Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
File: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft (raw, json)
Hash identifier: PewkNj/CvFkwzxbbD/W8lfLJoZNNAyS9CpGVN1an9tw=
Subject key identifier: A6:46:DA:7A:C5:36:63:C2:DF:3D:7B:E0:6B:B7:A5:22:C1:17:72:1F
Authority key identifier: A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
Certificate issuer: /CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Certificate serial: 0194BC728BB25EA4BB458B220A3937B26C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
Manifest number: 0CFB
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: JyWi5BFZcLnbfEzmECOIrpo9WqY.roa (hash: BGeaCEXgvEq5NNxKl+Ag2+yFWkLD9Y1n05TPe3xR8kw=)
2: ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl (hash: 9c693BC7M9tSf0V41RWr3E6mE2BPhJmzXYj6zTl7oW0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8b:b2:5e:a4:bb:45:8b:22:0a:39:37:b2:6c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1c130072d2ce9cf562b83198edaadafa48f6db4
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=a646da7ac53663c2df3d7be06bb7a522c117721f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:11:20:02:fc:6b:b0:f5:1e:b6:de:03:57:aa:
f5:94:92:9e:51:70:b6:83:e3:26:51:e8:46:a3:87:
fe:82:db:ea:63:e8:f1:22:18:2a:90:31:0c:ff:72:
9c:72:be:97:fb:80:93:92:48:69:a7:ce:20:c4:32:
d1:d5:ca:b9:01:94:c2:f2:a4:35:de:dc:37:90:f3:
43:e2:6c:d1:8c:fa:de:a3:8e:e8:02:77:f3:4d:9a:
0a:d9:10:31:06:b3:74:9a:4e:d8:7a:7b:9f:8c:22:
dc:0c:32:4d:c1:ae:71:d8:bb:d2:e3:9a:fb:bd:d7:
4b:47:38:96:61:e3:64:e9:fc:c2:df:76:a2:e1:b8:
84:f3:56:b0:3f:ae:d6:bd:f6:37:7b:56:c2:43:81:
82:61:11:15:0e:d1:2d:ce:b4:0f:10:06:25:94:b7:
37:77:2e:a2:99:b2:5e:4d:0a:43:60:16:a5:74:ca:
df:f0:7e:e2:45:7d:38:fe:e7:da:7b:03:2b:d6:0f:
04:8b:f3:61:49:b8:c5:0e:a7:2d:d3:d4:c1:40:69:
dc:c7:77:08:37:1f:03:d1:0a:65:f4:ac:22:c5:0c:
3b:ee:a3:12:86:eb:e2:8d:eb:da:bf:01:29:e5:f6:
4c:c8:1c:83:c5:f8:96:68:99:0a:d2:75:cb:bb:03:
55:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:46:DA:7A:C5:36:63:C2:DF:3D:7B:E0:6B:B7:A5:22:C1:17:72:1F
X509v3 Authority Key Identifier:
keyid:A1:C1:30:07:2D:2C:E9:CF:56:2B:83:19:8E:DA:AD:AF:A4:8F:6D:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f5bb51-708f-4dd2-880f-87d90561aa48/1/ocEwBy0s6c9WK4MZjtqtr6SPbbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:9b:d3:b7:51:6e:a7:a3:21:e8:4c:88:f5:17:8e:92:5e:76:
d1:74:1c:f0:ce:5d:5a:e5:22:b5:1c:65:77:68:2d:6c:41:a2:
5e:fd:61:57:7e:45:d8:3a:f9:f9:10:f9:99:80:06:82:21:fb:
46:dd:e5:cc:d2:19:da:fb:22:52:62:7c:6c:52:d8:73:1e:64:
08:bd:cc:b7:03:f3:ba:61:d9:b9:79:d1:f7:af:ea:27:58:2c:
3e:73:22:7a:1a:d0:a5:02:a3:11:15:05:61:ff:a3:26:01:98:
84:5c:15:b1:6d:cf:15:9e:a9:5f:d7:73:50:f6:e3:d2:e8:df:
f6:45:dd:34:70:c6:66:8f:b8:cd:06:dd:4b:f0:39:5f:45:3a:
d3:4f:10:8a:d1:a2:a6:43:be:fc:bf:e2:c7:77:3c:ef:67:6a:
4f:29:96:56:55:20:4e:00:c5:fe:13:2d:32:d8:a1:a8:d5:0a:
80:60:d9:f6:5c:02:b5:e6:21:7f:1a:bf:99:e9:cb:b0:03:0f:
98:e3:e4:11:8e:d2:39:1f:d9:de:5b:ca:1b:c3:c4:d3:d0:f8:
fe:dd:68:16:7a:64:de:43:85:68:95:2a:54:32:c7:2b:a2:b7:
02:88:a6:e8:85:08:49:ce:a9:8d:5f:a5:7d:97:f6:dd:88:16:
e4:f9:c9:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8couyXqS7RYsiCjk3smyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExYzEzMDA3MmQyY2U5Y2Y1NjJiODMxOThlZGFhZGFmYTQ4
ZjZkYjQwHhcNMjUwMTMxMTMwMDEwWhcNMjUwMjAxMTMwMDEwWjAzMTEwLwYDVQQD
EyhhNjQ2ZGE3YWM1MzY2M2MyZGYzZDdiZTA2YmI3YTUyMmMxMTc3MjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoREgAvxrsPUett4DV6r1lJKeUXC2
g+MmUehGo4f+gtvqY+jxIhgqkDEM/3Kccr6X+4CTkkhpp84gxDLR1cq5AZTC8qQ1
3tw3kPND4mzRjPreo47oAnfzTZoK2RAxBrN0mk7YenufjCLcDDJNwa5x2LvS45r7
vddLRziWYeNk6fzC33ai4biE81awP67WvfY3e1bCQ4GCYREVDtEtzrQPEAYllLc3
dy6imbJeTQpDYBaldMrf8H7iRX04/ufaewMr1g8Ei/NhSbjFDqct09TBQGncx3cI
Nx8D0Qpl9KwixQw77qMShuvijevavwEp5fZMyByDxfiWaJkK0nXLuwNVUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZG2nrFNmPC3z174Gu3pSLBF3IfMB8GA1UdIwQY
MBaAFKHBMActLOnPViuDGY7ara+kj220MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2NFd0J5MHM2YzlXSzRNWmp0cXRyNlNQYmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9mNWJiNTEtNzA4Zi00ZGQyLTg4MGYt
ODdkOTA1NjFhYTQ4LzEvb2NFd0J5MHM2YzlXSzRNWmp0cXRyNlNQYmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9mNWJiNTEtNzA4Zi00ZGQyLTg4MGYtODdkOTA1NjFhYTQ4
LzEvb2NFd0J5MHM2YzlXSzRNWmp0cXRyNlNQYmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFpvTt1Fu
p6Mh6EyI9ReOkl520XQc8M5dWuUitRxld2gtbEGiXv1hV35F2Dr5+RD5mYAGgiH7
Rt3lzNIZ2vsiUmJ8bFLYcx5kCL3MtwPzumHZuXnR96/qJ1gsPnMiehrQpQKjERUF
Yf+jJgGYhFwVsW3PFZ6pX9dzUPbj0ujf9kXdNHDGZo+4zQbdS/A5X0U6008QitGi
pkO+/L/ix3c872dqTymWVlUgTgDF/hMtMtihqNUKgGDZ9lwCteYhfxq/menLsAMP
mOPkEY7SOR/Z3lvKG8PE09D4/t1oFnpk3kOFaJUqVDLHK6K3Aoim6IUISc6pjV+l
fZf23YgW5PnJyg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:19 2025 by rpki-client