Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
File: osUThqzwWzqrYYEEdHjW7qG_AGI.mft (raw, json)
Hash identifier: rcFeldsF0i6xN46883romSkIhBDopOjl2/mG1+HLsNY=
Subject key identifier: 8E:58:D3:6C:15:FA:CA:E7:F4:1B:6D:54:41:01:DB:E3:39:20:D5:D2
Authority key identifier: A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
Certificate issuer: /CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Certificate serial: 0194BC3C99B050B1F92236D847286BE07E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
Manifest number: 15
Signing time: Fri 31 Jan 2025 12:01:15 +0000
Manifest this update: Fri 31 Jan 2025 12:01:15 +0000
Manifest next update: Sat 01 Feb 2025 12:01:15 +0000
Files and hashes: 1: 0cFm87h5GkHalEGqmJaLcd0Qqo8.roa (hash: jMxPSL+zdsv3eh4JmgehYYH5Kp/WnR56mTqAfCb0p0E=)
2: osUThqzwWzqrYYEEdHjW7qG_AGI.crl (hash: 2oxVbjkp0pUQ2VGSykW/Smfil8JR5EYeWY3S8zQPN0k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:99:b0:50:b1:f9:22:36:d8:47:28:6b:e0:7e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2c51386acf05b3aab6181047478d6eea1bf0062
Validity
Not Before: Jan 31 12:01:15 2025 GMT
Not After : Feb 1 12:01:15 2025 GMT
Subject: CN=8e58d36c15facae7f41b6d544101dbe33920d5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:2c:45:05:1a:16:ce:0d:76:a2:9d:ae:b1:
72:64:f5:d2:f9:1f:01:54:2c:ce:1e:87:0f:68:55:
7e:41:56:98:f5:90:12:a6:7f:91:92:89:83:33:25:
a6:36:bf:75:8e:a5:17:7d:78:e0:ed:ae:6f:13:f6:
03:65:8b:d3:c5:be:3b:d0:58:a8:61:b8:50:25:22:
67:8a:09:da:99:a6:37:77:25:f1:34:af:27:a0:3e:
af:59:2a:e7:1a:f0:92:b8:64:be:2e:23:4e:a7:1a:
8f:84:79:76:03:23:d7:83:92:05:eb:dc:7d:e0:6b:
8b:0c:65:7b:8a:b0:70:f0:0d:0d:2b:43:04:4f:cb:
05:7c:64:76:3b:19:ae:41:04:c8:6f:77:23:c4:44:
b5:f1:ff:fd:de:21:8d:1d:68:5c:e6:b6:1c:5c:02:
a5:73:58:43:04:ce:a1:88:c4:e2:a5:04:a9:dc:49:
13:e9:aa:d3:9f:4d:ee:37:ce:9f:8c:99:9f:8f:f7:
ff:dc:02:31:75:5e:da:42:ff:83:b7:f2:1e:94:40:
fc:30:23:59:6d:ff:88:2d:b3:e2:97:7a:2e:ad:56:
bf:47:e5:0d:5d:4d:88:10:25:a6:87:06:2e:1d:ae:
7d:9f:2e:6e:4c:5f:3e:01:b1:a1:79:19:25:3a:d8:
df:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:58:D3:6C:15:FA:CA:E7:F4:1B:6D:54:41:01:DB:E3:39:20:D5:D2
X509v3 Authority Key Identifier:
keyid:A2:C5:13:86:AC:F0:5B:3A:AB:61:81:04:74:78:D6:EE:A1:BF:00:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osUThqzwWzqrYYEEdHjW7qG_AGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/164d34-125f-4c60-8635-7d6f53889d57/1/osUThqzwWzqrYYEEdHjW7qG_AGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:87:65:fc:43:e4:37:6c:c2:9c:4d:12:f2:c9:d9:c7:b9:92:
