Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
File: ojIkxQF9NOzcKNDPNkQtZb754KA.mft (raw, json)
Hash identifier: IrY5POvGjr10sKn5v64BgTKC4G9lhRzqlzrS8aprKzE=
Subject key identifier: 63:60:C8:2E:5A:E5:69:F0:16:CD:84:9D:08:2A:98:12:D1:77:69:C2
Authority key identifier: A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
Certificate issuer: /CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Certificate serial: 0194BD4E6B87464B3C0548A313840C7E1EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: bEhBHj_5ND7DPkcxJc-eHtfnjVE.roa (hash: q7DP36VzuoeI79R3/z9nukbV52RDnraBhFmpjcuFOJ0=)
2: fUWog8dQyKlZmDz3Jt4aoMe12ZM.roa (hash: m7C2vWzzKK+0unJuovK786RQ7kI+1mqtBwzlHAjE+E0=)
3: ojIkxQF9NOzcKNDPNkQtZb754KA.crl (hash: JSwZ7hDnjA/3ymJap3ixoMokpv3aq2xguoxlO7POq7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6b:87:46:4b:3c:05:48:a3:13:84:0c:7e:1e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a23224c5017d34ecdc28d0cf36442d65bef9e0a0
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=6360c82e5ae569f016cd849d082a9812d17769c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:bb:73:da:e8:79:f1:5e:45:e0:71:ce:4b:
c8:f1:b6:2e:82:41:51:8c:79:83:cd:ef:84:33:b8:
7d:ef:24:47:a4:d0:2f:dd:d2:dc:db:7a:1b:94:2e:
2d:f6:f2:3e:33:c6:2c:1a:ef:b3:63:d0:ab:7a:74:
2b:b3:ce:9f:cf:c2:8e:e9:e6:46:d5:e4:d3:de:26:
a5:1e:b4:ff:1a:15:cf:49:1f:1d:49:0f:02:c5:2c:
51:f7:6d:56:e1:34:6e:3f:39:d4:72:8e:1d:e6:83:
72:b5:30:80:e2:94:fd:e0:65:c6:3b:d9:09:76:0c:
1d:82:8f:22:e3:1b:4d:25:3b:ba:f3:e2:36:ae:9a:
77:2d:92:cc:9c:9a:f8:86:08:f0:a9:a2:1f:95:33:
d0:1a:0a:bd:d4:d4:41:b7:a5:3e:d6:a3:48:49:78:
e7:91:bb:37:b9:e3:6b:aa:52:51:14:5f:39:0c:10:
5a:44:28:7e:86:bf:e7:6d:38:11:71:b6:12:34:d8:
1f:24:84:36:39:da:ee:f0:67:0d:aa:82:46:82:c8:
3f:67:a8:44:93:b2:e5:e9:26:f4:99:ad:22:73:a9:
33:fa:35:eb:7e:82:38:f3:37:f0:1a:56:f7:aa:8b:
30:2f:bb:b0:b8:95:37:35:15:c8:bf:e5:05:b2:59:
ec:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:60:C8:2E:5A:E5:69:F0:16:CD:84:9D:08:2A:98:12:D1:77:69:C2
X509v3 Authority Key Identifier:
keyid:A2:32:24:C5:01:7D:34:EC:DC:28:D0:CF:36:44:2D:65:BE:F9:E0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ojIkxQF9NOzcKNDPNkQtZb754KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/227d14-d751-4573-9919-fec8a80ed233/1/ojIkxQF9NOzcKNDPNkQtZb754KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e5:23:50:72:38:db:5b:fe:39:64:6b:60:c2:eb:61:2f:52:
