Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
File: OJDnpFSaVx9otoja1PXO2OUpBos.mft (raw, json)
Hash identifier: fEmlsIrINbMyHiJn2bXGHymAVnckrw1P5aRk8a3tNPI=
Subject key identifier: 7D:5A:AB:6B:CB:B3:96:E7:53:B8:9C:3B:0A:D2:F4:7F:57:E4:5C:F6
Authority key identifier: 38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B
Certificate issuer: /CN=3890e7a4549a571f68b688dad4f5ced8e529068b
Certificate serial: 0194BBCE56351015DA40D6A2E24CB5C12583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: OJDnpFSaVx9otoja1PXO2OUpBos.crl (hash: v4R3F/9npaXieYcrgUfMhN+FEfkpuufAOYzNmhA9rQQ=)
2: XaY9bUiZ_CFGYXPkNboje_P8adc.roa (hash: b9+EkuxILTVWiZrAAhWN9xohV/5GiE1XVfEOgozpLGc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:56:35:10:15:da:40:d6:a2:e2:4c:b5:c1:25:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3890e7a4549a571f68b688dad4f5ced8e529068b
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=7d5aab6bcbb396e753b89c3b0ad2f47f57e45cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:11:98:87:67:4f:63:ea:20:78:ff:b9:c9:77:
ac:ab:a5:13:3f:9e:8b:39:82:e5:2c:36:1d:e3:e5:
53:3a:6b:63:d4:3d:67:d6:d5:2b:83:48:c5:c7:c3:
98:7e:e2:04:8c:41:b4:7c:97:96:5b:74:b7:24:64:
8c:5a:ff:86:ba:1f:71:a8:0d:de:7c:08:d0:bc:e9:
ed:f6:bc:5a:81:1e:9f:38:75:78:2b:e2:24:8d:0b:
48:07:42:13:19:0b:7a:84:ae:4c:a6:3b:b7:ec:41:
70:d3:36:e2:41:b1:6f:11:be:20:a8:61:e3:7a:d9:
0e:84:0a:85:ba:18:ce:35:50:c6:0e:67:be:44:2e:
31:98:eb:40:e5:60:e6:cd:6f:7a:3b:26:c8:06:6e:
01:a4:74:e0:11:0f:6d:19:99:b1:d5:e0:2e:f9:fc:
fc:0c:e2:3c:fc:5d:c5:d6:4e:74:dd:a8:7b:c5:56:
a1:22:45:64:f1:53:9a:38:f1:54:e9:c0:fe:9b:52:
67:67:d4:df:be:ab:82:b2:c2:01:eb:3b:68:cb:ec:
6f:04:e7:be:f5:3b:ec:82:31:d1:22:7a:ed:c2:f9:
d0:5a:b9:72:b4:47:b3:3e:66:34:06:72:85:8c:a5:
fa:cf:ff:4b:49:45:b8:b9:80:84:f4:da:b9:05:0a:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5A:AB:6B:CB:B3:96:E7:53:B8:9C:3B:0A:D2:F4:7F:57:E4:5C:F6
X509v3 Authority Key Identifier:
keyid:38:90:E7:A4:54:9A:57:1F:68:B6:88:DA:D4:F5:CE:D8:E5:29:06:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OJDnpFSaVx9otoja1PXO2OUpBos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25df4e-afc5-4c50-8de2-94812c7f449e/1/OJDnpFSaVx9otoja1PXO2OUpBos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:6d:12:f0:0a:49:58:00:62:68:46:3e:a5:fc:59:0a:00:c9:
46:f9:27:21:d6:58:7e:ed:00:6b:74:cf:dd:4e:b3:84:44:7c:
