Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
File: oIRWvGXLSxVanmtLMW3VFOBDG2k.mft (raw, json)
Hash identifier: edKOnsR+FDY06ZTSwiYv819NZmA3QZiobe+JZFjoOc8=
Subject key identifier: 2D:35:84:EF:28:DE:0B:2F:FF:3C:84:DA:7D:91:CC:9B:87:D3:D7:6B
Authority key identifier: A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
Certificate issuer: /CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Certificate serial: 0194BD17D2384EE56D199BE571708305CD33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
Manifest number: 0CE9
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: oIRWvGXLSxVanmtLMW3VFOBDG2k.crl (hash: 8Du6Jd8+k1kDb2JikIWL6J22fhQNlfF5Jjnbb4SjuCU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d2:38:4e:e5:6d:19:9b:e5:71:70:83:05:cd:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a08456bc65cb4b155a9e6b4b316dd514e0431b69
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=2d3584ef28de0b2fff3c84da7d91cc9b87d3d76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1d:6b:a8:00:f5:e3:7b:60:f3:6d:33:ca:f1:
d7:31:11:81:32:76:3c:47:f5:23:c3:5b:b8:b2:73:
a4:11:e4:ef:46:30:a8:b5:81:28:35:89:ae:75:9f:
cf:c0:6c:a9:b0:c2:ea:ab:63:9c:27:6b:7d:81:fe:
ed:dc:9a:f5:f4:38:9e:d5:03:5e:15:ff:8f:ef:53:
f0:cc:e3:50:bf:63:a4:bf:9e:3c:05:0b:8b:ff:ab:
75:11:3f:ee:f8:5f:8b:f1:68:cf:a8:08:13:f6:36:
53:46:ce:7b:87:77:82:b6:2e:eb:98:1f:1d:6c:c1:
7d:0d:ab:c2:61:70:45:93:90:5f:44:e6:52:17:e9:
1d:a3:39:bc:d4:b4:8f:55:1b:c5:b4:6a:bb:5c:39:
82:83:a3:82:3d:cb:b6:b8:ef:1e:f0:b9:58:34:27:
06:b5:c1:31:02:5d:8f:90:f8:2f:94:a8:d9:84:0f:
1d:03:ae:a0:96:cc:7b:4d:97:26:30:fb:79:e7:f4:
41:d8:c1:0f:e3:08:a8:66:1a:e2:20:98:7f:53:8a:
ec:b8:6f:2d:fe:d8:34:fb:93:05:84:df:21:c8:30:
4c:e7:67:03:2a:70:a4:78:80:84:53:87:60:62:dc:
45:dc:05:02:08:87:73:99:18:a2:17:1e:07:bd:53:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:35:84:EF:28:DE:0B:2F:FF:3C:84:DA:7D:91:CC:9B:87:D3:D7:6B
X509v3 Authority Key Identifier:
keyid:A0:84:56:BC:65:CB:4B:15:5A:9E:6B:4B:31:6D:D5:14:E0:43:1B:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIRWvGXLSxVanmtLMW3VFOBDG2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c63c8d-d7c7-4e8c-b876-ffedf0ad0be3/1/oIRWvGXLSxVanmtLMW3VFOBDG2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6b:bb:b9:bb:28:70:da:34:a1:35:cb:0d:a0:56:9e:01:54:
9a:bb:03:2d:0c:c0:d7:24:cc:6e:9b:81:93:3c:c6:39:48:fc:
38:34:a0:e6:dc:a1:d5:6e:e9:75:67:e9:92:d9:91:40:01:21:
92:b4:36:83:bd:51:a3:a9:37:a5:d7:0c:85:37:6f:fd:28:a8:
b0:95:21:56:68:7b:59:a4:69:43:1d:9e:54:2d:47:c4:03:2d:
f8:ce:12:0a:ae:5e:68:46:29:d9:77:88:f2:6b:1f:78:38:ab:
57:fc:33:48:22:58:c4:cf:c7:38:dd:13:56:57:78:2d:21:cc:
b6:8f:ce:ac:81:13:62:38:e7:f7:48:f3:44:a5:0f:02:b2:97:
cf:f6:eb:12:44:6e:ab:62:fc:f4:d4:d1:34:e5:a9:ba:0b:bd:
eb:a3:90:e9:70:83:00:d8:14:84:67:62:e0:b4:0f:e4:4d:e6:
15:f0:cc:24:a8:36:ba:25:c6:61:82:26:fd:ff:f0:60:65:76:
3d:d9:cc:17:b2:db:be:01:0e:f5:25:38:5b:73:49:57:c3:77:
2d:46:e4:f7:64:aa:0e:31:d5:be:11:7f:b2:d6:8c:42:3a:0c:
0b:34:c9:15:bc:0b:0f:b5:ed:34:26:64:ed:26:ee:88:d4:b0:
82:a9:74:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F9I4TuVtGZvlcXCDBc0zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwODQ1NmJjNjVjYjRiMTU1YTllNmI0YjMxNmRkNTE0ZTA0
MzFiNjkwHhcNMjUwMTMxMTYwMDQyWhcNMjUwMjAxMTYwMDQyWjAzMTEwLwYDVQQD
EygyZDM1ODRlZjI4ZGUwYjJmZmYzYzg0ZGE3ZDkxY2M5Yjg3ZDNkNzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB1rqAD143tg820zyvHXMRGBMnY8
R/Ujw1u4snOkEeTvRjCotYEoNYmudZ/PwGypsMLqq2OcJ2t9gf7t3Jr19Die1QNe
Ff+P71PwzONQv2Okv548BQuL/6t1ET/u+F+L8WjPqAgT9jZTRs57h3eCti7rmB8d
bMF9DavCYXBFk5BfROZSF+kdozm81LSPVRvFtGq7XDmCg6OCPcu2uO8e8LlYNCcG
tcExAl2PkPgvlKjZhA8dA66glsx7TZcmMPt55/RB2MEP4wioZhriIJh/U4rsuG8t
/tg0+5MFhN8hyDBM52cDKnCkeICEU4dgYtxF3AUCCIdzmRiiFx4HvVMUuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC01hO8o3gsv/zyE2n2RzJuH09drMB8GA1UdIwQY
MBaAFKCEVrxly0sVWp5rSzFt1RTgQxtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYt
ZmZlZGYwYWQwYmUzLzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNjNjOGQtZDdjNy00ZThjLWI4NzYtZmZlZGYwYWQwYmUz
LzEvb0lSV3ZHWExTeFZhbm10TE1XM1ZGT0JERzJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzGu7ubso
cNo0oTXLDaBWngFUmrsDLQzA1yTMbpuBkzzGOUj8ODSg5tyh1W7pdWfpktmRQAEh
krQ2g71Ro6k3pdcMhTdv/SiosJUhVmh7WaRpQx2eVC1HxAMt+M4SCq5eaEYp2XeI
8msfeDirV/wzSCJYxM/HON0TVld4LSHMto/OrIETYjjn90jzRKUPArKXz/brEkRu
q2L89NTRNOWpugu966OQ6XCDANgUhGdi4LQP5E3mFfDMJKg2uiXGYYIm/f/wYGV2
PdnMF7LbvgEO9SU4W3NJV8N3LUbk92SqDjHVvhF/staMQjoMCzTJFbwLD7XtNCZk
7SbuiNSwgql0WA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:03:01 2025 by rpki-client