35:07:dc:07:5a:c8:17:88:6e:84:a1:62:27:d3:cb:8a:01:23:
35:dc:b2:00:ac:8a:b7:1d:99:2e:c4:5c:a8:e6:1e:fa:0a:99:
50:19:19:19:72:ab:79:dd:9b:1d:81:55:8e:3f:97:44:43:07:
b3:ba:30:ab:35:51:d5:d4:0a:7d:58:7e:43:47:df:1b:a1:03:
d5:c9:90:68:5c:92:f0:5d:ac:e5:ce:3c:ad:f4:e9:12:12:32:
5e:c9:1f:04:53:d9:a5:5a:f9:8e:96:3b:f9:8e:86:31:be:cc:
14:17:83:95:38:87:b6:09:a6:d7:86:04:bb:67:19:4a:9e:72:
f6:c6:77:c7:f6:49:91:30:0d:39:96:fb:f1:69:e4:2d:74:40:
a8:1a:6f:5b:17:cc:1d:33:e2:51:06:78:7e:f9:df:5e:ef:bf:
2a:2f:f4:ab:e4:b1:c6:65:e4:a8:f6:96:cf:1e:90:93:e3:cc:
5a:58:51:44:bb:63:17:32:19:5f:db:35:ce:e0:28:15:d8:97:
32:c0:f7:15:7c:20:5c:c5:86:5f:b7:4a:b1:9f:22:d7:76:f2:
89:0a:e5:af:6f:3e:bc:64:1a:ba:b5:70:bb:02:99:0c:a6:8d:
43:a1:36:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TmuHRks8BUijE4QMfh79MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMzIyNGM1MDE3ZDM0ZWNkYzI4ZDBjZjM2NDQyZDY1YmVm
OWUwYTAwHhcNMjUwMTMxMTcwMDIwWhcNMjUwMjAxMTcwMDIwWjAzMTEwLwYDVQQD
Eyg2MzYwYzgyZTVhZTU2OWYwMTZjZDg0OWQwODJhOTgxMmQxNzc2OWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwS7c9roefFeReBxzkvI8bYugkFR
jHmDze+EM7h97yRHpNAv3dLc23oblC4t9vI+M8YsGu+zY9CrenQrs86fz8KO6eZG
1eTT3ialHrT/GhXPSR8dSQ8CxSxR921W4TRuPznUco4d5oNytTCA4pT94GXGO9kJ
dgwdgo8i4xtNJTu68+I2rpp3LZLMnJr4hgjwqaIflTPQGgq91NRBt6U+1qNISXjn
kbs3ueNrqlJRFF85DBBaRCh+hr/nbTgRcbYSNNgfJIQ2Odru8GcNqoJGgsg/Z6hE
k7Ll6Sb0ma0ic6kz+jXrfoI48zfwGlb3qoswL7uwuJU3NRXIv+UFslnsRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNgyC5a5WnwFs2EnQgqmBLRd2nCMB8GA1UdIwQY
MBaAFKIyJMUBfTTs3CjQzzZELWW++eCgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTkt
ZmVjOGE4MGVkMjMzLzEvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi8yMjdkMTQtZDc1MS00NTczLTk5MTktZmVjOGE4MGVkMjMz
LzEvb2pJa3hRRjlOT3pjS05EUE5rUXRaYjc1NEtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+UjUHI4
21v+OWRrYMLrYS9SNQfcB1rIF4huhKFiJ9PLigEjNdyyAKyKtx2ZLsRcqOYe+gqZ
UBkZGXKred2bHYFVjj+XREMHs7owqzVR1dQKfVh+Q0ffG6ED1cmQaFyS8F2s5c48
rfTpEhIyXskfBFPZpVr5jpY7+Y6GMb7MFBeDlTiHtgmm14YEu2cZSp5y9sZ3x/ZJ
kTANOZb78WnkLXRAqBpvWxfMHTPiUQZ4fvnfXu+/Ki/0q+SxxmXkqPaWzx6Qk+PM
WlhRRLtjFzIZX9s1zuAoFdiXMsD3FXwgXMWGX7dKsZ8i13byiQrlr28+vGQaurVw
uwKZDKaNQ6E2Hg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:02 2025 by rpki-client