Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File: OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier: hy9wt8794ti7mt86EG/iQSuFjtm0jWmhtvufpPPpY9s=
Subject key identifier: 69:42:B0:C5:02:33:DF:B1:46:89:44:93:5D:09:87:D4:A0:12:20:DE
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer: /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial: 0194BD4E627CD8237EFCF1F3B552F2247688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number: 016A
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: sRs+VN6iDkOyIP5tDlUOFlh6/QVX3PqA6ABcbXkRrjg=)
2: byq9jEJ8I-x78db4YmLa9HioKo8.roa (hash: QYVcPpPrnjWxAxRBsq739GpWzHWctl66pKlaoafsOic=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:62:7c:d8:23:7e:fc:f1:f3:b5:52:f2:24:76:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=6942b0c50233dfb1468944935d0987d4a01220de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:20:79:46:30:1e:14:fe:dc:7a:37:6d:bc:f3:
c0:c6:71:c0:da:61:36:71:33:42:ed:c4:9c:0e:6b:
17:2c:fd:83:03:53:15:91:1a:b7:e6:40:be:72:64:
e1:05:01:7c:5d:28:be:da:3e:87:7a:37:15:59:1c:
78:1c:61:48:a5:99:1c:8d:f6:99:a7:c5:ec:67:1b:
f7:77:08:7e:d0:d0:4e:cd:6e:5a:bb:f8:b8:c4:6c:
f7:54:df:d9:24:38:65:67:7f:4b:66:9d:8a:f3:3d:
c2:07:47:09:2d:1f:82:c1:9a:7a:28:f7:7c:94:cd:
32:46:cd:0a:ac:1d:30:1b:6c:b4:70:43:36:47:7e:
9d:a4:5e:4e:76:29:d0:63:44:bc:00:60:34:3b:fc:
6e:d2:1e:02:3f:ba:54:29:bf:6f:97:0e:ca:1b:6a:
2b:31:eb:27:84:b2:f5:97:89:d2:55:bf:4f:b8:17:
45:bb:a2:fe:99:2e:2b:8e:f5:d8:ff:2d:fa:a2:63:
de:b3:53:b7:04:d8:93:e1:2b:94:7e:91:e1:2f:8c:
82:81:9f:02:c0:81:b8:11:c6:94:31:0a:0b:9b:9a:
2a:42:6e:45:8f:2b:32:cc:7f:2c:9d:0a:e6:75:e1:
d6:03:9f:b1:e2:f9:ed:ed:04:fb:f7:c2:60:c8:ae:
27:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:42:B0:C5:02:33:DF:B1:46:89:44:93:5D:09:87:D4:A0:12:20:DE
X509v3 Authority Key Identifier:
keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:be:0c:22:49:37:7f:b0:59:8c:a8:0a:f7:5a:18:c3:87:ad:
c8:59:9c:a6:04:1f:04:28:ea:21:e3:91:03:04:68:91:6e:e9:
19:2d:73:6c:af:1f:64:fc:aa:67:17:40:4d:88:eb:be:b9:d6:
c5:5f:6b:ab:ad:61:f8:3a:0f:c7:7c:eb:a7:50:ec:b4:04:51:
b8:36:a3:08:f8:9f:29:18:ef:f5:69:7b:3e:f3:a3:f5:89:67:
2a:f0:7b:5e:f8:d0:07:05:83:de:d0:af:69:3d:35:b6:ed:ab:
f8:b2:a2:2e:1d:ce:78:94:f5:8d:4f:fa:95:f5:65:5f:48:02:
4d:7d:29:6b:d8:72:f6:4e:94:ba:c4:ed:2d:6f:92:3d:fe:a8:
a6:52:95:d6:d4:6a:53:a8:93:85:1c:1c:b3:0f:e0:2d:2b:14:
1d:9c:0d:c4:db:a0:b1:cc:e6:a8:1d:ea:37:09:2d:0d:0f:d4:
1e:77:ac:9b:57:ab:80:5d:f5:f2:17:34:9a:95:d5:ec:ed:82:
85:da:3e:ee:75:86:82:87:e9:a3:88:d2:17:95:e0:35:e1:56:
60:b7:5e:25:9c:dc:5b:e6:5a:18:a3:a5:cc:ec:1f:91:b3:11:
ea:f8:56:15:73:44:7b:16:bf:7a:a5:bd:f9:52:aa:1f:c4:3c:
d6:01:8c:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TmJ82CN+/PHztVLyJHaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MmY2ZWU2ZWUzNDZjMzE5MTJiNzYzMGRhYjE0Y2U1M2M0
ZTBjOTkwHhcNMjUwMTMxMTcwMDE4WhcNMjUwMjAxMTcwMDE4WjAzMTEwLwYDVQQD
Eyg2OTQyYjBjNTAyMzNkZmIxNDY4OTQ0OTM1ZDA5ODdkNGEwMTIyMGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSB5RjAeFP7cejdtvPPAxnHA2mE2
cTNC7cScDmsXLP2DA1MVkRq35kC+cmThBQF8XSi+2j6HejcVWRx4HGFIpZkcjfaZ
p8XsZxv3dwh+0NBOzW5au/i4xGz3VN/ZJDhlZ39LZp2K8z3CB0cJLR+CwZp6KPd8
lM0yRs0KrB0wG2y0cEM2R36dpF5OdinQY0S8AGA0O/xu0h4CP7pUKb9vlw7KG2or
MesnhLL1l4nSVb9PuBdFu6L+mS4rjvXY/y36omPes1O3BNiT4SuUfpHhL4yCgZ8C
wIG4EcaUMQoLm5oqQm5FjysyzH8snQrmdeHWA5+x4vnt7QT798JgyK4nawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlCsMUCM9+xRolEk10Jh9SgEiDeMB8GA1UdIwQY
MBaAFDkvbubuNGwxkSt2MNqxTOU8TgyZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYt
OGE3MmExYjZhZjg1LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi80NWQ5N2UtNDBmZS00N2UwLWIyZTYtOGE3MmExYjZhZjg1
LzEvT1M5dTV1NDBiREdSSzNZdzJyRk01VHhPREprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnr4MIkk3
f7BZjKgK91oYw4etyFmcpgQfBCjqIeORAwRokW7pGS1zbK8fZPyqZxdATYjrvrnW
xV9rq61h+DoPx3zrp1DstARRuDajCPifKRjv9Wl7PvOj9YlnKvB7XvjQBwWD3tCv
aT01tu2r+LKiLh3OeJT1jU/6lfVlX0gCTX0pa9hy9k6UusTtLW+SPf6oplKV1tRq
U6iThRwcsw/gLSsUHZwNxNugsczmqB3qNwktDQ/UHnesm1ergF318hc0mpXV7O2C
hdo+7nWGgofpo4jSF5XgNeFWYLdeJZzcW+ZaGKOlzOwfkbMR6vhWFXNEexa/eqW9
+VKqH8Q81gGMLA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:19 2025 by rpki-client