Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
File: oRlmxatOoGc8xBx4bgd4OUuL2s8.mft (raw, json)
Hash identifier: 7G9oNbELO3yuRrw2ZsuYtqvNyNEJYO3G5nF2svZwOZ8=
Subject key identifier: 05:A8:56:C8:E3:1B:00:69:C9:A7:09:ED:46:C3:8E:A1:E2:29:D8:2A
Authority key identifier: A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
Certificate issuer: /CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Certificate serial: 0194BBCE7B06DDA9FFD4171658A3B98446E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 10:00:58 +0000
Manifest this update: Fri 31 Jan 2025 10:00:58 +0000
Manifest next update: Sat 01 Feb 2025 10:00:58 +0000
Files and hashes: 1: oRlmxatOoGc8xBx4bgd4OUuL2s8.crl (hash: Oz4OFnBO1HLzgyxx/Zs2gQGNr8AvInKrpGxFK/KyNt4=)
2: qPThmJkS6FxAgaSTFhSE99KManI.roa (hash: Do8CZ36UGaGoT9RKraM+Tjl00O5s0+cXk4PDU/3dbE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7b:06:dd:a9:ff:d4:17:16:58:a3:b9:84:46:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a11966c5ab4ea0673cc41c786e0778394b8bdacf
Validity
Not Before: Jan 31 10:00:58 2025 GMT
Not After : Feb 1 10:00:58 2025 GMT
Subject: CN=05a856c8e31b0069c9a709ed46c38ea1e229d82a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:af:5f:5a:fe:76:d2:d6:c5:a2:5a:f7:35:
75:e6:26:83:5d:6e:81:e5:88:51:5c:ac:58:5b:5b:
05:b4:3d:37:72:b2:4f:3e:cc:cc:91:55:0d:f5:e8:
83:a4:b4:cb:52:3b:2a:00:71:c9:40:52:d9:90:9e:
c7:16:74:8d:cb:fd:11:7f:cb:66:c1:08:42:a0:62:
42:41:0c:f7:2f:a3:09:36:16:dd:d5:7d:7e:95:4a:
82:72:56:4d:44:84:d3:1f:87:80:6c:ac:35:a0:31:
5c:aa:7a:82:ce:90:34:d7:2a:dd:f6:7b:a9:a9:e7:
ac:75:53:2a:ed:ae:8e:5a:d6:9b:50:23:15:dd:ca:
91:98:79:ad:3b:56:11:5f:88:b1:de:3a:50:17:9c:
d8:eb:c5:85:7d:83:37:3f:85:df:fd:72:54:aa:03:
0b:60:5b:f4:f3:f7:9d:cb:3d:2b:b3:9b:f4:92:4d:
79:7d:44:20:70:20:96:b7:dc:50:85:3b:99:ca:ce:
9a:06:a1:60:f9:e7:29:42:7e:6a:68:3f:5f:84:76:
45:29:bc:c9:55:2b:5d:df:86:05:7d:a4:af:38:50:
ad:4f:b3:d8:92:ee:57:6a:d2:43:8d:67:8c:97:83:
fe:58:60:20:23:ad:9e:b1:31:01:b1:fa:45:81:0b:
0e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A8:56:C8:E3:1B:00:69:C9:A7:09:ED:46:C3:8E:A1:E2:29:D8:2A
X509v3 Authority Key Identifier:
keyid:A1:19:66:C5:AB:4E:A0:67:3C:C4:1C:78:6E:07:78:39:4B:8B:DA:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oRlmxatOoGc8xBx4bgd4OUuL2s8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/120e32-793c-4e23-9dd8-4a75a14121bf/1/oRlmxatOoGc8xBx4bgd4OUuL2s8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c3:dd:be:08:e9:a4:50:e4:b0:d6:5b:d8:e6:81:4c:ee:44:
d1:25:aa:63:8f:4d:c9:63:35:54:2d:e9:c8:5c:d4:f4:80:e6:
5d:5a:67:d7:13:d4:11:a4:c0:5e:5f:90:b8:dc:f8:7f:76:d2:
8d:9c:1d:73:14:bb:b3:f5:4a:d5:ae:80:16:14:c8:59:e1:11:
60:7d:93:72:df:05:68:bf:4d:64:97:b8:bc:3f:a8:c2:17:68:
81:01:6b:62:e4:2d:c9:d5:cf:94:aa:b2:9c:5b:cc:16:cf:e1:
04:18:31:e1:63:38:3d:59:2f:f5:0f:83:1a:e1:f2:6a:93:db:
05:67:70:05:4b:c0:ee:14:ff:f3:ff:fb:9c:b3:de:47:ad:9f:
b6:e7:60:4e:c5:44:18:a1:58:a5:79:ab:2c:b1:3b:21:76:0b:
4d:fb:f0:59:89:52:b3:4a:5a:ef:58:a2:9f:44:c9:73:ea:f0:
ac:44:52:61:e7:b6:7f:56:4a:c3:6a:e1:c0:8d:57:73:49:d7:
03:0a:27:e1:03:15:ba:ed:8c:36:73:34:a3:14:29:1c:df:ed:
36:57:2b:96:20:1c:33:be:f1:08:1e:e1:be:1a:d8:e9:cf:ba:
8b:c9:b2:82:7f:a8:52:60:05:24:05:15:c2:26:e2:22:3d:6d:
7a:1b:a9:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znsG3an/1BcWWKO5hEboMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMTk2NmM1YWI0ZWEwNjczY2M0MWM3ODZlMDc3ODM5NGI4
YmRhY2YwHhcNMjUwMTMxMTAwMDU4WhcNMjUwMjAxMTAwMDU4WjAzMTEwLwYDVQQD
EygwNWE4NTZjOGUzMWIwMDY5YzlhNzA5ZWQ0NmMzOGVhMWUyMjlkODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvOvX1r+dtLWxaJa9zV15iaDXW6B
5YhRXKxYW1sFtD03crJPPszMkVUN9eiDpLTLUjsqAHHJQFLZkJ7HFnSNy/0Rf8tm
wQhCoGJCQQz3L6MJNhbd1X1+lUqCclZNRITTH4eAbKw1oDFcqnqCzpA01yrd9nup
qeesdVMq7a6OWtabUCMV3cqRmHmtO1YRX4ix3jpQF5zY68WFfYM3P4Xf/XJUqgML
YFv08/edyz0rs5v0kk15fUQgcCCWt9xQhTuZys6aBqFg+ecpQn5qaD9fhHZFKbzJ
VStd34YFfaSvOFCtT7PYku5XatJDjWeMl4P+WGAgI62esTEBsfpFgQsOKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWoVsjjGwBpyacJ7UbDjqHiKdgqMB8GA1UdIwQY
MBaAFKEZZsWrTqBnPMQceG4HeDlLi9rPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgt
NGE3NWExNDEyMWJmLzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMjBlMzItNzkzYy00ZTIzLTlkZDgtNGE3NWExNDEyMWJm
LzEvb1JsbXhhdE9vR2M4eEJ4NGJnZDRPVXVMMnM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcPdvgjp
pFDksNZb2OaBTO5E0SWqY49NyWM1VC3pyFzU9IDmXVpn1xPUEaTAXl+QuNz4f3bS
jZwdcxS7s/VK1a6AFhTIWeERYH2Tct8FaL9NZJe4vD+owhdogQFrYuQtydXPlKqy
nFvMFs/hBBgx4WM4PVkv9Q+DGuHyapPbBWdwBUvA7hT/8//7nLPeR62ftudgTsVE
GKFYpXmrLLE7IXYLTfvwWYlSs0pa71iin0TJc+rwrERSYee2f1ZKw2rhwI1Xc0nX
Awon4QMVuu2MNnM0oxQpHN/tNlcrliAcM77xCB7hvhrY6c+6i8mygn+oUmAFJAUV
wibiIj1tehupwg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:02 2025 by rpki-client