Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
File: OWQDC_IwvVbT_j4pwYiBujL656I.mft (raw, json)
Hash identifier: yeJwpqa65yA4AjD/UhSvm9yuabglw8SuGEmbSF0Z8PI=
Subject key identifier: 59:7D:C0:85:AF:52:77:B6:B0:88:BA:0D:EA:1D:A8:57:C5:5F:6B:46
Authority key identifier: 39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
Certificate issuer: /CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Certificate serial: 0194BCA98E5853CD492AB311FECDDE0B4291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: OWQDC_IwvVbT_j4pwYiBujL656I.crl (hash: aQa2B3ZyLBdJbyCOvLzPiEKZglWT7DbNbTsKCZkHwkQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8e:58:53:cd:49:2a:b3:11:fe:cd:de:0b:42:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3964030bf230bd56d3fe3e29c18881ba32fae7a2
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=597dc085af5277b6b088ba0dea1da857c55f6b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:3a:fb:39:5b:bf:a4:bb:68:6b:75:39:01:
80:b7:d0:62:02:2b:e8:0a:7e:12:3e:86:ae:63:8e:
f4:ef:e0:c6:17:26:70:27:b7:9d:6f:93:14:b8:49:
81:5a:13:46:a5:3f:94:62:5c:ed:dd:4b:4a:1a:98:
ec:3b:ad:fe:ed:47:8d:6b:29:58:1f:1e:7c:b7:f3:
47:41:a4:fd:fc:c3:3f:d5:3d:f5:ed:8e:3c:8d:7d:
b0:ff:97:15:98:6c:08:6c:05:65:e2:8c:d7:81:41:
16:63:65:19:04:f9:71:b8:b7:20:e5:dd:8a:f1:c6:
cd:ff:5c:18:71:33:03:d6:0c:20:80:2b:be:9a:fb:
f0:05:fa:b2:81:79:6b:87:91:c4:75:90:b0:87:30:
01:9a:8f:64:26:49:ad:cc:68:1b:9e:8c:ef:a2:93:
fe:40:19:24:8e:55:68:d2:af:6a:cd:8c:37:ed:d9:
65:8c:64:75:bc:36:9d:64:73:4b:89:07:fd:f5:62:
93:7e:9d:06:d0:64:20:c3:52:c1:3b:5c:96:79:d9:
7f:65:ab:f3:cb:ce:a9:4f:b0:80:2d:0e:e8:ee:4b:
d7:ec:d3:d7:2f:dc:1f:e1:94:0d:4c:fa:3d:d2:bb:
15:4d:86:79:44:a6:c5:24:5e:4b:68:6c:6a:da:db:
b7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7D:C0:85:AF:52:77:B6:B0:88:BA:0D:EA:1D:A8:57:C5:5F:6B:46
X509v3 Authority Key Identifier:
keyid:39:64:03:0B:F2:30:BD:56:D3:FE:3E:29:C1:88:81:BA:32:FA:E7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OWQDC_IwvVbT_j4pwYiBujL656I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/1dd26d-eae5-4e19-ac35-c993fdfc4a0b/1/OWQDC_IwvVbT_j4pwYiBujL656I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:03:16:d5:2e:c3:f3:94:9d:61:47:44:d2:ce:4e:37:2e:2e:
96:16:66:6a:17:4d:6d:fe:3d:3b:f0:2e:1f:c5:24:95:88:5d:
98:17:60:c5:d4:fc:7d:2c:85:9e:a7:01:1c:a6:67:75:50:4e:
da:1b:b2:d3:6b:b9:fd:48:d7:be:43:97:83:6b:cf:c0:93:87:
d6:1a:7f:fe:c0:5c:9e:ff:04:4c:59:9a:ab:a2:07:1d:1d:c0:
98:24:de:c7:9f:85:41:de:c9:47:e2:17:79:0c:c7:e4:30:a8:
53:07:1c:14:83:01:70:2b:9c:50:af:a1:1d:d1:7c:33:48:d8:
fd:6f:ef:e1:60:74:c0:28:aa:a5:3c:b3:e1:fa:d1:e5:0f:f5:
ee:6b:3b:20:88:e3:de:43:36:59:cf:58:e9:51:29:25:1a:26:
6a:30:0d:0f:23:7b:66:c2:a1:41:2d:4f:1c:a9:0e:0b:cc:83:
ec:d9:7a:d4:58:85:e1:94:8e:5d:23:6f:0a:53:7d:25:8d:2b:
62:38:30:e6:ab:da:7c:5c:00:f3:93:0b:d2:40:52:2e:03:d8:
bb:15:f0:e3:8e:29:11:cf:6a:ad:b8:87:e4:56:50:22:af:6e:
02:a0:0c:0e:3d:b6:bf:91:49:0a:4a:eb:3f:f9:e6:41:c7:25:
d2:48:3a:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qY5YU81JKrMR/s3eC0KRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NjQwMzBiZjIzMGJkNTZkM2ZlM2UyOWMxODg4MWJhMzJm
YWU3YTIwHhcNMjUwMTMxMTQwMDE2WhcNMjUwMjAxMTQwMDE2WjAzMTEwLwYDVQQD
Eyg1OTdkYzA4NWFmNTI3N2I2YjA4OGJhMGRlYTFkYTg1N2M1NWY2YjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzI6+zlbv6S7aGt1OQGAt9BiAivo
Cn4SPoauY4707+DGFyZwJ7edb5MUuEmBWhNGpT+UYlzt3UtKGpjsO63+7UeNaylY
Hx58t/NHQaT9/MM/1T317Y48jX2w/5cVmGwIbAVl4ozXgUEWY2UZBPlxuLcg5d2K
8cbN/1wYcTMD1gwggCu+mvvwBfqygXlrh5HEdZCwhzABmo9kJkmtzGgbnozvopP+
QBkkjlVo0q9qzYw37dlljGR1vDadZHNLiQf99WKTfp0G0GQgw1LBO1yWedl/Zavz
y86pT7CALQ7o7kvX7NPXL9wf4ZQNTPo90rsVTYZ5RKbFJF5LaGxq2tu3kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFl9wIWvUne2sIi6DeodqFfFX2tGMB8GA1UdIwQY
MBaAFDlkAwvyML1W0/4+KcGIgboy+ueiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1dRRENfSXd2VmJUX2o0cHdZaUJ1akw2NTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8xZGQyNmQtZWFlNS00ZTE5LWFjMzUt
Yzk5M2ZkZmM0YTBiLzEvT1dRRENfSXd2VmJUX2o0cHdZaUJ1akw2NTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8xZGQyNmQtZWFlNS00ZTE5LWFjMzUtYzk5M2ZkZmM0YTBi
LzEvT1dRRENfSXd2VmJUX2o0cHdZaUJ1akw2NTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgMW1S7D
85SdYUdE0s5ONy4ulhZmahdNbf49O/AuH8UklYhdmBdgxdT8fSyFnqcBHKZndVBO
2huy02u5/UjXvkOXg2vPwJOH1hp//sBcnv8ETFmaq6IHHR3AmCTex5+FQd7JR+IX
eQzH5DCoUwccFIMBcCucUK+hHdF8M0jY/W/v4WB0wCiqpTyz4frR5Q/17ms7IIjj
3kM2Wc9Y6VEpJRomajANDyN7ZsKhQS1PHKkOC8yD7Nl61FiF4ZSOXSNvClN9JY0r
Yjgw5qvafFwA85ML0kBSLgPYuxXw444pEc9qrbiH5FZQIq9uAqAMDj22v5FJCkrr
P/nmQccl0kg6Iw==
-----END CERTIFICATE-----
Generated at Thu May 1 10:18:04 2025 by rpki-client