Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
File: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft (raw, json)
Hash identifier: 6d9YnCs3YxU425zVCJvnpj4krs50LfdItsP3DaFTmic=
Subject key identifier: 95:EC:74:7F:A8:83:76:2E:85:CD:BA:36:90:15:7B:B8:4C:53:16:1A
Authority key identifier: A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
Certificate issuer: /CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Certificate serial: 0194BBCE79373A79242CAA5136ADCB57E576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
Manifest number: 0D58
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl (hash: xfUYY9ZQV+2qt98apGnY+lN/z/2yCZ3O+k5p6iSQGBk=)
2: y54lwyg0yxWntbnoIO-4zit0Jno.roa (hash: H4sOyX+DnDSSZx2P69W1kPQ6mzjJ5+oKrKghYFIkZco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:79:37:3a:79:24:2c:aa:51:36:ad:cb:57:e5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a00995a87bf64dc4949b819dfe02f8a586aaa4de
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=95ec747fa883762e85cdba3690157bb84c53161a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:07:7f:06:cf:ef:f5:3d:be:da:5e:df:f6:bc:
1f:58:4b:a1:ae:a5:3f:28:1e:d2:c5:02:5d:b4:5d:
f1:b1:d0:a4:7f:47:f4:77:39:f5:b7:74:75:66:65:
0c:c9:d1:ae:4b:79:24:91:dd:7e:d2:65:0c:33:e4:
db:b0:33:f5:98:b0:aa:3d:c8:05:c8:2d:e9:a9:0f:
27:ba:6e:e0:62:b0:52:05:ad:28:4e:58:e5:0d:9f:
64:b8:b6:09:9a:97:64:d1:87:62:1f:67:ff:92:a0:
bf:86:af:c5:8d:6d:e3:d9:a9:66:0c:15:28:8c:2c:
e4:af:ca:f6:4e:f7:d0:3d:63:7c:88:05:10:92:41:
fc:cf:86:5c:b7:d9:5f:84:3b:c8:c9:d1:83:84:22:
bb:d8:e5:35:ad:13:cc:b4:cb:78:40:f4:10:63:22:
3f:7b:61:0d:ab:43:88:98:06:63:e2:3c:84:99:f3:
23:70:a5:50:3c:1f:fe:00:23:9d:0c:d4:a7:fc:29:
3d:cb:8f:97:9a:ab:79:2e:73:d5:dc:a7:4d:0d:13:
42:9b:fd:0c:35:aa:56:b0:c2:25:d0:a3:37:19:8c:
7b:cf:5d:f4:71:ab:db:d8:2f:27:65:ec:46:bb:b5:
68:cb:59:0c:4b:40:c8:cc:58:96:2d:e2:ae:73:c2:
3a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:EC:74:7F:A8:83:76:2E:85:CD:BA:36:90:15:7B:B8:4C:53:16:1A
X509v3 Authority Key Identifier:
keyid:A0:09:95:A8:7B:F6:4D:C4:94:9B:81:9D:FE:02:F8:A5:86:AA:A4:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/fea5c4-dde1-4548-a58b-8938e9556342/1/oAmVqHv2TcSUm4Gd_gL4pYaqpN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ea:ad:4a:ce:df:d6:3a:b4:91:9d:c4:70:bb:62:a3:2c:23:
9d:a1:e3:d9:62:b8:b4:27:7b:4f:8f:f1:e2:2d:46:2b:b5:58:
0a:15:46:15:ce:de:34:a3:87:dd:b8:8b:1f:fa:97:de:e2:05:
88:f9:89:f0:69:33:d6:f7:d6:79:fc:d1:19:92:fe:b0:00:17:
8e:69:9d:51:96:0a:bc:9b:97:e3:83:07:11:40:07:8d:aa:50:
b7:91:73:25:04:67:3a:63:18:5c:49:ed:26:32:04:ad:b0:46:
15:12:de:8f:65:2d:d7:14:ec:04:23:80:26:09:c1:a6:9a:cd:
37:50:5a:0a:27:a1:ac:a0:d5:bd:be:10:b4:d0:ab:b7:47:e3:
68:d0:ad:63:a8:f5:26:8c:fd:c7:cf:93:25:b3:5d:e8:57:57:
d8:71:14:75:49:8f:5c:42:42:a7:6e:a5:20:83:91:b9:77:cd:
56:4d:d1:05:da:a5:9c:f6:03:56:53:65:de:6f:94:08:4f:60:
e9:ad:34:46:32:96:28:3b:ff:9a:2a:bc:f7:91:1e:cf:16:d2:
3b:b8:9f:2d:f0:56:0e:61:7f:7c:12:f2:23:8a:55:f8:70:e6:
b2:3c:39:23:61:61:4c:9b:73:24:89:bc:8c:81:9a:3f:b1:9e:
4a:4d:b8:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znk3OnkkLKpRNq3LV+V2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMDk5NWE4N2JmNjRkYzQ5NDliODE5ZGZlMDJmOGE1ODZh
YWE0ZGUwHhcNMjUwMTMxMTAwMDU4WhcNMjUwMjAxMTAwMDU4WjAzMTEwLwYDVQQD
Eyg5NWVjNzQ3ZmE4ODM3NjJlODVjZGJhMzY5MDE1N2JiODRjNTMxNjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQd/Bs/v9T2+2l7f9rwfWEuhrqU/
KB7SxQJdtF3xsdCkf0f0dzn1t3R1ZmUMydGuS3kkkd1+0mUMM+TbsDP1mLCqPcgF
yC3pqQ8num7gYrBSBa0oTljlDZ9kuLYJmpdk0YdiH2f/kqC/hq/FjW3j2almDBUo
jCzkr8r2TvfQPWN8iAUQkkH8z4Zct9lfhDvIydGDhCK72OU1rRPMtMt4QPQQYyI/
e2ENq0OImAZj4jyEmfMjcKVQPB/+ACOdDNSn/Ck9y4+Xmqt5LnPV3KdNDRNCm/0M
NapWsMIl0KM3GYx7z130cavb2C8nZexGu7Voy1kMS0DIzFiWLeKuc8I6xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXsdH+og3Yuhc26NpAVe7hMUxYaMB8GA1UdIwQY
MBaAFKAJlah79k3ElJuBnf4C+KWGqqTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9mZWE1YzQtZGRlMS00NTQ4LWE1OGIt
ODkzOGU5NTU2MzQyLzEvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9mZWE1YzQtZGRlMS00NTQ4LWE1OGItODkzOGU5NTU2MzQy
LzEvb0FtVnFIdjJUY1NVbTRHZF9nTDRwWWFxcE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReqtSs7f
1jq0kZ3EcLtioywjnaHj2WK4tCd7T4/x4i1GK7VYChVGFc7eNKOH3biLH/qX3uIF
iPmJ8Gkz1vfWefzRGZL+sAAXjmmdUZYKvJuX44MHEUAHjapQt5FzJQRnOmMYXEnt
JjIErbBGFRLej2Ut1xTsBCOAJgnBpprNN1BaCiehrKDVvb4QtNCrt0fjaNCtY6j1
Joz9x8+TJbNd6FdX2HEUdUmPXEJCp26lIIORuXfNVk3RBdqlnPYDVlNl3m+UCE9g
6a00RjKWKDv/miq895EezxbSO7ifLfBWDmF/fBLyI4pV+HDmsjw5I2FhTJtzJIm8
jIGaP7GeSk24OA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:00 2025 by rpki-client