Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
File: OpL12TZ1K68tDfcTKZSZzs-p9I0.mft (raw, json)
Hash identifier: 8etgLWr490dCKm+ZRMvpp1MYqM0NkHE+DHXc6lFucOo=
Subject key identifier: 32:A3:3F:2F:94:28:E9:8A:5A:AC:61:BC:0B:8E:C4:7D:DC:52:17:0A
Authority key identifier: 3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
Certificate issuer: /CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Certificate serial: 0194BCE0B557F0E8A472F503CCE2E89499F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: OpL12TZ1K68tDfcTKZSZzs-p9I0.crl (hash: mGwfiOp0CxezjPJVuIStEcr0oEWPa7e0yv9x+jBF78w=)
2: QMe1cQvSWWyTmlxs7mg5bNBSDlw.roa (hash: iejToeWDmgQDOWHcoY74bMQ91/UDUCJzy2kftI9HQTs=)
3: abyvfDmy4Q3zVDJIfxfSkrtZdLo.roa (hash: IZm94vPLNr133XeI56Dl5DQUBKwgG1pbFRgf8ws+6Pw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b5:57:f0:e8:a4:72:f5:03:cc:e2:e8:94:99:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a92f5d936752baf2d0df713299499cecfa9f48d
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=32a33f2f9428e98a5aac61bc0b8ec47ddc52170a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:81:1f:41:44:0e:cc:e3:88:38:3c:62:76:
49:f0:d8:3f:4c:b2:29:36:44:2f:b3:83:90:4a:84:
92:ce:61:5a:4c:65:7b:0d:1c:fc:77:85:a9:12:98:
22:a6:ad:7b:35:01:0e:82:89:fe:60:a3:d7:8e:84:
34:ca:b8:74:37:e4:14:34:9a:3c:b1:2b:7d:86:ed:
1f:d4:ca:39:3e:25:ab:a0:98:2c:a2:ac:40:7a:9a:
24:d5:d0:18:96:9c:ec:aa:50:be:1b:97:f9:a0:6e:
55:ff:b2:f2:3f:b9:6d:ef:8d:f2:61:07:08:56:b9:
f7:fd:5c:1c:47:08:88:3d:1e:9d:30:d5:c5:cf:c0:
d7:57:f9:1e:7c:3e:92:15:70:06:8b:25:bb:a8:8d:
6e:95:99:08:58:7d:26:23:57:bd:77:05:43:a7:08:
0a:ca:64:a6:fa:39:04:ea:b4:74:48:58:83:ad:3f:
e8:ac:69:66:de:fc:23:f1:0d:0a:57:2b:71:9e:45:
96:15:2b:cf:f6:c2:d7:4d:c1:87:5f:6f:b8:e5:7b:
42:7a:ef:0a:98:9c:a2:6b:08:01:7f:0b:2e:93:84:
47:72:56:5a:72:ff:6e:4e:93:4f:36:c2:99:72:0e:
98:a4:98:c6:ef:4a:b4:40:26:4f:5b:11:48:18:31:
a7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A3:3F:2F:94:28:E9:8A:5A:AC:61:BC:0B:8E:C4:7D:DC:52:17:0A
X509v3 Authority Key Identifier:
keyid:3A:92:F5:D9:36:75:2B:AF:2D:0D:F7:13:29:94:99:CE:CF:A9:F4:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpL12TZ1K68tDfcTKZSZzs-p9I0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/7cd157-c58f-4cb9-8252-1696b246cd50/1/OpL12TZ1K68tDfcTKZSZzs-p9I0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:30:5d:88:25:3a:7f:63:21:d7:fc:b4:a0:d2:42:8b:77:4f:
83:08:d6:61:d4:df:84:84:12:e9:25:11:fa:df:47:5f:0d:bf:
d2:fb:7d:78:b2:ea:f3:ca:98:43:05:d9:88:c7:bd:f9:af:39:
03:ba:0d:76:24:47:74:3a:97:32:53:41:7d:f6:8f:c3:75:7f:
92:da:76:83:aa:9b:7f:cf:57:65:ff:47:08:40:af:37:06:7d:
56:fb:67:b8:bf:59:49:2b:11:cb:60:7b:cf:80:72:48:c5:ff:
56:af:e3:86:ed:a5:52:fe:d6:91:cd:87:6d:c9:4b:81:da:62:
3a:72:42:d0:b9:93:8c:d8:8f:e7:e9:b6:ab:1d:8c:6c:71:ff:
53:d1:c9:ae:d1:99:f6:5a:b4:89:20:cf:81:bd:69:40:26:4d:
de:97:59:19:e0:a6:c6:4c:58:65:b0:f1:a5:28:07:fa:48:34:
0b:0e:80:75:3a:d0:44:ed:c2:b9:4f:67:cf:87:61:ae:98:39:
c0:db:65:ec:df:4a:99:9d:fa:b2:80:9a:3a:97:45:bc:9d:f9:
e1:a7:ef:d2:f7:e9:6e:9d:a9:04:af:28:10:09:5c:c9:db:41:
1b:7a:6f:c2:3b:c9:7a:8d:cb:c3:05:61:7d:e7:5c:0d:7d:1c:
71:39:c2:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84LVX8OikcvUDzOLolJnxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhOTJmNWQ5MzY3NTJiYWYyZDBkZjcxMzI5OTQ5OWNlY2Zh
OWY0OGQwHhcNMjUwMTMxMTUwMDMwWhcNMjUwMjAxMTUwMDMwWjAzMTEwLwYDVQQD
EygzMmEzM2YyZjk0MjhlOThhNWFhYzYxYmMwYjhlYzQ3ZGRjNTIxNzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt86BH0FEDszjiDg8YnZJ8Ng/TLIp
NkQvs4OQSoSSzmFaTGV7DRz8d4WpEpgipq17NQEOgon+YKPXjoQ0yrh0N+QUNJo8
sSt9hu0f1Mo5PiWroJgsoqxAepok1dAYlpzsqlC+G5f5oG5V/7LyP7lt743yYQcI
Vrn3/VwcRwiIPR6dMNXFz8DXV/kefD6SFXAGiyW7qI1ulZkIWH0mI1e9dwVDpwgK
ymSm+jkE6rR0SFiDrT/orGlm3vwj8Q0KVytxnkWWFSvP9sLXTcGHX2+45XtCeu8K
mJyiawgBfwsuk4RHclZacv9uTpNPNsKZcg6YpJjG70q0QCZPWxFIGDGnJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKjPy+UKOmKWqxhvAuOxH3cUhcKMB8GA1UdIwQY
MBaAFDqS9dk2dSuvLQ33EymUmc7PqfSNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83Y2QxNTctYzU4Zi00Y2I5LTgyNTIt
MTY5NmIyNDZjZDUwLzEvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS83Y2QxNTctYzU4Zi00Y2I5LTgyNTItMTY5NmIyNDZjZDUw
LzEvT3BMMTJUWjFLNjh0RGZjVEtaU1p6cy1wOUkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAODBdiCU6
f2Mh1/y0oNJCi3dPgwjWYdTfhIQS6SUR+t9HXw2/0vt9eLLq88qYQwXZiMe9+a85
A7oNdiRHdDqXMlNBffaPw3V/ktp2g6qbf89XZf9HCECvNwZ9VvtnuL9ZSSsRy2B7
z4BySMX/Vq/jhu2lUv7Wkc2HbclLgdpiOnJC0LmTjNiP5+m2qx2MbHH/U9HJrtGZ
9lq0iSDPgb1pQCZN3pdZGeCmxkxYZbDxpSgH+kg0Cw6AdTrQRO3CuU9nz4dhrpg5
wNtl7N9KmZ36soCaOpdFvJ354afv0vfpbp2pBK8oEAlcydtBG3pvwjvJeo3LwwVh
fedcDX0ccTnCKQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:00 2025 by rpki-client