Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
File: Oab1TSH1N6neJHh90Oj7pAapyt0.mft (raw, json)
Hash identifier: HULBjYUmBnMZpIMDBCbU2rGmRy3WOSuzcWu2svxLFZ0=
Subject key identifier: 29:83:E2:B4:2F:20:A6:3F:0B:8F:B2:12:3E:70:21:C4:00:63:BD:5F
Authority key identifier: 39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
Certificate issuer: /CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Certificate serial: 0194BCA99EB01D72319AD1ABB0B98E0DCD70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:20 +0000
Manifest this update: Fri 31 Jan 2025 14:00:20 +0000
Manifest next update: Sat 01 Feb 2025 14:00:20 +0000
Files and hashes: 1: Oab1TSH1N6neJHh90Oj7pAapyt0.crl (hash: mYn4eKpwT352jcYyZWP+WFUhiglzTF68FERC2Cqaps0=)
2: pDgcJBf96EMv4X7AtJpEDVK25IM.roa (hash: Ar5Gw+93T25Y1llBxZfk1/rjZ4JNjjhQm1mEv32a/os=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:9e:b0:1d:72:31:9a:d1:ab:b0:b9:8e:0d:cd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39a6f54d21f537a9de24787dd0e8fba406a9cadd
Validity
Not Before: Jan 31 14:00:20 2025 GMT
Not After : Feb 1 14:00:20 2025 GMT
Subject: CN=2983e2b42f20a63f0b8fb2123e7021c40063bd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:9f:bb:14:13:7b:de:d5:96:7d:39:53:fb:
34:fc:7c:85:72:25:94:af:72:84:6a:50:45:72:7d:
3f:17:8a:06:15:7c:2c:00:b7:37:07:b6:50:f5:ec:
e5:e1:99:16:49:f3:60:72:14:63:a1:19:f8:cf:80:
ff:18:40:d7:ac:5c:cc:d7:d3:37:61:15:a8:1e:18:
0f:17:f0:53:ae:46:3c:3c:50:5e:66:34:d2:04:20:
ac:53:6a:29:75:7c:59:bf:ee:49:30:3a:cc:c5:96:
f9:58:66:33:04:0f:fe:56:36:75:30:d8:2b:98:76:
70:f8:27:88:dc:06:21:26:ce:81:cf:5a:f8:b5:3c:
81:01:81:8a:ce:56:a7:5f:ba:05:3c:ac:9b:e6:91:
89:57:35:7f:db:01:ca:92:cb:24:9b:f9:f5:f4:f4:
f9:c0:29:28:b4:b7:ef:94:4b:6f:8b:c5:70:cb:50:
83:37:d6:a5:d8:bd:46:8f:59:fb:96:b0:68:79:97:
c9:e2:8e:30:87:d2:70:be:e4:f7:9b:23:9c:c6:6b:
59:8e:ac:8b:7c:04:6c:39:63:9c:ab:c9:bc:47:9f:
b8:00:3f:bd:24:f6:9e:19:79:bc:1e:bd:cf:94:be:
03:5c:3f:fc:0c:07:d9:c3:87:da:7d:3b:8c:09:1a:
e1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:83:E2:B4:2F:20:A6:3F:0B:8F:B2:12:3E:70:21:C4:00:63:BD:5F
X509v3 Authority Key Identifier:
keyid:39:A6:F5:4D:21:F5:37:A9:DE:24:78:7D:D0:E8:FB:A4:06:A9:CA:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oab1TSH1N6neJHh90Oj7pAapyt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/c98fb5-dc94-4b7d-a989-6c2fab5a4085/1/Oab1TSH1N6neJHh90Oj7pAapyt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:81:a2:8e:37:ee:6c:9f:13:4a:0a:3e:d9:ad:e6:fa:f5:d0:
