Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
File: OXh5r_LENp0GxPEZpv16WhPbhpc.mft (raw, json)
Hash identifier: ompUdBg3j//yCAp4d9xr9dcIFeUmgvXibDe/8khpHso=
Subject key identifier: C1:F1:AC:2D:4F:84:49:87:39:06:AB:A6:B6:2F:09:59:A0:F0:17:59
Authority key identifier: 39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
Certificate issuer: /CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Certificate serial: 0194BBCDF2309C2665C158589DA07FD52E69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: OXh5r_LENp0GxPEZpv16WhPbhpc.crl (hash: frV868WVtidjgxGV0ZzUyz124/bmelooaYRVoYDqgro=)
2: WSWkyM6MFxA1ZA-zAVUSwdgeJWI.roa (hash: 5tkFh2eMBLLpaXb8k6oCA+R1YYUjz+3ZjunAdpKVKWo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f2:30:9c:26:65:c1:58:58:9d:a0:7f:d5:2e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=397879aff2c4369d06c4f119a6fd7a5a13db8697
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=c1f1ac2d4f8449873906aba6b62f0959a0f01759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2b:e8:1c:c9:c0:38:3a:25:50:97:d8:55:4c:
8d:6e:5d:d3:48:5d:07:09:a4:ac:3c:11:16:88:4a:
c9:e5:4e:58:11:29:37:99:76:55:28:7c:5e:e0:ec:
44:47:55:10:27:88:41:3c:4b:36:81:70:d8:3a:cc:
5c:5a:ea:5e:71:87:af:cf:78:59:30:06:3a:78:12:
6d:b2:1a:d5:e0:88:7a:d7:0c:88:ba:51:d9:52:d1:
ea:60:45:10:c2:b6:3a:b9:5a:4d:6a:a6:c6:a6:5f:
73:56:e5:38:8f:32:89:ee:73:78:d3:76:0b:60:e5:
cd:c6:25:c9:91:77:fd:6a:63:71:6b:da:7c:a4:f4:
55:69:9b:5d:c0:7b:20:7c:66:62:b6:1a:61:9b:1a:
81:b1:84:96:8b:77:0d:45:7e:a8:0e:58:52:d0:9d:
a1:43:07:23:f0:d6:a4:31:93:00:6d:65:10:60:17:
35:cf:31:21:95:37:4c:6d:a2:f8:6e:f7:77:30:48:
08:30:58:fa:1e:d1:c8:bd:89:d7:87:01:2c:6d:ac:
77:8b:cc:a7:18:76:b1:02:02:cf:70:1a:4a:42:46:
74:85:1b:70:2a:e5:4f:1c:ec:54:43:f8:da:7d:a4:
0a:10:ef:a0:2f:98:9c:7a:bf:c8:d8:4d:12:f1:9b:
37:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:AC:2D:4F:84:49:87:39:06:AB:A6:B6:2F:09:59:A0:F0:17:59
X509v3 Authority Key Identifier:
keyid:39:78:79:AF:F2:C4:36:9D:06:C4:F1:19:A6:FD:7A:5A:13:DB:86:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXh5r_LENp0GxPEZpv16WhPbhpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/86ed6d-e126-4279-ad98-6692fc619567/1/OXh5r_LENp0GxPEZpv16WhPbhpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:73:fb:16:28:cf:79:a8:8e:98:67:14:39:c0:d6:9c:67:32:
8a:46:f0:92:c7:fb:ae:40:fc:e4:a0:7a:15:e7:51:59:46:82:
61:35:08:f2:32:0a:87:52:13:76:6d:61:f8:91:f3:04:5c:c7:
99:74:45:65:5b:9e:c9:93:f4:74:f8:d8:46:ce:0b:c1:99:f0:
ab:95:bb:46:51:01:d1:e6:33:31:31:13:c4:3c:0a:48:49:c2:
17:0d:e8:3a:9e:21:04:d0:0e:75:f7:b6:4d:a3:0e:09:e9:e1:
49:9a:20:a8:80:fd:12:ad:14:21:5b:1c:a7:13:d9:ee:32:d5:
bf:c5:1d:e2:65:8f:31:f3:4e:99:93:7a:c5:87:30:7f:27:ec:
c9:dd:8c:29:d5:d7:dc:cd:e9:39:90:5d:d2:f6:cb:85:ef:02:
7a:14:72:52:b2:52:9c:b4:7c:ee:78:41:15:ff:46:fc:9e:4b:
35:ff:5e:32:af:fe:28:12:e2:54:53:13:4a:eb:c9:aa:72:a9:
e3:d4:b2:de:b3:ac:7b:cc:06:6c:a1:33:24:7b:14:77:36:27:
16:87:35:b6:e7:93:0d:9c:c4:b0:b5:f5:7c:93:98:d6:ce:4a:
ef:ba:4f:ca:92:3d:4b:e1:ab:3c:db:08:63:f2:39:d7:5e:ed:
0b:f9:77:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zfIwnCZlwVhYnaB/1S5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5Nzg3OWFmZjJjNDM2OWQwNmM0ZjExOWE2ZmQ3YTVhMTNk
Yjg2OTcwHhcNMjUwMTMxMTAwMDIzWhcNMjUwMjAxMTAwMDIzWjAzMTEwLwYDVQQD
EyhjMWYxYWMyZDRmODQ0OTg3MzkwNmFiYTZiNjJmMDk1OWEwZjAxNzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ivoHMnAODolUJfYVUyNbl3TSF0H
CaSsPBEWiErJ5U5YESk3mXZVKHxe4OxER1UQJ4hBPEs2gXDYOsxcWupecYevz3hZ
MAY6eBJtshrV4Ih61wyIulHZUtHqYEUQwrY6uVpNaqbGpl9zVuU4jzKJ7nN403YL
YOXNxiXJkXf9amNxa9p8pPRVaZtdwHsgfGZithphmxqBsYSWi3cNRX6oDlhS0J2h
Qwcj8NakMZMAbWUQYBc1zzEhlTdMbaL4bvd3MEgIMFj6HtHIvYnXhwEsbax3i8yn
GHaxAgLPcBpKQkZ0hRtwKuVPHOxUQ/jafaQKEO+gL5icer/I2E0S8Zs3IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHxrC1PhEmHOQarprYvCVmg8BdZMB8GA1UdIwQY
MBaAFDl4ea/yxDadBsTxGab9eloT24aXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hoNXJfTEVOcDBHeFBFWnB2MTZXaFBiaHBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84NmVkNmQtZTEyNi00Mjc5LWFkOTgt
NjY5MmZjNjE5NTY3LzEvT1hoNXJfTEVOcDBHeFBFWnB2MTZXaFBiaHBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy84NmVkNmQtZTEyNi00Mjc5LWFkOTgtNjY5MmZjNjE5NTY3
LzEvT1hoNXJfTEVOcDBHeFBFWnB2MTZXaFBiaHBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzHP7FijP
eaiOmGcUOcDWnGcyikbwksf7rkD85KB6FedRWUaCYTUI8jIKh1ITdm1h+JHzBFzH
mXRFZVueyZP0dPjYRs4LwZnwq5W7RlEB0eYzMTETxDwKSEnCFw3oOp4hBNAOdfe2
TaMOCenhSZogqID9Eq0UIVscpxPZ7jLVv8Ud4mWPMfNOmZN6xYcwfyfsyd2MKdXX
3M3pOZBd0vbLhe8CehRyUrJSnLR87nhBFf9G/J5LNf9eMq/+KBLiVFMTSuvJqnKp
49Sy3rOse8wGbKEzJHsUdzYnFoc1tueTDZzEsLX1fJOY1s5K77pPypI9S+GrPNsI
Y/I5117tC/l3xA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:32 2025 by rpki-client