Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
File: O9_XYE36DriuIOkPzxMDk7ioVko.mft (raw, json)
Hash identifier: D9Ek2T3f8At9+G0f6x93x6xmvOYUmctI8BIDaaq0w9I=
Subject key identifier: AD:D4:EE:23:6D:83:16:5A:4F:69:0A:04:04:2A:68:24:4D:72:E5:47
Authority key identifier: 3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
Certificate issuer: /CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Certificate serial: 0194BD85A8881C9660150015D600CC2AAA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:40 +0000
Manifest this update: Fri 31 Jan 2025 18:00:40 +0000
Manifest next update: Sat 01 Feb 2025 18:00:40 +0000
Files and hashes: 1: O9_XYE36DriuIOkPzxMDk7ioVko.crl (hash: uk29PlhCsemNm9EnCw0t9VW/Ix/WhOgK/tAp4nz07Rg=)
2: m0kgiTT_WYsp23pJuD7SLX4KQwM.roa (hash: VIdUf2MaaJNNuBUU6XlHsX2gourJRTd5TApzwygVz+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a8:88:1c:96:60:15:00:15:d6:00:cc:2a:aa:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bdfd7604dfa0eb8ae20e90fcf130393b8a8564a
Validity
Not Before: Jan 31 18:00:40 2025 GMT
Not After : Feb 1 18:00:40 2025 GMT
Subject: CN=add4ee236d83165a4f690a04042a68244d72e547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f4:be:53:2a:49:9e:87:73:c6:14:2c:4e:00:
44:28:ab:e3:5c:d8:7d:0a:51:53:b6:6a:d0:07:8e:
a4:9d:da:34:6c:6d:61:e9:10:d9:e7:ab:7a:47:3a:
d0:c9:7a:4c:d3:13:df:18:3d:f4:42:48:48:d3:39:
aa:8e:b2:25:ce:2f:8a:3a:23:f2:8d:f6:7f:df:1a:
00:1d:44:d7:d2:7a:50:01:02:90:22:2c:f8:cc:96:
55:cd:86:01:83:10:f8:6b:f0:fe:a7:58:26:9a:dd:
7b:23:bb:e5:5c:66:d6:a1:0c:d7:64:5f:f4:70:d2:
f6:a4:2e:ba:ba:46:b1:77:29:7f:ca:71:68:39:23:
1e:fc:a4:36:67:ff:6d:48:fc:04:c6:04:6c:3f:e8:
46:bb:80:ce:80:e0:bb:95:8c:a0:23:53:a9:6c:d6:
99:07:ee:c6:9b:0a:e1:48:0d:c3:17:af:33:af:3f:
e7:35:0b:45:f3:4f:cd:bc:b3:6a:4a:10:0b:51:a0:
b6:ab:50:d6:79:fa:a2:aa:0a:1b:83:8c:34:22:0c:
87:f1:ee:a9:68:a0:67:15:7f:89:2d:59:3f:1b:22:
e2:0f:a8:0f:98:fd:ac:7d:ae:a5:35:1a:77:b2:43:
28:bb:b3:10:0d:49:58:28:20:37:30:6f:94:d2:bd:
a2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D4:EE:23:6D:83:16:5A:4F:69:0A:04:04:2A:68:24:4D:72:E5:47
X509v3 Authority Key Identifier:
keyid:3B:DF:D7:60:4D:FA:0E:B8:AE:20:E9:0F:CF:13:03:93:B8:A8:56:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9_XYE36DriuIOkPzxMDk7ioVko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8dc2c7-3fc0-446d-807c-ef6c9ead611c/1/O9_XYE36DriuIOkPzxMDk7ioVko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:fd:39:e0:7d:2a:c8:17:03:d6:c3:8e:78:65:28:9a:2c:cd:
4e:d0:28:2b:44:fe:08:24:a1:00:5f:4d:a1:8d:9d:d2:cb:72:
28:d8:17:d8:8c:db:80:d3:22:10:fb:3a:3d:f9:db:76:46:d3:
1c:35:fa:ab:83:57:f9:5a:48:50:ce:ee:c0:ca:92:37:ad:e0:
c4:38:9e:5d:3d:77:8b:60:26:91:ad:87:13:04:1e:d8:1f:d8:
1a:5e:3e:9c:be:9d:00:c7:b6:aa:5e:a1:39:7d:d5:b1:45:a4:
3b:af:69:a0:6a:c7:a7:8c:58:c1:94:1c:c2:aa:29:a3:14:39:
d9:17:c8:9a:0f:4f:1d:ff:95:f0:22:f2:5c:9b:d9:f3:24:cf:
8a:8d:86:a3:4f:42:c2:5b:57:29:97:61:fa:ba:82:64:f1:f9:
29:b3:d4:1d:63:a7:3c:a9:ef:12:a8:b3:b4:64:ab:fc:33:4b:
a4:ac:54:0d:fc:2d:b6:58:5c:f2:b5:b6:94:46:d1:11:4b:97:
72:96:c3:f3:2d:5f:38:84:33:4f:ba:14:ea:8c:23:03:97:49:
49:0b:76:d8:41:97:18:9b:61:13:1d:5d:50:85:42:1e:b4:2d:
52:5a:bd:ce:4e:29:59:ff:a0:db:68:df:fc:81:60:e5:23:44:
b9:d1:57:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9haiIHJZgFQAV1gDMKqp2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZGZkNzYwNGRmYTBlYjhhZTIwZTkwZmNmMTMwMzkzYjhh
ODU2NGEwHhcNMjUwMTMxMTgwMDQwWhcNMjUwMjAxMTgwMDQwWjAzMTEwLwYDVQQD
EyhhZGQ0ZWUyMzZkODMxNjVhNGY2OTBhMDQwNDJhNjgyNDRkNzJlNTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvS+UypJnodzxhQsTgBEKKvjXNh9
ClFTtmrQB46kndo0bG1h6RDZ56t6RzrQyXpM0xPfGD30QkhI0zmqjrIlzi+KOiPy
jfZ/3xoAHUTX0npQAQKQIiz4zJZVzYYBgxD4a/D+p1gmmt17I7vlXGbWoQzXZF/0
cNL2pC66ukaxdyl/ynFoOSMe/KQ2Z/9tSPwExgRsP+hGu4DOgOC7lYygI1OpbNaZ
B+7GmwrhSA3DF68zrz/nNQtF80/NvLNqShALUaC2q1DWefqiqgobg4w0IgyH8e6p
aKBnFX+JLVk/GyLiD6gPmP2sfa6lNRp3skMou7MQDUlYKCA3MG+U0r2iawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK3U7iNtgxZaT2kKBAQqaCRNcuVHMB8GA1UdIwQY
MBaAFDvf12BN+g64riDpD88TA5O4qFZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84ZGMyYzctM2ZjMC00NDZkLTgwN2Mt
ZWY2YzllYWQ2MTFjLzEvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84ZGMyYzctM2ZjMC00NDZkLTgwN2MtZWY2YzllYWQ2MTFj
LzEvTzlfWFlFMzZEcml1SU9rUHp4TURrN2lvVmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/054H0q
yBcD1sOOeGUomizNTtAoK0T+CCShAF9NoY2d0styKNgX2IzbgNMiEPs6PfnbdkbT
HDX6q4NX+VpIUM7uwMqSN63gxDieXT13i2Amka2HEwQe2B/YGl4+nL6dAMe2ql6h
OX3VsUWkO69poGrHp4xYwZQcwqopoxQ52RfImg9PHf+V8CLyXJvZ8yTPio2Go09C
wltXKZdh+rqCZPH5KbPUHWOnPKnvEqiztGSr/DNLpKxUDfwttlhc8rW2lEbREUuX
cpbD8y1fOIQzT7oU6owjA5dJSQt22EGXGJthEx1dUIVCHrQtUlq9zk4pWf+g22jf
/IFg5SNEudFXAw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:10 2025 by rpki-client