74:8a:ae:59:ed:d6:a4:0e:c9:06:3c:53:a9:08:95:3b:5b:cc:
db:0e:b2:31:d8:85:74:26:ed:23:cc:46:5e:8c:c6:de:b6:15:
1a:b6:00:49:dc:eb:85:94:a0:1c:de:e1:9a:6a:0b:18:7b:de:
30:ab:81:2d:62:db:2e:40:12:13:2a:63:c1:d9:99:6e:45:0e:
4c:f6:02:cf:f6:9d:3b:6e:7e:dc:28:c7:89:5e:d1:7a:0a:e9:
91:cb:26:f8:3f:68:38:0d:5f:44:08:44:d6:a1:c1:01:b1:9c:
91:4f:7d:cc:03:a2:0a:a7:6a:4b:79:18:52:f0:1f:a2:fe:26:
90:4b:19:5c:51:90:93:42:15:ba:51:e0:a0:8e:ec:ff:a4:76:
f9:d0:3a:57:86:db:e9:bc:98:d0:ec:e1:05:03:37:42:57:54:
3c:d5:bc:7d:d3:b1:54:6b:d3:88:b1:96:db:94:06:37:9e:d3:
69:91:4b:78:c8:fd:7f:45:11:02:a9:6a:d0:a6:fd:5a:56:09:
52:74:70:2d:4e:99:e6:21:86:c9:77:a1:bd:61:f6:c1:02:ee:
cb:82:f1:d1:8d:88:ad:79:77:0d:e7:90:e5:90:2d:18:60:54:
95:01:55:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qZ6wHXIxmtGrsLmODc1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YTZmNTRkMjFmNTM3YTlkZTI0Nzg3ZGQwZThmYmE0MDZh
OWNhZGQwHhcNMjUwMTMxMTQwMDIwWhcNMjUwMjAxMTQwMDIwWjAzMTEwLwYDVQQD
EygyOTgzZTJiNDJmMjBhNjNmMGI4ZmIyMTIzZTcwMjFjNDAwNjNiZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGefuxQTe97Vln05U/s0/HyFciWU
r3KEalBFcn0/F4oGFXwsALc3B7ZQ9ezl4ZkWSfNgchRjoRn4z4D/GEDXrFzM19M3
YRWoHhgPF/BTrkY8PFBeZjTSBCCsU2opdXxZv+5JMDrMxZb5WGYzBA/+VjZ1MNgr
mHZw+CeI3AYhJs6Bz1r4tTyBAYGKzlanX7oFPKyb5pGJVzV/2wHKksskm/n19PT5
wCkotLfvlEtvi8Vwy1CDN9al2L1Gj1n7lrBoeZfJ4o4wh9JwvuT3myOcxmtZjqyL
fARsOWOcq8m8R5+4AD+9JPaeGXm8Hr3PlL4DXD/8DAfZw4fafTuMCRrh/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmD4rQvIKY/C4+yEj5wIcQAY71fMB8GA1UdIwQY
MBaAFDmm9U0h9Tep3iR4fdDo+6QGqcrdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODkt
NmMyZmFiNWE0MDg1LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jOThmYjUtZGM5NC00YjdkLWE5ODktNmMyZmFiNWE0MDg1
LzEvT2FiMVRTSDFONm5lSkhoOTBPajdwQWFweXQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoGijjfu
bJ8TSgo+2a3m+vXQdIquWe3WpA7JBjxTqQiVO1vM2w6yMdiFdCbtI8xGXozG3rYV
GrYASdzrhZSgHN7hmmoLGHveMKuBLWLbLkASEypjwdmZbkUOTPYCz/adO25+3CjH
iV7Regrpkcsm+D9oOA1fRAhE1qHBAbGckU99zAOiCqdqS3kYUvAfov4mkEsZXFGQ
k0IVulHgoI7s/6R2+dA6V4bb6byY0OzhBQM3QldUPNW8fdOxVGvTiLGW25QGN57T
aZFLeMj9f0URAqlq0Kb9WlYJUnRwLU6Z5iGGyXehvWH2wQLuy4Lx0Y2IrXl3DeeQ
5ZAtGGBUlQFVnQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:09 2025 by rpki-client