Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/b8b7e4-f4cd-4e06-b81c-c5caa7faed7d/1/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.mft
File: oCUXdNbYdJdjkKBWG3ZtQSXv5uw.mft (raw, json)
Hash identifier: 4w6rukd5C4177flJVQttNtFBGZo0nAy/d8KwA+ATflk=
Subject key identifier: F2:FE:42:92:F0:49:44:41:97:CD:17:ED:A0:AE:75:11:3F:FD:42:3F
Authority key identifier: A0:25:17:74:D6:D8:74:97:63:90:A0:56:1B:76:6D:41:25:EF:E6:EC
Certificate issuer: /CN=a0251774d6d874976390a0561b766d4125efe6ec
Certificate serial: 0194BD85A7E413D7C38638F5D907DB3B1B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/b8b7e4-f4cd-4e06-b81c-c5caa7faed7d/1/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.mft
Manifest number: 1378
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: 5eyDqPyAo9Xd99AUR3yYU66V9rw.roa (hash: MoYh7IaPPg0nfwmEO7sIyivg9TgZy97zyEzoB/AzKYk=)
2: oCUXdNbYdJdjkKBWG3ZtQSXv5uw.crl (hash: b9P5veDdoZ3h40LKwccrLY/YyCOtUes5Td01PPJuGrQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a7:e4:13:d7:c3:86:38:f5:d9:07:db:3b:1b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0251774d6d874976390a0561b766d4125efe6ec
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=f2fe4292f049444197cd17eda0ae75113ffd423f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b6:9f:b3:9f:4b:37:0e:0b:a8:72:f8:a9:62:
71:fe:5f:3a:58:2c:53:2a:48:ac:88:f4:b9:e0:49:
d2:ec:c8:9e:f2:b9:1b:2c:07:50:db:f8:74:5e:6f:
5d:8e:32:79:44:75:08:a5:70:e3:81:85:83:2b:4b:
9b:c2:f1:ea:b7:b0:62:9c:5f:41:eb:8f:fd:cc:b7:
cf:61:a7:4b:d8:38:44:5e:52:08:c7:9e:f2:8c:cc:
d5:74:1b:f4:6c:95:6b:59:87:b7:94:27:4c:07:c6:
61:84:ed:4c:f6:ed:4b:03:cf:15:48:ec:63:3e:2f:
c0:d3:dd:15:f1:64:bf:76:7c:7b:16:17:91:c6:8a:
a8:69:ff:34:66:aa:70:c1:a8:68:82:60:34:5e:10:
ec:1c:20:9b:24:87:ed:db:77:5a:6c:23:57:52:fc:
93:5c:8d:0e:e8:bf:c4:42:1a:dc:04:69:15:09:d8:
9f:f7:1f:2d:14:fc:39:35:f3:1f:b4:0a:e3:21:ee:
96:38:9a:60:39:9b:17:33:1d:8a:6f:cd:81:a6:8d:
a8:9c:f9:ac:1c:42:cb:39:eb:7f:47:0f:ea:06:d7:
00:a4:3b:31:23:1d:dd:c3:43:33:c5:d1:d9:ce:f0:
d0:29:f6:bd:ed:56:a1:28:ec:e1:9e:38:a8:bc:fc:
07:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FE:42:92:F0:49:44:41:97:CD:17:ED:A0:AE:75:11:3F:FD:42:3F
X509v3 Authority Key Identifier:
keyid:A0:25:17:74:D6:D8:74:97:63:90:A0:56:1B:76:6D:41:25:EF:E6:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b8b7e4-f4cd-4e06-b81c-c5caa7faed7d/1/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b8b7e4-f4cd-4e06-b81c-c5caa7faed7d/1/oCUXdNbYdJdjkKBWG3ZtQSXv5uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:07:cd:9e:62:5a:d5:88:4e:22:83:5f:f3:57:07:e8:aa:2f:
3c:09:90:10:df:8f:dd:e6:3e:f3:33:2b:af:08:41:87:38:9c:
71:af:8e:b3:68:28:6c:c1:16:e4:56:2a:84:42:bf:90:aa:19:
f2:61:7a:7a:27:4f:50:71:d4:91:cf:c8:a6:b3:04:53:b1:92:
e5:47:d1:19:a3:66:16:49:5d:82:0d:fa:cf:2b:52:df:ad:39:
be:40:ec:c8:25:54:6c:e4:60:8f:e8:2a:48:3a:82:82:2f:e1:
99:08:c3:17:34:f3:55:89:a9:c8:b3:18:18:05:e1:59:b5:a5:
8b:54:50:73:2d:82:94:4a:d3:b5:c3:8f:34:e6:46:16:78:82:
43:59:64:20:88:bf:92:45:05:4e:64:7b:7c:c5:0b:5e:40:9d:
70:2b:6e:c2:df:2b:5f:2d:79:52:e1:3d:73:fe:78:52:aa:d6:
f8:02:e7:d6:ea:02:f1:cb:2f:63:9e:37:e5:f5:0a:f5:66:bb:
2e:42:0f:25:9a:80:d7:a6:03:42:98:01:77:59:cc:ef:d8:97:
9d:a6:24:5b:36:27:81:f4:0a:15:86:f7:8b:1d:be:d5:27:d3:
27:15:1f:77:58:a5:d4:7a:2d:7e:ef:a6:7b:61:a6:24:2e:40:
ed:4b:4f:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hafkE9fDhjj12QfbOxsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMjUxNzc0ZDZkODc0OTc2MzkwYTA1NjFiNzY2ZDQxMjVl
ZmU2ZWMwHhcNMjUwMTMxMTgwMDQwWhcNMjUwMjAxMTgwMDQwWjAzMTEwLwYDVQQD
EyhmMmZlNDI5MmYwNDk0NDQxOTdjZDE3ZWRhMGFlNzUxMTNmZmQ0MjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Lafs59LNw4LqHL4qWJx/l86WCxT
KkisiPS54EnS7Mie8rkbLAdQ2/h0Xm9djjJ5RHUIpXDjgYWDK0ubwvHqt7BinF9B
64/9zLfPYadL2DhEXlIIx57yjMzVdBv0bJVrWYe3lCdMB8ZhhO1M9u1LA88VSOxj
Pi/A090V8WS/dnx7FheRxoqoaf80ZqpwwahogmA0XhDsHCCbJIft23dabCNXUvyT
XI0O6L/EQhrcBGkVCdif9x8tFPw5NfMftArjIe6WOJpgOZsXMx2Kb82Bpo2onPms
HELLOet/Rw/qBtcApDsxIx3dw0MzxdHZzvDQKfa97VahKOzhnjiovPwHQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPL+QpLwSURBl80X7aCudRE//UI/MB8GA1UdIwQY
MBaAFKAlF3TW2HSXY5CgVht2bUEl7+bsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0NVWGROYllkSmRqa0tCV0czWnRRU1h2NXV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9iOGI3ZTQtZjRjZC00ZTA2LWI4MWMt
YzVjYWE3ZmFlZDdkLzEvb0NVWGROYllkSmRqa0tCV0czWnRRU1h2NXV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9iOGI3ZTQtZjRjZC00ZTA2LWI4MWMtYzVjYWE3ZmFlZDdk
LzEvb0NVWGROYllkSmRqa0tCV0czWnRRU1h2NXV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxwfNnmJa
1YhOIoNf81cH6KovPAmQEN+P3eY+8zMrrwhBhzicca+Os2gobMEW5FYqhEK/kKoZ
8mF6eidPUHHUkc/IprMEU7GS5UfRGaNmFkldgg36zytS3605vkDsyCVUbORgj+gq
SDqCgi/hmQjDFzTzVYmpyLMYGAXhWbWli1RQcy2ClErTtcOPNOZGFniCQ1lkIIi/
kkUFTmR7fMULXkCdcCtuwt8rXy15UuE9c/54UqrW+ALn1uoC8csvY5435fUK9Wa7
LkIPJZqA16YDQpgBd1nM79iXnaYkWzYngfQKFYb3ix2+1SfTJxUfd1il1Hotfu+m
e2GmJC5A7UtPxA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:21 2025 by rpki-client