Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
File: odcYUzJOsGD7r8mIIzhgSZyWxTo.mft (raw, json)
Hash identifier: YF30FeCOpHndLztC7vsFnhnMRCjPNenn+1GwHzPgE7E=
Subject key identifier: 48:6D:CD:E8:DE:A9:2D:F7:32:A0:DB:9E:DB:28:FC:22:27:F3:A1:17
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 0194BC3C24E6C99429D0B61699B5E03EEE35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
Manifest number: 110C
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: C8QSMz8GNoIQm4uSFWS26QwX4TU.roa (hash: NCS38C69vxkOze1iM8evBR20KFQKimFCiPTQOaoZSEg=)
2: XZOzWNS9uSJXxdofEgbqQ-4LX8Q.roa (hash: +R0Sy7oAn0ABCK0E7oKA/ofkAMnGgDdtdmPnmJOjdTs=)
3: YCQuqCy9NuRyU0S6FabSa0c6NJs.roa (hash: z0MGBwlcQwzapOIPDSPyZ4kB4JdwESi59TmNtwz3tdw=)
4: gf5XFlgvC8pERwrlK5LoL2sXlHE.roa (hash: JPyHl8l/41KirDeXfkpcWORF22TQZRLVrNb1aXqrS3E=)
5: odcYUzJOsGD7r8mIIzhgSZyWxTo.crl (hash: hJDcgOSrS8Je2nh/AnZNR8GcqFYMfnXPlttdljbBpFs=)
6: zQz3tWtapn8qKz4rYeWGGnS9boI.roa (hash: Oet1y32LyQ4if4pkKw3gO80qX4zMy1K2uegwxuTNvQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:24:e6:c9:94:29:d0:b6:16:99:b5:e0:3e:ee:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=486dcde8dea92df732a0db9edb28fc2227f3a117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:83:8b:b7:d9:16:db:7c:c2:cc:1f:5e:01:3b:
01:d6:eb:88:86:ac:ab:2d:bf:dc:22:cd:a5:b4:f4:
cf:6e:8a:dd:ba:42:1e:15:4d:07:4d:e6:22:7e:bc:
dc:e3:e5:7b:5b:a8:f8:71:9f:5b:8c:19:15:9f:22:
da:5b:aa:2d:5e:41:c5:ee:29:7d:b8:cf:b4:49:83:
e9:87:71:9f:a9:cc:cc:ad:6b:dc:c9:e8:a3:83:a7:
2d:3c:6e:70:f2:a9:25:e1:a1:9d:cf:da:96:cd:e6:
fe:c5:70:f9:df:7a:05:d3:7b:85:85:81:49:67:72:
85:56:64:30:a3:22:f5:0d:24:8f:5e:5c:79:bf:a9:
95:38:c3:44:7b:b2:51:32:2c:fb:e5:a1:8e:19:19:
fb:7d:ce:a6:a3:ed:98:f3:ea:14:3a:46:c3:49:7f:
d4:9b:f8:e5:ad:71:6b:0d:25:77:0c:86:c6:73:cf:
e9:c3:b4:cd:1d:57:1e:b2:68:ff:6d:b2:a4:c7:65:
9d:23:05:65:7c:ad:77:32:6f:9d:ea:62:f2:c2:17:
d7:4c:22:1e:10:71:ca:d6:db:aa:2a:5f:6e:1a:1e:
00:e1:a8:f8:e6:e4:2a:4d:5b:df:0e:86:1b:08:5b:
9e:4b:04:11:4f:0b:b8:71:ac:37:ac:d6:b6:d8:b1:
98:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6D:CD:E8:DE:A9:2D:F7:32:A0:DB:9E:DB:28:FC:22:27:F3:A1:17
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:f6:9a:e5:b2:ad:6b:d7:0e:df:25:26:ce:fe:5c:19:77:c2:
e6:8d:f7:5e:9f:d4:b7:52:5e:45:6d:f7:77:21:ba:04:b4:0b:
27:fb:c3:f9:eb:2a:02:b3:0c:b7:17:db:d4:ae:c9:65:81:da:
e2:c6:fe:a3:23:51:a4:28:6b:06:6d:76:10:54:4c:6d:48:ed:
f8:58:cc:23:be:a4:b9:44:db:53:c0:52:05:06:ad:ab:5e:ed:
5f:ec:5d:30:3a:dc:73:21:9a:f4:52:a8:e4:d1:40:13:19:a3:
00:30:15:51:fe:87:8b:58:06:21:59:0a:e4:25:87:5c:4f:04:
50:ab:8a:9a:09:52:7b:4a:33:41:13:18:2f:3f:f2:09:82:0b:
c5:b4:44:42:0d:9e:fd:a8:30:4c:cc:e9:d4:d5:ad:fa:b1:41:
4b:c8:7f:0a:27:87:83:1b:c0:45:e1:0f:79:4d:40:77:b8:e9:
64:58:10:a3:a4:66:c3:50:a8:a8:c0:3f:34:82:38:3c:34:b3:
bd:67:12:43:78:2e:6e:d8:20:8a:ff:54:59:f0:cc:53:a4:67:
b7:00:4e:bf:9c:9f:17:12:46:8e:9c:e7:93:34:55:14:01:c3:
91:b0:09:7a:4c:a0:e2:70:e0:d2:25:d0:8b:d3:08:be:67:10:
1f:3d:99:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PCTmyZQp0LYWmbXgPu41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDcxODUzMzI0ZWIwNjBmYmFmYzk4ODIzMzg2MDQ5OWM5
NmM1M2EwHhcNMjUwMTMxMTIwMDQ1WhcNMjUwMjAxMTIwMDQ1WjAzMTEwLwYDVQQD
Eyg0ODZkY2RlOGRlYTkyZGY3MzJhMGRiOWVkYjI4ZmMyMjI3ZjNhMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioOLt9kW23zCzB9eATsB1uuIhqyr
Lb/cIs2ltPTPbordukIeFU0HTeYifrzc4+V7W6j4cZ9bjBkVnyLaW6otXkHF7il9
uM+0SYPph3GfqczMrWvcyeijg6ctPG5w8qkl4aGdz9qWzeb+xXD533oF03uFhYFJ
Z3KFVmQwoyL1DSSPXlx5v6mVOMNEe7JRMiz75aGOGRn7fc6mo+2Y8+oUOkbDSX/U
m/jlrXFrDSV3DIbGc8/pw7TNHVcesmj/bbKkx2WdIwVlfK13Mm+d6mLywhfXTCIe
EHHK1tuqKl9uGh4A4aj45uQqTVvfDoYbCFueSwQRTwu4caw3rNa22LGYmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhtzejeqS33MqDbntso/CIn86EXMB8GA1UdIwQY
MBaAFKHXGFMyTrBg+6/JiCM4YEmclsU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUt
NzA2MTM1NmJlZjFiLzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUtNzA2MTM1NmJlZjFi
LzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/aa5bKt
a9cO3yUmzv5cGXfC5o33Xp/Ut1JeRW33dyG6BLQLJ/vD+esqArMMtxfb1K7JZYHa
4sb+oyNRpChrBm12EFRMbUjt+FjMI76kuUTbU8BSBQatq17tX+xdMDrccyGa9FKo
5NFAExmjADAVUf6Hi1gGIVkK5CWHXE8EUKuKmglSe0ozQRMYLz/yCYILxbREQg2e
/agwTMzp1NWt+rFBS8h/CieHgxvAReEPeU1Ad7jpZFgQo6Rmw1CoqMA/NII4PDSz
vWcSQ3gubtggiv9UWfDMU6RntwBOv5yfFxJGjpznkzRVFAHDkbAJekyg4nDg0iXQ
i9MIvmcQHz2ZJA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:39 2025 by rpki-client