Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
File: OTipB3cqWf31n2L5rZC-UCFxlG4.mft (raw, json)
Hash identifier: ZXZfpWpVuhtJiqPqgsTdolyzoi85uRtfD8S9qZgU2wU=
Subject key identifier: DD:94:D7:8B:04:CC:06:B1:04:28:6B:88:D7:5D:E7:BE:D5:69:FC:4F
Authority key identifier: 39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
Certificate issuer: /CN=3938a907772a59fdf59f62f9ad90be502171946e
Certificate serial: 0194BBCE0FF8C44E3A22A506F952BD944000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
Manifest number: 0781
Signing time: Fri 31 Jan 2025 10:00:31 +0000
Manifest this update: Fri 31 Jan 2025 10:00:31 +0000
Manifest next update: Sat 01 Feb 2025 10:00:31 +0000
Files and hashes: 1: OTipB3cqWf31n2L5rZC-UCFxlG4.crl (hash: +LcX3s6ayv3DLO826oB3Odg+x+Cu6gmRAAB4lc9RpsQ=)
2: R2rdc7iEL-QEpfpveQ8XLi794UY.roa (hash: NOUYuQT3ToD/1aYOE1fR2p8arsC0PmHYqq5MEGhXZLs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0f:f8:c4:4e:3a:22:a5:06:f9:52:bd:94:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3938a907772a59fdf59f62f9ad90be502171946e
Validity
Not Before: Jan 31 10:00:31 2025 GMT
Not After : Feb 1 10:00:31 2025 GMT
Subject: CN=dd94d78b04cc06b104286b88d75de7bed569fc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:26:e9:99:09:50:39:bc:2b:99:76:41:0a:1a:
0d:da:9b:dd:e3:69:84:a9:36:81:42:10:21:62:97:
c6:b3:cd:a1:71:82:63:58:40:5c:59:4a:60:02:9f:
15:90:87:df:ba:15:c5:0f:12:7e:88:22:df:c7:54:
66:a5:a5:a2:22:3f:90:83:6c:3c:bd:11:91:0a:46:
fe:39:95:a9:70:14:c2:de:34:57:01:37:b9:5c:99:
ac:90:81:51:85:18:60:39:cb:82:67:c5:d1:5c:49:
79:c3:ac:d9:cc:e6:d7:aa:7b:46:25:a7:75:9d:9a:
82:8b:74:ba:94:d5:3c:e9:89:04:ac:c0:6f:ef:12:
63:92:bf:3b:72:a6:60:28:8d:db:21:0d:ab:1d:df:
51:78:7c:bf:73:ec:11:71:c1:d8:2c:c6:dc:5f:fe:
5e:a5:e8:fb:c6:80:30:01:ca:24:c2:44:51:50:1a:
54:06:ac:e7:26:87:e0:f6:e5:97:2b:8d:af:4a:4e:
30:8d:f4:8b:5a:c9:b4:2b:4d:db:04:92:ef:f1:96:
99:ec:fd:f3:ac:fe:50:f3:48:ad:e7:b7:4f:c2:a3:
ad:c7:77:bb:3e:69:90:c4:c7:8e:fc:ee:b1:31:ce:
89:4e:8e:3c:37:b7:20:9a:e1:c7:86:8f:7e:df:c4:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:94:D7:8B:04:CC:06:B1:04:28:6B:88:D7:5D:E7:BE:D5:69:FC:4F
X509v3 Authority Key Identifier:
keyid:39:38:A9:07:77:2A:59:FD:F5:9F:62:F9:AD:90:BE:50:21:71:94:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTipB3cqWf31n2L5rZC-UCFxlG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/818e10-409b-451a-82b7-e5c1c62cfe37/1/OTipB3cqWf31n2L5rZC-UCFxlG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:10:15:d1:fb:25:40:68:cf:f9:cf:b1:f5:7a:65:c7:0e:1a:
0e:1c:fe:93:6b:ae:61:9f:a0:8c:32:df:57:5b:d5:bb:03:8a:
17:ff:7d:f5:3d:73:82:e6:0c:bd:02:8f:27:64:f2:c7:d0:ec:
21:5c:bd:e6:eb:2c:6a:86:e0:68:8b:5b:9d:12:3f:90:8b:fa:
92:a1:7a:a7:34:e2:2f:d7:fe:fa:49:b1:3b:37:79:f0:45:db:
1b:f0:1c:7f:55:23:9e:b1:6d:d5:b4:0c:2c:e1:61:62:cb:b8:
6e:0f:ba:c9:ba:38:17:f6:ea:5d:1b:28:4b:49:61:ea:43:00:
77:56:df:fe:71:0f:09:3b:6c:85:2a:1e:cc:5f:71:54:10:a8:
21:df:b2:ea:92:b6:4a:b0:08:36:7b:27:76:16:34:62:34:6a:
ea:2b:1c:a7:4b:18:99:8b:31:96:27:d3:4a:e5:fd:f6:39:34:
7e:49:bc:a4:cd:0f:73:00:e3:5c:b0:0c:f8:93:86:1c:c3:d1:
f9:8b:0d:56:3a:69:16:40:d5:1f:bc:53:ec:6e:01:0c:0e:f5:
df:18:2e:df:9e:00:9c:24:b0:19:1b:2b:8a:0e:e1:43:09:c9:
09:3d:d4:12:24:7b:0a:d0:1b:22:0c:1b:a1:f2:53:39:1a:bd:
20:2c:77:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zg/4xE46IqUG+VK9lEAAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzhhOTA3NzcyYTU5ZmRmNTlmNjJmOWFkOTBiZTUwMjE3
MTk0NmUwHhcNMjUwMTMxMTAwMDMxWhcNMjUwMjAxMTAwMDMxWjAzMTEwLwYDVQQD
EyhkZDk0ZDc4YjA0Y2MwNmIxMDQyODZiODhkNzVkZTdiZWQ1NjlmYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxibpmQlQObwrmXZBChoN2pvd42mE
qTaBQhAhYpfGs82hcYJjWEBcWUpgAp8VkIffuhXFDxJ+iCLfx1RmpaWiIj+Qg2w8
vRGRCkb+OZWpcBTC3jRXATe5XJmskIFRhRhgOcuCZ8XRXEl5w6zZzObXqntGJad1
nZqCi3S6lNU86YkErMBv7xJjkr87cqZgKI3bIQ2rHd9ReHy/c+wRccHYLMbcX/5e
pej7xoAwAcokwkRRUBpUBqznJofg9uWXK42vSk4wjfSLWsm0K03bBJLv8ZaZ7P3z
rP5Q80it57dPwqOtx3e7PmmQxMeO/O6xMc6JTo48N7cgmuHHho9+38T7MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN2U14sEzAaxBChriNdd577VafxPMB8GA1UdIwQY
MBaAFDk4qQd3Kln99Z9i+a2QvlAhcZRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjct
ZTVjMWM2MmNmZTM3LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi84MThlMTAtNDA5Yi00NTFhLTgyYjctZTVjMWM2MmNmZTM3
LzEvT1RpcEIzY3FXZjMxbjJMNXJaQy1VQ0Z4bEc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6xAV0fsl
QGjP+c+x9Xplxw4aDhz+k2uuYZ+gjDLfV1vVuwOKF/999T1zguYMvQKPJ2Tyx9Ds
IVy95ussaobgaItbnRI/kIv6kqF6pzTiL9f++kmxOzd58EXbG/Acf1UjnrFt1bQM
LOFhYsu4bg+6ybo4F/bqXRsoS0lh6kMAd1bf/nEPCTtshSoezF9xVBCoId+y6pK2
SrAINnsndhY0YjRq6iscp0sYmYsxlifTSuX99jk0fkm8pM0PcwDjXLAM+JOGHMPR
+YsNVjppFkDVH7xT7G4BDA713xgu354AnCSwGRsrig7hQwnJCT3UEiR7CtAbIgwb
ofJTORq9ICx36A==
-----END CERTIFICATE-----
Generated at Thu May 1 10:51:53 2025 by rpki-client