fe:2b:1f:2a:a5:a1:3a:62:bb:95:3f:86:d3:e5:01:e3:1c:eb:
bc:ef:c4:17:58:84:77:6f:df:06:eb:f8:58:3e:5c:01:52:93:
dd:c4:1b:5b:e0:40:ca:77:2c:3e:07:6e:d6:f8:e3:21:42:94:
28:d4:18:10:58:48:d4:6b:1c:ff:a2:30:ce:44:d6:bc:c7:b0:
48:b5:65:73:33:9d:69:60:62:5b:12:25:a4:f6:07:bf:e0:7f:
9c:e5:34:c9:58:58:1b:2a:bb:24:3f:94:a3:98:eb:c0:82:38:
fd:7d:16:98:db:66:a2:7b:11:e6:e1:25:f9:b5:b8:ea:65:6f:
8f:fd:c8:79:73:da:b1:32:4a:43:7b:21:ac:0d:87:90:68:53:
5e:ba:ae:1a:45:bb:54:c0:53:6f:79:4a:29:72:41:ca:b0:f1:
2e:af:5c:4f:92:e4:56:75:7d:df:69:a7:46:56:f8:35:5c:26:
c4:39:5f:c2:8d:23:c3:bd:20:2b:17:57:fe:71:9d:94:7e:69:
4a:0b:8f:9d:27:dc:33:f5:bd:7f:b2:a1:c8:1f:71:92:75:6d:
40:1c:f9:56:a3:a3:74:1f:01:45:af:c5:2b:7c:42:e6:8c:22:
2c:f8:59:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PJmwULH5IjbYRyhr4H5yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYzUxMzg2YWNmMDViM2FhYjYxODEwNDc0NzhkNmVlYTFi
ZjAwNjIwHhcNMjUwMTMxMTIwMTE1WhcNMjUwMjAxMTIwMTE1WjAzMTEwLwYDVQQD
Eyg4ZTU4ZDM2YzE1ZmFjYWU3ZjQxYjZkNTQ0MTAxZGJlMzM5MjBkNWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PUsRQUaFs4NdqKdrrFyZPXS+R8B
VCzOHocPaFV+QVaY9ZASpn+RkomDMyWmNr91jqUXfXjg7a5vE/YDZYvTxb470Fio
YbhQJSJnignamaY3dyXxNK8noD6vWSrnGvCSuGS+LiNOpxqPhHl2AyPXg5IF69x9
4GuLDGV7irBw8A0NK0MET8sFfGR2OxmuQQTIb3cjxES18f/93iGNHWhc5rYcXAKl
c1hDBM6hiMTipQSp3EkT6arTn03uN86fjJmfj/f/3AIxdV7aQv+Dt/IelED8MCNZ
bf+ILbPil3ourVa/R+UNXU2IECWmhwYuHa59ny5uTF8+AbGheRklOtjftwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5Y02wV+srn9BttVEEB2+M5INXSMB8GA1UdIwQY
MBaAFKLFE4as8Fs6q2GBBHR41u6hvwBiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xNjRkMzQtMTI1Zi00YzYwLTg2MzUt
N2Q2ZjUzODg5ZDU3LzEvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xNjRkMzQtMTI1Zi00YzYwLTg2MzUtN2Q2ZjUzODg5ZDU3
LzEvb3NVVGhxendXenFyWVlFRWRIalc3cUdfQUdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHodl/EPk
N2zCnE0S8snZx7mS/isfKqWhOmK7lT+G0+UB4xzrvO/EF1iEd2/fBuv4WD5cAVKT
3cQbW+BAyncsPgdu1vjjIUKUKNQYEFhI1Gsc/6IwzkTWvMewSLVlczOdaWBiWxIl
pPYHv+B/nOU0yVhYGyq7JD+Uo5jrwII4/X0WmNtmonsR5uEl+bW46mVvj/3IeXPa
sTJKQ3shrA2HkGhTXrquGkW7VMBTb3lKKXJByrDxLq9cT5LkVnV932mnRlb4NVwm
xDlfwo0jw70gKxdX/nGdlH5pSguPnSfcM/W9f7KhyB9xknVtQBz5VqOjdB8BRa/F
K3xC5owiLPhZUg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:49 2025 by rpki-client