Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
File: odykS0q1RTP4tRls-S1o3rj8xeI.mft (raw, json)
Hash identifier: 6wfbXCvspgWTJAee5AmZ8tQY5vX8LfluRtglS1Feonk=
Subject key identifier: CC:3D:EF:D4:5E:E8:25:52:2C:39:2C:23:E0:C4:3E:02:B9:EA:F1:C8
Authority key identifier: A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
Certificate issuer: /CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Certificate serial: 0194BC3C19B9DC13DC6F492743D67C795C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
Manifest number: 0876
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: l7zqJyhx90KkIt187BTrR3I9Tv0.roa (hash: uTJRzkaxY5dJDi+eLwZbT+EnLtQwTVbj1dknQK+ofuQ=)
2: odykS0q1RTP4tRls-S1o3rj8xeI.crl (hash: 1/ep8tcD7fOCt9CyvjqhHFSIdaYd9/UHOAHj0K/y8FU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:19:b9:dc:13:dc:6f:49:27:43:d6:7c:79:5c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dca44b4ab54533f8b5196cf92d68deb8fcc5e2
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=cc3defd45ee825522c392c23e0c43e02b9eaf1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:50:51:bd:b5:25:c7:4c:cc:df:c3:8b:c8:04:
5f:34:9a:db:75:ed:6b:2b:60:99:30:45:f1:88:38:
a4:dd:67:d4:90:6f:ad:88:d1:0b:f7:c9:cb:d8:80:
cc:13:4f:dd:dd:00:d0:eb:df:56:b0:ac:5b:b7:15:
f6:2e:20:fe:cd:de:a3:3e:e7:49:ba:f5:3b:bd:4b:
52:af:7b:46:4d:1f:a6:52:9c:ca:77:f2:f9:7a:33:
82:02:e2:43:f1:5b:51:e2:5f:21:7f:97:7a:5e:15:
be:1f:4b:55:d9:80:32:5e:2d:a5:8e:3c:22:c6:38:
24:17:2f:95:be:88:69:b3:b5:d7:a2:65:f5:7b:1c:
76:44:eb:74:b2:b7:29:da:87:03:48:0d:01:d3:8a:
e9:86:c9:b6:c1:a1:57:83:30:aa:87:d8:64:cf:d6:
67:76:bb:95:d4:e5:13:88:8f:e7:f7:31:73:25:77:
26:cb:5b:c9:92:47:3d:dc:d3:39:9e:2b:e9:3a:65:
50:bc:f4:63:81:17:53:41:40:b4:d9:5e:89:67:18:
9f:08:47:64:9b:d6:5e:e4:bb:fc:e8:c9:0a:29:48:
00:24:00:e7:e6:7a:a3:8d:4a:98:ca:5f:fc:b9:ef:
fb:ae:b3:4e:92:6f:7a:7f:af:a7:65:78:ff:4b:da:
b9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3D:EF:D4:5E:E8:25:52:2C:39:2C:23:E0:C4:3E:02:B9:EA:F1:C8
X509v3 Authority Key Identifier:
keyid:A1:DC:A4:4B:4A:B5:45:33:F8:B5:19:6C:F9:2D:68:DE:B8:FC:C5:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odykS0q1RTP4tRls-S1o3rj8xeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f76a83-ae09-411f-ae9f-5386a79ade80/1/odykS0q1RTP4tRls-S1o3rj8xeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:bf:4a:57:fe:71:88:81:a8:17:f5:b0:d4:1e:aa:ec:87:d0:
79:f2:5a:01:d8:d2:e7:b8:6a:c8:3b:3c:51:0b:58:d3:dc:f3:
3a:9f:67:ba:ad:cf:7f:9b:db:25:92:b6:11:26:4c:8e:42:06:
cd:b4:d5:b9:fe:3b:56:9e:98:1f:b0:f5:79:10:98:00:f8:b9:
5d:24:3f:fa:78:27:e5:4c:2b:c1:f4:67:a3:1a:6e:86:34:72:
a9:78:32:ee:01:39:8d:58:f3:dd:97:63:69:ec:0b:e9:29:81:
bf:60:e2:38:39:ae:e0:d6:4f:a0:31:ce:69:bc:7e:62:68:2e:
9c:ba:f1:eb:18:c6:0a:5c:d5:50:e3:14:95:11:d3:d1:35:99:
ed:8e:53:e0:42:e6:54:e8:32:ad:6b:f1:86:71:1a:48:53:91:
ab:f9:fe:92:37:b1:23:ec:cd:54:71:c3:c5:74:2a:30:4e:b8:
0f:2f:86:48:f7:67:9c:17:00:23:9b:33:ed:d7:4a:39:90:07:
9c:e0:14:a8:45:a0:43:6a:6b:70:e6:da:a3:84:46:60:fe:e3:
49:b2:1b:51:08:21:e1:8e:f8:4b:65:86:e0:2f:c2:8a:3f:bc:
ed:b1:f9:67:f1:6f:cf:25:f3:7f:6e:4c:e7:9d:64:47:1f:3f:
e6:a5:af:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PBm53BPcb0knQ9Z8eVwCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZGNhNDRiNGFiNTQ1MzNmOGI1MTk2Y2Y5MmQ2OGRlYjhm
Y2M1ZTIwHhcNMjUwMTMxMTIwMDQyWhcNMjUwMjAxMTIwMDQyWjAzMTEwLwYDVQQD
EyhjYzNkZWZkNDVlZTgyNTUyMmMzOTJjMjNlMGM0M2UwMmI5ZWFmMWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVBRvbUlx0zM38OLyARfNJrbde1r
K2CZMEXxiDik3WfUkG+tiNEL98nL2IDME0/d3QDQ699WsKxbtxX2LiD+zd6jPudJ
uvU7vUtSr3tGTR+mUpzKd/L5ejOCAuJD8VtR4l8hf5d6XhW+H0tV2YAyXi2ljjwi
xjgkFy+Vvohps7XXomX1exx2ROt0srcp2ocDSA0B04rphsm2waFXgzCqh9hkz9Zn
druV1OUTiI/n9zFzJXcmy1vJkkc93NM5nivpOmVQvPRjgRdTQUC02V6JZxifCEdk
m9Ze5Lv86MkKKUgAJADn5nqjjUqYyl/8ue/7rrNOkm96f6+nZXj/S9q5oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMw979Re6CVSLDksI+DEPgK56vHIMB8GA1UdIwQY
MBaAFKHcpEtKtUUz+LUZbPktaN64/MXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYt
NTM4NmE3OWFkZTgwLzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mNzZhODMtYWUwOS00MTFmLWFlOWYtNTM4NmE3OWFkZTgw
LzEvb2R5a1MwcTFSVFA0dFJscy1TMW8zcmo4eGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwr9KV/5x
iIGoF/Ww1B6q7IfQefJaAdjS57hqyDs8UQtY09zzOp9nuq3Pf5vbJZK2ESZMjkIG
zbTVuf47Vp6YH7D1eRCYAPi5XSQ/+ngn5UwrwfRnoxpuhjRyqXgy7gE5jVjz3Zdj
aewL6SmBv2DiODmu4NZPoDHOabx+YmgunLrx6xjGClzVUOMUlRHT0TWZ7Y5T4ELm
VOgyrWvxhnEaSFORq/n+kjexI+zNVHHDxXQqME64Dy+GSPdnnBcAI5sz7ddKOZAH
nOAUqEWgQ2prcObao4RGYP7jSbIbUQgh4Y74S2WG4C/Cij+87bH5Z/FvzyXzf25M
551kRx8/5qWvOg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:17 2025 by rpki-client