b6:79:d6:d4:e1:83:83:27:5e:ce:6f:f9:5d:20:e3:51:28:22:
ae:f2:1d:7a:09:93:b1:3a:64:f9:91:85:9f:43:54:b8:f7:42:
10:c7:02:b8:fb:c4:2d:f9:b1:a3:af:30:cd:bb:79:69:ec:52:
09:a9:ea:96:93:13:72:93:f0:88:d2:aa:70:61:a5:5c:aa:c0:
5f:2e:ff:a0:01:ec:ab:ae:10:04:47:f1:56:db:bc:79:a3:73:
57:07:cf:26:45:34:25:40:9d:60:95:dd:fc:fd:56:7e:e2:51:
c9:94:2e:c0:f6:9d:29:aa:12:62:27:ac:e5:72:5d:5b:b9:40:
b1:cb:4a:01:3e:f2:e2:fb:c1:e0:af:aa:09:24:05:17:b9:c4:
7a:65:66:c5:bc:ef:8b:87:72:4f:01:99:ad:d7:cc:9e:fa:4c:
3d:b0:9a:f3:11:1e:18:ec:ad:6d:a1:b8:51:ed:55:2a:ab:55:
22:c1:1b:03:1c:6f:3a:41:62:e6:24:24:7f:16:7e:1d:32:12:
8b:c0:d9:3a:fc:16:fd:82:6a:a9:c0:c0:68:b0:ce:27:6d:3c:
1e:a5:0d:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlY1EBXaQNai4ky1wSWDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4OTBlN2E0NTQ5YTU3MWY2OGI2ODhkYWQ0ZjVjZWQ4ZTUy
OTA2OGIwHhcNMjUwMTMxMTAwMDQ5WhcNMjUwMjAxMTAwMDQ5WjAzMTEwLwYDVQQD
Eyg3ZDVhYWI2YmNiYjM5NmU3NTNiODljM2IwYWQyZjQ3ZjU3ZTQ1Y2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBGYh2dPY+ogeP+5yXesq6UTP56L
OYLlLDYd4+VTOmtj1D1n1tUrg0jFx8OYfuIEjEG0fJeWW3S3JGSMWv+Guh9xqA3e
fAjQvOnt9rxagR6fOHV4K+IkjQtIB0ITGQt6hK5Mpju37EFw0zbiQbFvEb4gqGHj
etkOhAqFuhjONVDGDme+RC4xmOtA5WDmzW96OybIBm4BpHTgEQ9tGZmx1eAu+fz8
DOI8/F3F1k503ah7xVahIkVk8VOaOPFU6cD+m1JnZ9TfvquCssIB6ztoy+xvBOe+
9TvsgjHRInrtwvnQWrlytEezPmY0BnKFjKX6z/9LSUW4uYCE9Nq5BQoNFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1aq2vLs5bnU7icOwrS9H9X5Fz2MB8GA1UdIwQY
MBaAFDiQ56RUmlcfaLaI2tT1ztjlKQaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0pEbnBGU2FWeDlvdG9qYTFQWE8yT1VwQm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yNWRmNGUtYWZjNS00YzUwLThkZTIt
OTQ4MTJjN2Y0NDllLzEvT0pEbnBGU2FWeDlvdG9qYTFQWE8yT1VwQm9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8yNWRmNGUtYWZjNS00YzUwLThkZTItOTQ4MTJjN2Y0NDll
LzEvT0pEbnBGU2FWeDlvdG9qYTFQWE8yT1VwQm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHW0S8ApJ
WABiaEY+pfxZCgDJRvknIdZYfu0Aa3TP3U6zhER8tnnW1OGDgydezm/5XSDjUSgi
rvIdegmTsTpk+ZGFn0NUuPdCEMcCuPvELfmxo68wzbt5aexSCanqlpMTcpPwiNKq
cGGlXKrAXy7/oAHsq64QBEfxVtu8eaNzVwfPJkU0JUCdYJXd/P1WfuJRyZQuwPad
KaoSYies5XJdW7lAsctKAT7y4vvB4K+qCSQFF7nEemVmxbzvi4dyTwGZrdfMnvpM
PbCa8xEeGOytbaG4Ue1VKqtVIsEbAxxvOkFi5iQkfxZ+HTISi8DZOvwW/YJqqcDA
aLDOJ208HqUNsg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:23 2025 by rpki-client