Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/720e67-d94c-4ff9-ba82-2819e4c5f123/1/oKrlhQo22yiCKmwa_F_6z_AH7vI.mft
File: oKrlhQo22yiCKmwa_F_6z_AH7vI.mft (raw, json)
Hash identifier: TkJB215mKXflIee0Dlm3NiI5AfB1/IueLDUgNkyTJXY=
Subject key identifier: 2C:80:58:F1:79:A7:C9:98:5B:38:89:E9:8B:45:4E:3A:B4:37:00:84
Authority key identifier: A0:AA:E5:85:0A:36:DB:28:82:2A:6C:1A:FC:5F:FA:CF:F0:07:EE:F2
Certificate issuer: /CN=a0aae5850a36db28822a6c1afc5ffacff007eef2
Certificate serial: 0194BD4E5EE1FFED3DDA8F406CD782BB2EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKrlhQo22yiCKmwa_F_6z_AH7vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/720e67-d94c-4ff9-ba82-2819e4c5f123/1/oKrlhQo22yiCKmwa_F_6z_AH7vI.mft
Manifest number: 0721
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: oKrlhQo22yiCKmwa_F_6z_AH7vI.crl (hash: 05ZjVYr5TvdN5RkhcFkFKfHISrNzWaRpE2LFAwqXxfc=)
2: vPivcilO-E_vThnuw1Jbeo7vl7Q.roa (hash: ue62obgrVIotq1vJM56av/nq50vzkGkDbEL5zd0kvpg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5e:e1:ff:ed:3d:da:8f:40:6c:d7:82:bb:2e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0aae5850a36db28822a6c1afc5ffacff007eef2
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=2c8058f179a7c9985b3889e98b454e3ab4370084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:76:da:4d:40:ae:78:6d:75:28:70:da:0a:6a:
47:8a:e5:6d:40:78:8a:fb:0f:f3:fe:07:b6:fe:c5:
e6:53:c3:57:ae:ab:12:9c:78:42:79:e3:a0:86:78:
a1:2c:05:46:5d:b3:7d:96:17:01:cd:7e:46:dc:ba:
6f:80:06:81:66:af:22:15:33:1b:96:a7:1d:0f:34:
0e:a1:9b:fe:a3:b5:ae:bb:5b:09:e4:f0:14:fa:17:
4e:5a:9f:f4:e8:36:69:e2:28:07:18:f7:2e:42:84:
c7:9a:a4:f1:81:9c:01:76:00:c6:4c:d5:06:e7:3c:
5c:8a:c5:f4:bc:c2:c9:f4:44:f5:6a:12:07:bd:34:
37:81:19:5b:90:1c:9c:66:c7:a4:b3:b8:3f:b8:da:
db:da:55:61:70:98:95:74:f1:44:00:1b:67:e5:d0:
81:ee:fd:fd:2d:4f:7c:86:ef:c2:31:4b:bf:ca:79:
67:0b:88:9f:c2:d3:34:f6:67:58:c4:1b:1f:7b:7a:
9b:1b:69:af:42:76:54:ea:26:6b:b1:78:dd:5c:ef:
83:8a:d9:26:ad:a8:44:7b:3e:c1:0a:d9:af:63:f8:
21:7b:3d:0e:dc:53:29:f4:6f:13:30:48:de:9d:b2:
59:31:a0:23:1b:c1:2f:b4:83:6f:90:99:ec:ee:89:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:80:58:F1:79:A7:C9:98:5B:38:89:E9:8B:45:4E:3A:B4:37:00:84
X509v3 Authority Key Identifier:
keyid:A0:AA:E5:85:0A:36:DB:28:82:2A:6C:1A:FC:5F:FA:CF:F0:07:EE:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKrlhQo22yiCKmwa_F_6z_AH7vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/720e67-d94c-4ff9-ba82-2819e4c5f123/1/oKrlhQo22yiCKmwa_F_6z_AH7vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/720e67-d94c-4ff9-ba82-2819e4c5f123/1/oKrlhQo22yiCKmwa_F_6z_AH7vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:13:ae:38:0a:ae:85:dc:28:bf:ab:97:bb:1b:7f:84:d4:3e:
25:a3:5d:44:91:07:f4:b4:e6:a8:68:d6:cc:91:e8:f9:8e:a3:
b1:36:24:cd:af:03:27:5d:f5:d9:39:0a:98:2c:29:b8:b3:0b:
af:7d:92:53:33:96:52:fe:df:06:28:53:64:dc:d7:d8:77:10:
c1:f4:06:39:1f:93:8a:4e:8e:21:0b:16:4a:80:e5:81:35:51:
0e:2c:fc:6f:2d:2d:f2:12:6c:61:86:45:f4:48:d7:e6:86:7a:
59:eb:a4:1f:05:5d:53:d8:21:b8:de:7b:26:e7:8e:93:86:ff:
99:de:78:46:ca:fc:c2:ed:54:57:1f:ba:68:1a:cc:ba:b7:0f:
b3:f1:2c:ac:2b:67:99:59:60:9d:61:39:a0:ab:58:36:81:3d:
a6:fd:30:4a:78:a6:04:54:54:ad:09:23:95:46:9e:6c:f5:41:
39:b7:60:9f:4b:e9:cd:eb:27:9c:0c:da:01:2d:38:ad:5e:80:
99:c5:9d:b3:86:d5:af:1d:fb:c5:47:10:97:b6:7f:bc:cc:07:
e2:fb:b0:55:42:08:2b:44:ed:5f:2e:66:55:9f:38:d0:a8:1a:
26:26:5a:2d:6b:eb:cf:54:be:db:92:44:1a:c6:bf:6f:7e:97:
6a:5f:2c:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tl7h/+092o9AbNeCuy73MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYWFlNTg1MGEzNmRiMjg4MjJhNmMxYWZjNWZmYWNmZjAw
N2VlZjIwHhcNMjUwMTMxMTcwMDE3WhcNMjUwMjAxMTcwMDE3WjAzMTEwLwYDVQQD
EygyYzgwNThmMTc5YTdjOTk4NWIzODg5ZTk4YjQ1NGUzYWI0MzcwMDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXbaTUCueG11KHDaCmpHiuVtQHiK
+w/z/ge2/sXmU8NXrqsSnHhCeeOghnihLAVGXbN9lhcBzX5G3LpvgAaBZq8iFTMb
lqcdDzQOoZv+o7Wuu1sJ5PAU+hdOWp/06DZp4igHGPcuQoTHmqTxgZwBdgDGTNUG
5zxcisX0vMLJ9ET1ahIHvTQ3gRlbkBycZseks7g/uNrb2lVhcJiVdPFEABtn5dCB
7v39LU98hu/CMUu/ynlnC4ifwtM09mdYxBsfe3qbG2mvQnZU6iZrsXjdXO+Ditkm
rahEez7BCtmvY/ghez0O3FMp9G8TMEjenbJZMaAjG8EvtINvkJns7ok8xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyAWPF5p8mYWziJ6YtFTjq0NwCEMB8GA1UdIwQY
MBaAFKCq5YUKNtsogipsGvxf+s/wB+7yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tybGhRbzIyeWlDS213YV9GXzZ6X0FIN3ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS83MjBlNjctZDk0Yy00ZmY5LWJhODIt
MjgxOWU0YzVmMTIzLzEvb0tybGhRbzIyeWlDS213YV9GXzZ6X0FIN3ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS83MjBlNjctZDk0Yy00ZmY5LWJhODItMjgxOWU0YzVmMTIz
LzEvb0tybGhRbzIyeWlDS213YV9GXzZ6X0FIN3ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASROuOAqu
hdwov6uXuxt/hNQ+JaNdRJEH9LTmqGjWzJHo+Y6jsTYkza8DJ1312TkKmCwpuLML
r32SUzOWUv7fBihTZNzX2HcQwfQGOR+Tik6OIQsWSoDlgTVRDiz8by0t8hJsYYZF
9EjX5oZ6WeukHwVdU9ghuN57JueOk4b/md54Rsr8wu1UVx+6aBrMurcPs/EsrCtn
mVlgnWE5oKtYNoE9pv0wSnimBFRUrQkjlUaebPVBObdgn0vpzesnnAzaAS04rV6A
mcWds4bVrx37xUcQl7Z/vMwH4vuwVUIIK0TtXy5mVZ840KgaJiZaLWvrz1S+25JE
Gsa/b36Xal8sJg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:49 2025 by rpki-client