Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
File: OUKesL2HA74uXwrMwoG_IhYEsM4.mft (raw, json)
Hash identifier: ztAMZA6UXbltjImVBdWcFCQFmJ+RL1WQD/2QyhV4NF8=
Subject key identifier: 39:3B:B0:75:91:78:75:F5:39:A4:6E:66:AE:79:4E:55:4C:73:9B:C5
Authority key identifier: 39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
Certificate issuer: /CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Certificate serial: 0194BC04CAE3FAABBE8DF328C79F6973C7A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
Manifest number: 0546
Signing time: Fri 31 Jan 2025 11:00:18 +0000
Manifest this update: Fri 31 Jan 2025 11:00:18 +0000
Manifest next update: Sat 01 Feb 2025 11:00:18 +0000
Files and hashes: 1: AspvYduc_Jb9y8GXYBDLcC-_8EE.roa (hash: ensOUkmx91RQ9/R5jlP5oQpNE74zuacX+6PWKXjdOOE=)
2: OUKesL2HA74uXwrMwoG_IhYEsM4.crl (hash: uU8w6hfdv3kPc/lLNk5dzE/6oXzNpyjVGzhRH0t47QU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ca:e3:fa:ab:be:8d:f3:28:c7:9f:69:73:c7:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39429eb0bd8703be2e5f0accc281bf221604b0ce
Validity
Not Before: Jan 31 11:00:18 2025 GMT
Not After : Feb 1 11:00:18 2025 GMT
Subject: CN=393bb075917875f539a46e66ae794e554c739bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:78:ae:5c:c7:45:f0:98:e6:2a:8f:84:00:
4d:b8:0f:ad:93:65:46:85:c9:6b:15:89:ce:7e:10:
e6:5c:c5:17:92:c7:39:71:01:54:01:b4:09:8d:0c:
3b:0b:0c:f7:35:f8:52:a3:3d:d7:33:c0:f7:d0:e9:
a8:3c:68:64:c3:11:e3:f9:4f:ab:f5:8a:70:c0:05:
23:f5:d0:c4:bc:0c:f3:13:fc:8d:61:69:0b:4d:2d:
b9:43:b8:07:90:dd:9e:da:fa:1d:56:b6:6f:43:34:
19:a0:7b:7f:dd:ea:b7:10:a5:fe:c7:fc:43:0e:37:
05:b2:e2:b4:4a:38:1c:d7:3c:7c:13:bc:c7:84:da:
31:1a:51:5b:a9:4b:9f:8d:7e:56:87:09:56:ce:5b:
4c:16:ab:c4:13:07:92:84:25:59:32:12:cb:3f:f6:
fd:67:4d:c1:60:2a:a9:0a:a7:70:58:41:73:68:10:
e4:35:c3:57:58:cd:ac:e9:f2:56:6d:35:4c:af:b8:
5c:1a:eb:fa:28:46:bb:62:43:5e:ee:d1:05:7d:2a:
cf:c4:2c:71:ca:c6:af:c3:9d:e9:4b:32:08:95:b4:
99:9f:a9:37:67:29:cf:63:68:a6:c8:cd:87:a2:a1:
cc:ee:17:83:0e:c2:f2:cc:56:55:2a:49:be:e0:06:
7f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3B:B0:75:91:78:75:F5:39:A4:6E:66:AE:79:4E:55:4C:73:9B:C5
X509v3 Authority Key Identifier:
keyid:39:42:9E:B0:BD:87:03:BE:2E:5F:0A:CC:C2:81:BF:22:16:04:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OUKesL2HA74uXwrMwoG_IhYEsM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/01eafc-d65a-4a77-ba73-f2c48faf7f3d/1/OUKesL2HA74uXwrMwoG_IhYEsM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c8:e7:fa:96:c2:0d:dd:db:00:30:52:da:cf:1d:01:6a:1d:
b5:51:21:e4:75:a7:12:c3:9c:98:6e:aa:18:ae:5e:73:c0:33:
d5:3f:a7:f6:e2:0a:a8:e4:0a:20:63:12:f8:65:2a:5a:c6:bf:
e7:0d:27:ac:f7:67:7c:87:9c:55:2b:b1:fa:fb:8f:dc:03:f3:
b5:5e:a7:a4:96:a9:71:28:95:24:35:2b:ca:59:11:9b:1d:19:
65:63:7b:50:43:1b:b0:09:f1:75:18:2b:c9:b9:c9:35:20:5d:
cd:44:72:ac:ef:4f:5d:4a:b4:16:46:74:1c:63:65:6f:f4:ed:
06:2d:95:40:08:a9:a6:c7:28:93:ca:47:04:b3:2f:f5:09:cb:
12:64:90:d5:43:3b:61:e3:fb:44:8a:45:67:94:1a:c6:f6:73:
62:48:36:87:6c:00:97:35:0c:ad:e2:aa:f4:9f:e8:79:ca:7f:
7d:e4:dd:ec:8e:78:79:09:d4:f1:22:3c:c8:47:f8:73:d3:06:
de:07:02:86:64:1b:e0:7c:a4:cf:ce:76:62:5b:ea:2b:a1:0b:
bb:71:11:ea:d8:8a:ef:7e:87:8a:b0:6a:7d:4e:c4:6a:84:1e:
19:1d:7e:8c:52:3f:ad:47:bf:8a:cf:05:34:d1:89:d4:d0:57:
93:a2:7b:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BMrj+qu+jfMox59pc8ejMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NDI5ZWIwYmQ4NzAzYmUyZTVmMGFjY2MyODFiZjIyMTYw
NGIwY2UwHhcNMjUwMTMxMTEwMDE4WhcNMjUwMjAxMTEwMDE4WjAzMTEwLwYDVQQD
EygzOTNiYjA3NTkxNzg3NWY1MzlhNDZlNjZhZTc5NGU1NTRjNzM5YmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv54rlzHRfCY5iqPhABNuA+tk2VG
hclrFYnOfhDmXMUXksc5cQFUAbQJjQw7Cwz3NfhSoz3XM8D30OmoPGhkwxHj+U+r
9YpwwAUj9dDEvAzzE/yNYWkLTS25Q7gHkN2e2vodVrZvQzQZoHt/3eq3EKX+x/xD
DjcFsuK0Sjgc1zx8E7zHhNoxGlFbqUufjX5WhwlWzltMFqvEEweShCVZMhLLP/b9
Z03BYCqpCqdwWEFzaBDkNcNXWM2s6fJWbTVMr7hcGuv6KEa7YkNe7tEFfSrPxCxx
ysavw53pSzIIlbSZn6k3ZynPY2imyM2HoqHM7heDDsLyzFZVKkm+4AZ/dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDk7sHWReHX1OaRuZq55TlVMc5vFMB8GA1UdIwQY
MBaAFDlCnrC9hwO+Ll8KzMKBvyIWBLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wMWVhZmMtZDY1YS00YTc3LWJhNzMt
ZjJjNDhmYWY3ZjNkLzEvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wMWVhZmMtZDY1YS00YTc3LWJhNzMtZjJjNDhmYWY3ZjNk
LzEvT1VLZXNMMkhBNzR1WHdyTXdvR19JaFlFc000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcjn+pbC
Dd3bADBS2s8dAWodtVEh5HWnEsOcmG6qGK5ec8Az1T+n9uIKqOQKIGMS+GUqWsa/
5w0nrPdnfIecVSux+vuP3APztV6npJapcSiVJDUrylkRmx0ZZWN7UEMbsAnxdRgr
ybnJNSBdzURyrO9PXUq0FkZ0HGNlb/TtBi2VQAippscok8pHBLMv9QnLEmSQ1UM7
YeP7RIpFZ5QaxvZzYkg2h2wAlzUMreKq9J/oecp/feTd7I54eQnU8SI8yEf4c9MG
3gcChmQb4Hykz852YlvqK6ELu3ER6tiK736HirBqfU7EaoQeGR1+jFI/rUe/is8F
NNGJ1NBXk6J74g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:17:41 2025 by rpki-client