Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File: OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier: N4X+cLK8OMe5QPWrD1Y+GGrNri53dv2soPEgytG5H6k=
Subject key identifier: 2A:8E:87:43:DA:B5:01:BF:AB:30:DB:62:07:88:F9:7E:94:F5:29:A8
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer: /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial: 0194BBCF11F1A056454CA5DE5D61B642E074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:37 +0000
Manifest this update: Fri 31 Jan 2025 10:01:37 +0000
Manifest next update: Sat 01 Feb 2025 10:01:37 +0000
Files and hashes: 1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: SwxsSKvLj8FWj50Ubu4FBWkXMoneZIkxsj+JVW+bZ1c=)
2: qGclPxhfh32KtuLneyqN4qho8W0.roa (hash: Hhh+blGm68/K3Y0iK4idov3LXxMurIpuJKDKpXuGS98=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:11:f1:a0:56:45:4c:a5:de:5d:61:b6:42:e0:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Validity
Not Before: Jan 31 10:01:37 2025 GMT
Not After : Feb 1 10:01:37 2025 GMT
Subject: CN=2a8e8743dab501bfab30db620788f97e94f529a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d0:22:af:cf:de:65:74:e6:a6:23:ea:87:46:
33:7a:b7:39:b1:83:de:f5:22:80:55:00:2e:db:7a:
0c:0d:76:11:ea:db:0c:30:1f:be:0c:50:e5:4c:77:
d8:93:b8:18:b5:b4:9c:57:fa:08:9f:06:7a:85:4a:
41:5b:30:47:2d:0c:78:2a:47:09:96:3b:a1:c1:40:
e5:d2:21:17:1e:40:b9:ed:a3:43:9c:b4:da:64:31:
f4:5f:07:01:d5:58:c8:ea:a5:e1:f3:15:04:03:ce:
ce:28:c6:ab:df:db:1f:de:37:ba:e8:18:0c:57:2c:
d3:45:64:45:d8:bd:a4:28:9b:b3:e6:1c:7d:80:63:
70:17:42:e2:ba:30:4f:81:3c:3c:3a:f2:9f:8e:82:
62:43:53:cf:1b:d8:21:36:47:91:07:4b:d1:9b:1e:
f2:7a:f8:f7:17:7b:c3:75:82:53:55:b6:01:cb:fe:
1f:8e:10:62:1f:3a:19:4c:cf:98:ce:19:93:f7:6b:
2e:2a:90:eb:17:e6:ed:ff:c9:05:58:5b:f6:de:a3:
43:15:65:91:69:fd:0f:fd:76:9c:c0:b1:64:21:b9:
65:bf:6d:8a:dc:27:90:70:87:ce:d8:f8:c1:e7:21:
43:88:79:64:b1:14:00:d8:84:b9:98:0c:1b:40:c0:
52:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8E:87:43:DA:B5:01:BF:AB:30:DB:62:07:88:F9:7E:94:F5:29:A8
X509v3 Authority Key Identifier:
keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c8:52:aa:b5:4a:9a:a5:89:f2:8a:72:e6:c9:d3:ec:e1:f3:
de:a5:f7:12:2f:c2:a3:ef:11:2c:56:6f:41:28:04:57:f9:d3:
2a:ed:dd:6e:51:6c:fc:41:74:1a:ff:a1:af:ed:0b:d6:78:e5:
05:6c:d6:cc:c7:f4:9f:cc:f0:69:bd:31:69:7b:d1:5e:7a:a5:
a6:56:7e:af:59:b8:7d:f7:45:9b:be:8b:ae:a7:5c:ae:65:36:
45:98:33:d1:7d:f2:f4:c7:42:51:5c:c4:71:1b:fd:74:0e:1a:
15:dc:96:16:51:74:26:5b:29:3a:3a:11:75:d3:d9:92:df:09:
0f:0b:85:06:30:9b:e3:80:57:a7:76:c2:7c:f2:56:8b:e6:4f:
a1:7b:ca:bd:57:31:2a:40:ff:e9:1f:28:c1:6a:9e:7f:b3:87:
42:d1:d0:01:14:97:98:c1:3f:45:77:a3:2f:9a:fe:1b:70:64:
8f:20:31:85:8a:07:4f:89:25:67:d9:af:3d:65:c8:d0:c5:c2:
57:26:b5:97:8d:a0:b9:82:16:f4:d1:2c:66:0e:38:c7:fe:65:
0c:49:3b:2d:00:e0:b9:94:07:29:7c:31:68:67:4a:4c:13:f3:
82:f3:5d:df:d4:2d:c3:45:61:43:22:76:cf:4a:c3:f8:01:d2:
24:66:67:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zxHxoFZFTKXeXWG2QuB0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4Yjc4YzhlZWY5YWQyNTdkNjkwZDc3ZGM5YWUzZmU5YTYy
NGIyOGQwHhcNMjUwMTMxMTAwMTM3WhcNMjUwMjAxMTAwMTM3WjAzMTEwLwYDVQQD
EygyYThlODc0M2RhYjUwMWJmYWIzMGRiNjIwNzg4Zjk3ZTk0ZjUyOWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtAir8/eZXTmpiPqh0Yzerc5sYPe
9SKAVQAu23oMDXYR6tsMMB++DFDlTHfYk7gYtbScV/oInwZ6hUpBWzBHLQx4KkcJ
ljuhwUDl0iEXHkC57aNDnLTaZDH0XwcB1VjI6qXh8xUEA87OKMar39sf3je66BgM
VyzTRWRF2L2kKJuz5hx9gGNwF0LiujBPgTw8OvKfjoJiQ1PPG9ghNkeRB0vRmx7y
evj3F3vDdYJTVbYBy/4fjhBiHzoZTM+YzhmT92suKpDrF+bt/8kFWFv23qNDFWWR
af0P/XacwLFkIbllv22K3CeQcIfO2PjB5yFDiHlksRQA2IS5mAwbQMBSKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqOh0PatQG/qzDbYgeI+X6U9SmoMB8GA1UdIwQY
MBaAFDi3jI7vmtJX1pDXfcmuP+mmJLKNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEt
ZjUxOGE5Zjc5NzkwLzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8yMjVmZDYtY2FmMy00Y2FmLWIzMTEtZjUxOGE5Zjc5Nzkw
LzEvT0xlTWp1LWEwbGZXa05kOXlhNF82YVlrc28wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjchSqrVK
mqWJ8opy5snT7OHz3qX3Ei/Co+8RLFZvQSgEV/nTKu3dblFs/EF0Gv+hr+0L1njl
BWzWzMf0n8zwab0xaXvRXnqlplZ+r1m4ffdFm76LrqdcrmU2RZgz0X3y9MdCUVzE
cRv9dA4aFdyWFlF0JlspOjoRddPZkt8JDwuFBjCb44BXp3bCfPJWi+ZPoXvKvVcx
KkD/6R8owWqef7OHQtHQARSXmME/RXejL5r+G3BkjyAxhYoHT4klZ9mvPWXI0MXC
Vya1l42guYIW9NEsZg44x/5lDEk7LQDguZQHKXwxaGdKTBPzgvNd39Qtw0VhQyJ2
z0rD+AHSJGZnYA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:06 2025 by rpki-client