r90I2L3XIeHd
vlL7Vjy5VSrAGodQpnQvBmRogTNVsv5UnzytOsMwlX6ra+gKDzxTpy/t1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDF82LmBONQ+bKGytnVnoTE7bIFhMB8GA1UdIwQY
MBaAFDiW2fOSAaSfoTaVguGPGiu5ZbKDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy83ODQ2MDEtMDQ2MS00NzUzLThhNTIt
ZTgwYTA1ZTM5ZjRiLzEvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy83ODQ2MDEtMDQ2MS00NzUzLThhNTItZTgwYTA1ZTM5ZjRi
LzEvT0piWjg1SUJwSi1oTnBXQzRZOGFLN2xsc29NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj1FFO5M8
RUN1aLzkrYPxb0UflL6QX7SDUFfpEekv0Wfdw3rCkgVP4tkCqPRKq0yhGOZieiGb
AJjr39hr5NDoitfOSl6brsdr7apZcNRmTzBGGLwMS7+ltHZL/GjKW/d0YJVJEE6P
BiVvDQqbexRTuuz0XHLwY/MqI2dxEtPj1rWrps6V4ngRb/pyDGkG2EBmyvURNU3o
SGvYLzUsl/Ejeg4isDt1hgpJVmvJf8AYbduWhe38JYrW1EJwc4PqpZUqD4PhtG8Q
kXhekAakCL49e1/YVBIsf8FA7Ikwhk0UZY7dI+qsU2GJODvFHyhtvhz/0pVFbG6P
ZGe1hRtoNLptVg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:57 2025 by rpki-client