Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
File: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft (raw, json)
Hash identifier: WKKtc98jlg+thxVK3aZTYy0Ncj3uCF0g41nUq6xjXbs=
Subject key identifier: 2D:B8:17:24:A8:8A:7B:B0:B4:F9:B7:EE:34:BA:53:73:80:FE:E3:B7
Authority key identifier: A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
Certificate issuer: /CN=a392fc96a48789514eb09f5674b59da52c911483
Certificate serial: 0194BC3BBB756BCF4B492BB6FFC2F280DCFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
Manifest number: 08A0
Signing time: Fri 31 Jan 2025 12:00:18 +0000
Manifest this update: Fri 31 Jan 2025 12:00:18 +0000
Manifest next update: Sat 01 Feb 2025 12:00:18 +0000
Files and hashes: 1: o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl (hash: EqyeoIJBqy1qPsDHI6845z+QhKFRf3nPUGSQh2NL4eQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:bb:75:6b:cf:4b:49:2b:b6:ff:c2:f2:80:dc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a392fc96a48789514eb09f5674b59da52c911483
Validity
Not Before: Jan 31 12:00:18 2025 GMT
Not After : Feb 1 12:00:18 2025 GMT
Subject: CN=2db81724a88a7bb0b4f9b7ee34ba537380fee3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:97:de:72:bb:06:ac:12:7b:a1:4e:9a:e6:71:
77:71:28:2a:8d:37:5d:c2:23:ce:bf:74:59:a5:9c:
82:3f:46:88:3c:20:e6:b1:c1:47:9c:2d:a1:7e:02:
b8:da:3d:95:88:e6:6b:85:8f:7b:ff:51:6b:92:05:
f4:97:85:c3:9c:bc:56:1d:12:b2:a7:d9:df:3d:5c:
f3:99:a9:6d:ba:ab:cc:a6:4d:61:5d:82:d5:b1:fe:
80:2f:6b:14:5d:b5:f7:2e:2a:47:4f:de:fb:0d:24:
41:b5:7a:95:dd:94:0d:21:e3:b9:00:f2:51:4a:e6:
21:dd:05:20:d1:7b:47:04:e8:5c:fc:88:99:cf:ed:
df:96:85:a5:44:d0:0c:c1:56:ef:4e:ec:93:c1:8a:
21:56:f2:fd:9f:41:8b:a3:16:1e:ad:0e:d8:d9:39:
42:f3:1e:8c:1a:dd:ab:dc:0c:5f:91:32:b7:d6:3a:
6f:cd:0e:03:0f:25:12:8c:50:b3:d0:6a:98:b5:ce:
59:1b:4a:9c:ec:a6:6f:fe:85:83:5a:df:c7:ff:70:
86:0c:3b:80:51:59:3c:c7:f2:ef:f8:79:d5:5d:dc:
da:70:0d:cd:ea:28:4f:9c:e4:c7:23:eb:3c:f4:79:
99:86:63:e4:3f:c0:e9:09:6b:04:3a:cf:8e:cf:9d:
d9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B8:17:24:A8:8A:7B:B0:B4:F9:B7:EE:34:BA:53:73:80:FE:E3:B7
X509v3 Authority Key Identifier:
keyid:A3:92:FC:96:A4:87:89:51:4E:B0:9F:56:74:B5:9D:A5:2C:91:14:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e78f83-5384-4c36-8f51-883f2f6cbf04/1/o5L8lqSHiVFOsJ9WdLWdpSyRFIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9d:c1:44:04:6e:4a:1b:76:67:9d:17:48:a6:89:ef:56:e4:
9a:ea:2c:ec:1a:f1:d5:7f:7c:15:08:e3:bd:76:d5:d0:ef:b8:
e6:8f:cc:9a:8d:56:cb:ea:ca:d1:50:d4:12:a9:33:f8:4e:ef:
35:34:98:53:55:be:02:68:c6:e5:38:61:14:93:1e:79:66:36:
d8:47:a7:05:7a:19:1f:d8:4c:ed:d9:cb:0f:92:68:1e:af:ed:
ec:55:31:b8:10:3a:cf:f9:dd:b0:99:80:b1:1f:5d:be:09:d6:
22:e1:c9:9d:b4:33:b5:7a:3f:23:de:2d:0a:21:6a:f7:8e:d7:
2b:07:1f:5e:91:2c:92:ad:8d:c2:06:53:28:ac:27:1c:09:e3:
76:d8:f6:37:61:32:fa:8a:55:44:09:f4:56:fe:d4:57:41:32:
14:cd:30:aa:f0:e3:c2:70:11:b0:02:20:a0:8c:0f:63:bd:6c:
9d:8c:f6:3e:93:8b:a8:86:c7:73:f3:91:ea:23:24:73:4d:95:
3c:b6:d1:ac:44:71:c7:fd:fe:05:11:b8:c7:84:37:b5:04:31:
b2:d3:2f:56:fe:25:1e:8c:5f:67:af:af:be:ca:ad:f1:54:3c:
16:49:2a:93:80:7c:b0:04:7a:4f:b2:cc:7a:fc:00:5d:be:58:
a1:40:f5:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O7t1a89LSSu2/8LygNz/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzOTJmYzk2YTQ4Nzg5NTE0ZWIwOWY1Njc0YjU5ZGE1MmM5
MTE0ODMwHhcNMjUwMTMxMTIwMDE4WhcNMjUwMjAxMTIwMDE4WjAzMTEwLwYDVQQD
EygyZGI4MTcyNGE4OGE3YmIwYjRmOWI3ZWUzNGJhNTM3MzgwZmVlM2I3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5fecrsGrBJ7oU6a5nF3cSgqjTdd
wiPOv3RZpZyCP0aIPCDmscFHnC2hfgK42j2ViOZrhY97/1FrkgX0l4XDnLxWHRKy
p9nfPVzzmaltuqvMpk1hXYLVsf6AL2sUXbX3LipHT977DSRBtXqV3ZQNIeO5APJR
SuYh3QUg0XtHBOhc/IiZz+3floWlRNAMwVbvTuyTwYohVvL9n0GLoxYerQ7Y2TlC
8x6MGt2r3AxfkTK31jpvzQ4DDyUSjFCz0GqYtc5ZG0qc7KZv/oWDWt/H/3CGDDuA
UVk8x/Lv+HnVXdzacA3N6ihPnOTHI+s89HmZhmPkP8DpCWsEOs+Oz53ZVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC24FySoinuwtPm37jS6U3OA/uO3MB8GA1UdIwQY
MBaAFKOS/Jakh4lRTrCfVnS1naUskRSDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzVMOGxxU0hpVkZPc0o5V2RMV2RwU3lSRklNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lNzhmODMtNTM4NC00YzM2LThmNTEt
ODgzZjJmNmNiZjA0LzEvbzVMOGxxU0hpVkZPc0o5V2RMV2RwU3lSRklNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lNzhmODMtNTM4NC00YzM2LThmNTEtODgzZjJmNmNiZjA0
LzEvbzVMOGxxU0hpVkZPc0o5V2RMV2RwU3lSRklNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApp3BRARu
Sht2Z50XSKaJ71bkmuos7Brx1X98FQjjvXbV0O+45o/Mmo1Wy+rK0VDUEqkz+E7v
NTSYU1W+AmjG5ThhFJMeeWY22EenBXoZH9hM7dnLD5JoHq/t7FUxuBA6z/ndsJmA
sR9dvgnWIuHJnbQztXo/I94tCiFq947XKwcfXpEskq2NwgZTKKwnHAnjdtj2N2Ey
+opVRAn0Vv7UV0EyFM0wqvDjwnARsAIgoIwPY71snYz2PpOLqIbHc/OR6iMkc02V
PLbRrERxx/3+BRG4x4Q3tQQxstMvVv4lHoxfZ6+vvsqt8VQ8Fkkqk4B8sAR6T7LM
evwAXb5YoUD1UA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:44 2025 by rpki-client