Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d625c5-790c-4b51-9ef1-baef4ebf68da/1/oUIVlcmI-yZTZeucofo_F_xXB28.mft
File: oUIVlcmI-yZTZeucofo_F_xXB28.mft (raw, json)
Hash identifier: SHJstCoaPCy8Eu6ZeEBDP6D3RWfVgLMOdsF/2MM4kWI=
Subject key identifier: 31:6E:55:AC:31:7C:82:65:45:EF:33:90:CB:4C:B1:FA:55:09:79:44
Authority key identifier: A1:42:15:95:C9:88:FB:26:53:65:EB:9C:A1:FA:3F:17:FC:57:07:6F
Certificate issuer: /CN=a1421595c988fb265365eb9ca1fa3f17fc57076f
Certificate serial: 0194BCA98EE7A32B3B764D0EF11291F0BAAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oUIVlcmI-yZTZeucofo_F_xXB28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d625c5-790c-4b51-9ef1-baef4ebf68da/1/oUIVlcmI-yZTZeucofo_F_xXB28.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: oUIVlcmI-yZTZeucofo_F_xXB28.crl (hash: Yh9Ki/+pGobNS2TSy2oyeZgNHY17k1DNKUn4E33zyyo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8e:e7:a3:2b:3b:76:4d:0e:f1:12:91:f0:ba:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1421595c988fb265365eb9ca1fa3f17fc57076f
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=316e55ac317c826545ef3390cb4cb1fa55097944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b3:c7:5f:36:62:4f:46:89:f1:68:08:8b:54:
9f:73:88:04:68:e9:8e:ba:84:16:ee:55:02:dd:d2:
f4:08:be:47:23:71:9d:87:26:96:7a:2f:b8:36:38:
ff:ff:e2:7f:97:60:82:84:ed:a3:8f:24:9d:44:78:
d8:c7:5f:11:a6:72:d8:d1:fe:e2:74:de:c9:2f:fd:
37:18:31:a3:98:f1:47:4e:e8:18:7f:f3:fc:f1:f5:
ff:92:68:c2:bf:a2:a8:ec:17:99:cd:14:5a:60:40:
ad:ca:70:bb:1a:e3:b5:08:6f:49:1a:92:ec:87:3d:
ad:5d:45:83:63:fc:2e:19:68:3c:ab:ae:8e:c2:38:
07:dd:1d:34:18:26:a3:77:60:6f:a3:dc:b7:50:d8:
3f:cd:59:4f:77:93:e5:b7:1f:e8:cc:60:c3:13:3f:
8e:fc:c3:3f:6a:c9:b2:4d:74:94:bc:af:c1:c1:32:
53:3f:9e:8c:69:4c:58:72:ae:16:34:16:bd:3f:f8:
99:a8:09:37:cf:d2:9d:06:62:ca:cb:19:2b:ff:36:
c6:dd:3a:5b:4b:c9:4c:d1:7e:17:dc:2b:2a:7d:8b:
57:1f:f7:62:2c:92:2d:c1:80:89:2a:b4:94:9d:b7:
fd:5d:63:78:60:84:9d:b3:e6:cc:fe:8d:a9:b2:37:
30:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:6E:55:AC:31:7C:82:65:45:EF:33:90:CB:4C:B1:FA:55:09:79:44
X509v3 Authority Key Identifier:
keyid:A1:42:15:95:C9:88:FB:26:53:65:EB:9C:A1:FA:3F:17:FC:57:07:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oUIVlcmI-yZTZeucofo_F_xXB28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d625c5-790c-4b51-9ef1-baef4ebf68da/1/oUIVlcmI-yZTZeucofo_F_xXB28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d625c5-790c-4b51-9ef1-baef4ebf68da/1/oUIVlcmI-yZTZeucofo_F_xXB28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b9:ea:c2:26:47:00:a8:f3:28:7d:84:56:d3:f7:c8:ef:78:
69:f9:9c:c4:74:e0:3a:2e:00:cf:60:01:bb:82:ae:50:89:43:
43:72:ba:5f:f6:41:43:18:fe:51:9b:32:fe:d3:20:80:56:48:
b1:9d:71:78:7d:71:ff:83:92:d0:6c:00:7b:91:03:d1:db:37:
b0:0b:85:d8:28:27:af:6f:86:dd:ec:cc:72:5c:2e:5c:36:99:
19:c9:65:ca:ea:31:70:60:3b:b0:18:ab:ce:4d:2d:7e:11:b5:
37:56:88:89:35:e1:0c:2c:64:35:ee:a0:5f:d7:b8:58:4f:db:
5b:24:b8:65:ac:0b:6c:4a:63:64:6e:98:4c:24:84:98:07:fa:
5b:6e:42:fe:f3:75:40:71:2a:0b:ed:6e:7d:88:5e:31:c4:35:
65:5e:87:3b:91:71:5b:be:47:73:63:52:94:26:b3:8a:8e:2e:
f6:d2:2f:4a:18:1d:3e:a6:ed:f6:7d:80:50:9d:48:15:25:cd:
41:d8:76:96:00:b8:19:fc:85:9e:63:32:2d:96:27:ec:0a:06:
c3:78:34:ad:35:0b:bd:14:75:41:80:c6:65:77:2e:d6:60:94:
7b:d3:aa:15:cd:e3:9c:03:62:c9:1b:df:75:e7:84:0d:cf:5d:
7c:10:5f:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qY7noys7dk0O8RKR8LqsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNDIxNTk1Yzk4OGZiMjY1MzY1ZWI5Y2ExZmEzZjE3ZmM1
NzA3NmYwHhcNMjUwMTMxMTQwMDE2WhcNMjUwMjAxMTQwMDE2WjAzMTEwLwYDVQQD
EygzMTZlNTVhYzMxN2M4MjY1NDVlZjMzOTBjYjRjYjFmYTU1MDk3OTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07PHXzZiT0aJ8WgIi1Sfc4gEaOmO
uoQW7lUC3dL0CL5HI3GdhyaWei+4Njj//+J/l2CChO2jjySdRHjYx18RpnLY0f7i
dN7JL/03GDGjmPFHTugYf/P88fX/kmjCv6Ko7BeZzRRaYECtynC7GuO1CG9JGpLs
hz2tXUWDY/wuGWg8q66OwjgH3R00GCajd2Bvo9y3UNg/zVlPd5Pltx/ozGDDEz+O
/MM/asmyTXSUvK/BwTJTP56MaUxYcq4WNBa9P/iZqAk3z9KdBmLKyxkr/zbG3Tpb
S8lM0X4X3CsqfYtXH/diLJItwYCJKrSUnbf9XWN4YISds+bM/o2psjcwiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFuVawxfIJlRe8zkMtMsfpVCXlEMB8GA1UdIwQY
MBaAFKFCFZXJiPsmU2XrnKH6Pxf8VwdvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1VJVmxjbUkteVpUWmV1Y29mb19GX3hYQjI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kNjI1YzUtNzkwYy00YjUxLTllZjEt
YmFlZjRlYmY2OGRhLzEvb1VJVmxjbUkteVpUWmV1Y29mb19GX3hYQjI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9kNjI1YzUtNzkwYy00YjUxLTllZjEtYmFlZjRlYmY2OGRh
LzEvb1VJVmxjbUkteVpUWmV1Y29mb19GX3hYQjI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7nqwiZH
AKjzKH2EVtP3yO94afmcxHTgOi4Az2ABu4KuUIlDQ3K6X/ZBQxj+UZsy/tMggFZI
sZ1xeH1x/4OS0GwAe5ED0ds3sAuF2Cgnr2+G3ezMclwuXDaZGcllyuoxcGA7sBir
zk0tfhG1N1aIiTXhDCxkNe6gX9e4WE/bWyS4ZawLbEpjZG6YTCSEmAf6W25C/vN1
QHEqC+1ufYheMcQ1ZV6HO5FxW75Hc2NSlCazio4u9tIvShgdPqbt9n2AUJ1IFSXN
Qdh2lgC4GfyFnmMyLZYn7AoGw3g0rTULvRR1QYDGZXcu1mCUe9OqFc3jnANiyRvf
deeEDc9dfBBfGQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:42:04 2025 by rpki-client