Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: 5ZrHM9oJ5qwkRe2zOrqzxBgV1/OMhufVMVujXCavfPA=
Subject key identifier: 7A:B9:9A:EA:FB:74:24:71:9F:CE:FA:84:F5:DE:A1:6E:74:12:46:A2
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 0194BD4E9370C1AD893BBD961483C12B19EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 0B6F
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: kJ8USl-CuRMFXzbxSgE8sXBGngw.roa (hash: 2xL/58KHP5Hyj8g6eO0RiATHRjr5bChJ+dvKYUca1tI=)
2: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: QZtfgIqhmK71N2MDxGIkXKyCYdYpUnTfVaPmLuqXK9s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:93:70:c1:ad:89:3b:bd:96:14:83:c1:2b:19:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=7ab99aeafb7424719fcefa84f5dea16e741246a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:64:82:60:9b:4f:74:b0:09:be:39:16:46:ce:
b7:1a:f1:9a:93:46:16:51:c1:eb:76:8c:e5:00:ff:
03:38:4b:25:5c:3e:bf:ea:8b:64:77:be:37:77:05:
9a:e0:62:b9:29:4d:c1:2e:5e:50:76:68:11:80:15:
85:d4:12:b9:35:9f:5d:e0:44:94:67:a0:fd:21:96:
6e:e8:a9:17:8d:a0:37:15:62:40:5f:ba:4b:e8:0b:
9c:68:29:9c:df:fa:f1:d2:8c:44:b2:4f:b2:c7:50:
68:ed:c1:3b:58:20:54:22:0d:4b:40:8d:7e:d8:b8:
21:a2:58:68:40:74:c1:25:94:b9:5e:23:d4:c4:04:
0e:2c:25:4f:b0:2b:a6:21:18:f8:26:90:b0:5b:0e:
64:12:51:96:03:03:b8:55:8b:27:d1:2c:c7:8b:fc:
a7:aa:a9:b4:88:8c:b9:f8:06:9f:f0:ac:ce:df:54:
d0:25:8a:67:48:16:e7:ea:f9:e7:8f:9d:1a:0c:f6:
b6:c7:2e:54:b0:54:88:08:ad:ce:72:76:ab:81:ef:
8d:de:ff:16:0d:03:5a:97:b5:fc:c7:e3:f2:78:a3:
4b:ed:af:1d:a7:06:92:43:83:c6:19:2b:cb:e0:c7:
76:85:bf:e3:69:b0:18:66:1a:34:e7:b8:34:0a:48:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B9:9A:EA:FB:74:24:71:9F:CE:FA:84:F5:DE:A1:6E:74:12:46:A2
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:43:f9:bf:db:9d:a1:98:e5:d2:7b:90:03:58:f0:60:6d:b7:
20:1a:9e:c4:c2:c2:6a:95:fb:ec:95:4a:65:86:69:0b:17:d9:
08:e7:e1:cc:c3:fb:c7:69:7c:50:c3:7b:aa:92:da:de:26:c2:
e2:a0:8e:06:9c:a8:a1:21:6f:bc:b8:09:3d:e3:e7:48:9e:3f:
92:4b:f6:75:a9:63:b2:26:4b:a8:52:2e:98:c4:27:4a:7b:ee:
13:c3:27:78:67:1b:54:9a:6d:a0:c8:9e:5d:98:13:f0:ed:d7:
65:84:14:1f:00:5c:6a:83:1f:74:32:9d:4c:96:a8:ae:b8:d9:
54:35:9e:fb:f5:b9:68:03:c5:11:2b:d4:24:13:54:77:83:5e:
9f:0c:42:0e:3a:bf:6a:4a:1e:8a:f0:24:27:a3:76:51:a5:18:
54:24:5a:2a:73:1c:53:9a:1d:da:d6:33:eb:98:97:1b:85:ae:
d6:54:8c:96:50:4f:87:6f:06:8b:b4:84:55:ba:fc:84:6e:bd:
a6:4a:5f:49:3d:2d:4f:90:b2:c4:0d:5c:90:de:b5:6b:10:c7:
fb:0e:f3:75:b9:7b:a9:2d:d9:99:92:dc:c1:f9:23:d8:23:54:
ac:ce:55:e9:7c:a0:9a:d6:1c:50:a2:ca:e1:9f:48:50:8a:2d:
a0:60:94:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TpNwwa2JO72WFIPBKxnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhODM4ZjFjYThiZGNkODFjMDRiNmI2NzhlNzliZTYxNGU1
MWIxMTEwHhcNMjUwMTMxMTcwMDMwWhcNMjUwMjAxMTcwMDMwWjAzMTEwLwYDVQQD
Eyg3YWI5OWFlYWZiNzQyNDcxOWZjZWZhODRmNWRlYTE2ZTc0MTI0NmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WSCYJtPdLAJvjkWRs63GvGak0YW
UcHrdozlAP8DOEslXD6/6otkd743dwWa4GK5KU3BLl5QdmgRgBWF1BK5NZ9d4ESU
Z6D9IZZu6KkXjaA3FWJAX7pL6AucaCmc3/rx0oxEsk+yx1Bo7cE7WCBUIg1LQI1+
2LgholhoQHTBJZS5XiPUxAQOLCVPsCumIRj4JpCwWw5kElGWAwO4VYsn0SzHi/yn
qqm0iIy5+Aaf8KzO31TQJYpnSBbn6vnnj50aDPa2xy5UsFSICK3Ocnarge+N3v8W
DQNal7X8x+PyeKNL7a8dpwaSQ4PGGSvL4Md2hb/jabAYZho057g0CkizyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHq5mur7dCRxn876hPXeoW50EkaiMB8GA1UdIwQY
MBaAFLqDjxyovc2BwEtrZ455vmFOUbERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzct
MDkzZWI5YTlhYThiLzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kYjRlODgtZTU4ZC00MzQ1LTgwYzctMDkzZWI5YTlhYThi
LzEvdW9PUEhLaTl6WUhBUzJ0bmpubS1ZVTVSc1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd0P5v9ud
oZjl0nuQA1jwYG23IBqexMLCapX77JVKZYZpCxfZCOfhzMP7x2l8UMN7qpLa3ibC
4qCOBpyooSFvvLgJPePnSJ4/kkv2daljsiZLqFIumMQnSnvuE8MneGcbVJptoMie
XZgT8O3XZYQUHwBcaoMfdDKdTJaorrjZVDWe+/W5aAPFESvUJBNUd4NenwxCDjq/
akoeivAkJ6N2UaUYVCRaKnMcU5od2tYz65iXG4Wu1lSMllBPh28Gi7SEVbr8hG69
pkpfST0tT5CyxA1ckN61axDH+w7zdbl7qS3ZmZLcwfkj2CNUrM5V6XygmtYcUKLK
4Z9IUIotoGCUMw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:19:33 2025 by rpki-client