Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
File: oDavImaRg7om8jl2Uw40mzRlGWg.mft (raw, json)
Hash identifier: ynVo7Pm7Rjuo0xbWM34Jnae9vCsqh0Wq//PxOyn4vTI=
Subject key identifier: 9F:2F:2B:A3:C8:43:8E:9F:9E:CD:7C:67:86:17:58:64:E4:C1:34:BC
Authority key identifier: A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
Certificate issuer: /CN=a036af22669183ba26f23976530e349b34651968
Certificate serial: 0194BC04A843865B67AC7A88247CC33A0393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: oDavImaRg7om8jl2Uw40mzRlGWg.crl (hash: 3ulD44KuUAASIeB96VFIM3Nmmfu/4bWwGk90cT4T/aU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a8:43:86:5b:67:ac:7a:88:24:7c:c3:3a:03:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a036af22669183ba26f23976530e349b34651968
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=9f2f2ba3c8438e9f9ecd7c6786175864e4c134bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a7:27:47:25:ee:96:bf:de:8d:b6:90:63:71:
9c:f5:82:50:f6:46:34:72:c5:0e:50:ab:9f:3b:1c:
1c:c8:df:b4:17:66:fa:30:af:3a:db:c6:fb:07:0e:
31:1c:69:c9:3f:c5:02:59:30:86:81:70:81:76:68:
cd:ab:18:c0:16:8e:9b:7f:d3:a9:68:b0:e2:e0:67:
38:bb:a7:05:c3:87:56:d8:c2:7f:80:45:ce:e9:24:
ab:1d:7c:28:e1:a7:a6:e4:56:23:af:90:8a:c0:33:
87:8b:fc:b7:fc:ef:fa:b1:7b:cd:b1:8f:d8:a2:fb:
41:c7:9d:ff:b1:64:56:12:29:52:60:cf:0c:5d:62:
46:ab:58:24:54:1a:51:c3:ad:5e:8a:90:f5:5e:b6:
be:f9:d3:ff:10:28:f3:c4:c5:b6:ae:0c:44:49:3f:
ff:13:36:97:5f:e5:b0:0f:23:5f:d4:d4:84:f0:21:
59:03:7a:d4:1a:3c:da:03:58:5b:51:28:27:80:b6:
3c:80:bb:c2:bf:ce:84:d9:24:b6:c1:a1:73:3d:76:
e5:1e:66:69:a4:dc:0d:a7:40:b9:63:e8:79:da:63:
0b:1e:91:32:3d:3e:28:70:a5:5c:dc:03:67:0d:c3:
5a:1e:ba:84:8a:ef:2e:04:81:28:db:81:01:90:15:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2F:2B:A3:C8:43:8E:9F:9E:CD:7C:67:86:17:58:64:E4:C1:34:BC
X509v3 Authority Key Identifier:
keyid:A0:36:AF:22:66:91:83:BA:26:F2:39:76:53:0E:34:9B:34:65:19:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDavImaRg7om8jl2Uw40mzRlGWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/6ca5b6-c423-4b54-9655-7c5964990397/1/oDavImaRg7om8jl2Uw40mzRlGWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:d9:42:3a:7d:3a:33:c7:11:11:63:a8:12:1e:c3:de:45:8f:
29:1e:9b:a2:eb:de:34:04:a0:91:d0:7b:af:21:75:f3:46:9c:
5f:6d:78:fe:cf:9e:d4:ef:25:6b:f8:6e:f0:64:38:aa:41:71:
19:94:12:09:c1:1c:c5:cc:ad:45:4c:4a:c1:31:89:21:6f:d4:
90:79:bf:92:7d:ae:08:c1:49:fc:9e:d6:7f:99:56:12:0a:37:
48:e8:fc:39:b1:45:cd:5b:4f:b1:1e:aa:79:9e:df:6a:4f:62:
07:e4:b5:89:d7:75:a9:c8:f1:bb:0d:b6:dc:54:0f:61:03:47:
f8:4b:67:5f:93:91:d8:ad:5a:06:0f:b5:3b:2c:d7:7d:1f:85:
46:cd:64:62:12:40:02:7a:44:38:e9:b2:39:ee:e7:00:0d:a6:
53:22:58:77:59:86:92:f4:17:6e:30:a1:62:4e:41:9b:24:07:
2a:c2:75:28:e0:4d:1a:7f:de:d9:fc:db:45:fe:ae:df:ce:4c:
b3:89:00:3c:a8:9b:22:05:24:aa:dc:79:8c:66:9f:72:48:c0:
8d:97:93:6b:0c:ff:11:75:75:cd:48:98:73:90:9a:da:c2:39:
f0:93:00:40:ac:5c:f5:d2:ea:35:bb:d5:e8:65:28:91:f5:26:
c6:32:55:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BKhDhltnrHqIJHzDOgOTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMzZhZjIyNjY5MTgzYmEyNmYyMzk3NjUzMGUzNDliMzQ2
NTE5NjgwHhcNMjUwMTMxMTEwMDA5WhcNMjUwMjAxMTEwMDA5WjAzMTEwLwYDVQQD
Eyg5ZjJmMmJhM2M4NDM4ZTlmOWVjZDdjNjc4NjE3NTg2NGU0YzEzNGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqcnRyXulr/ejbaQY3Gc9YJQ9kY0
csUOUKufOxwcyN+0F2b6MK8628b7Bw4xHGnJP8UCWTCGgXCBdmjNqxjAFo6bf9Op
aLDi4Gc4u6cFw4dW2MJ/gEXO6SSrHXwo4aem5FYjr5CKwDOHi/y3/O/6sXvNsY/Y
ovtBx53/sWRWEilSYM8MXWJGq1gkVBpRw61eipD1Xra++dP/ECjzxMW2rgxEST//
EzaXX+WwDyNf1NSE8CFZA3rUGjzaA1hbUSgngLY8gLvCv86E2SS2waFzPXblHmZp
pNwNp0C5Y+h52mMLHpEyPT4ocKVc3ANnDcNaHrqEiu8uBIEo24EBkBXRdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8vK6PIQ46fns18Z4YXWGTkwTS8MB8GA1UdIwQY
MBaAFKA2ryJmkYO6JvI5dlMONJs0ZRloMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0RhdkltYVJnN29tOGpsMlV3NDBtelJsR1dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC82Y2E1YjYtYzQyMy00YjU0LTk2NTUt
N2M1OTY0OTkwMzk3LzEvb0RhdkltYVJnN29tOGpsMlV3NDBtelJsR1dnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC82Y2E1YjYtYzQyMy00YjU0LTk2NTUtN2M1OTY0OTkwMzk3
LzEvb0RhdkltYVJnN29tOGpsMlV3NDBtelJsR1dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArNlCOn06
M8cREWOoEh7D3kWPKR6bouveNASgkdB7ryF180acX214/s+e1O8la/hu8GQ4qkFx
GZQSCcEcxcytRUxKwTGJIW/UkHm/kn2uCMFJ/J7Wf5lWEgo3SOj8ObFFzVtPsR6q
eZ7fak9iB+S1idd1qcjxuw223FQPYQNH+EtnX5OR2K1aBg+1OyzXfR+FRs1kYhJA
AnpEOOmyOe7nAA2mUyJYd1mGkvQXbjChYk5BmyQHKsJ1KOBNGn/e2fzbRf6u385M
s4kAPKibIgUkqtx5jGafckjAjZeTawz/EXV1zUiYc5Ca2sI58JMAQKxc9dLqNbvV
6GUokfUmxjJV0A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:03 2025 by rpki-client