Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
File: OlVdhNzX3bZAaRuUDHygl3KIocQ.mft (raw, json)
Hash identifier: e9Qk8K3/C/MNfpRpze+Y4My9WqNo1tQDnkjpA295Ds8=
Subject key identifier: 2F:C2:FE:14:5F:09:38:48:CD:6E:2F:69:48:69:F6:18:BA:44:EA:A7
Authority key identifier: 3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4
Certificate issuer: /CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
Certificate serial: 0194BBCE8087794037A01BD55E4E0CD6BE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
Manifest number: 0748
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: OlVdhNzX3bZAaRuUDHygl3KIocQ.crl (hash: 6FQk1ntfdbv3JFenuhgi7+1TLKNZdamHi2prL6CV20Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:80:87:79:40:37:a0:1b:d5:5e:4e:0c:d6:be:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a555d84dcd7ddb640691b940c7ca0977288a1c4
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=2fc2fe145f093848cd6e2f694869f618ba44eaa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:33:a5:06:f0:7c:21:e3:2c:5f:d2:9c:3e:
89:a5:9d:3c:c2:d8:2f:a8:a9:f5:8c:52:dc:22:60:
ae:b5:5e:ef:5f:4e:00:eb:28:90:da:5b:89:02:20:
5d:16:ed:9c:55:bd:71:e2:b6:49:b7:b8:33:2c:e1:
85:6d:59:bb:0f:a6:19:98:a5:7e:1b:ca:39:17:af:
49:2b:c4:1e:74:c7:ad:aa:a6:88:ba:13:1b:c4:b3:
83:2f:b9:ed:37:ab:d0:50:31:3a:d4:4e:3e:ec:5e:
6e:cb:1e:02:e7:c5:d4:36:d5:3f:86:11:c6:c1:60:
00:85:a2:ae:c0:b3:63:f4:13:6b:c5:22:99:3f:ed:
01:db:f0:4b:db:68:99:c7:09:c7:49:de:2f:ac:97:
c3:60:a5:58:47:81:0e:a0:62:84:1b:4e:7d:1c:80:
6f:e8:26:ba:b5:3f:68:a9:ba:bd:5a:cd:ed:8a:1b:
06:e8:aa:51:e2:e7:05:5f:50:e9:32:70:d4:ad:ff:
f0:f3:3a:b8:d9:e2:9e:ad:eb:16:aa:87:c5:fa:29:
10:2c:38:dc:61:19:c7:74:cd:ce:3b:af:6c:8b:88:
25:42:76:40:8e:88:f6:b4:61:16:6a:d7:a8:60:fc:
00:6e:d0:13:ee:c2:ca:f1:c4:ee:4b:7c:2a:c3:73:
f2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C2:FE:14:5F:09:38:48:CD:6E:2F:69:48:69:F6:18:BA:44:EA:A7
X509v3 Authority Key Identifier:
keyid:3A:55:5D:84:DC:D7:DD:B6:40:69:1B:94:0C:7C:A0:97:72:88:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OlVdhNzX3bZAaRuUDHygl3KIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9ad081-da5a-42a4-a430-1e67170dfbba/1/OlVdhNzX3bZAaRuUDHygl3KIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:22:69:7a:07:6a:97:f7:c4:ab:1f:d5:19:bd:08:5b:13:36:
12:4c:de:5e:50:c2:1e:40:43:41:14:8e:f3:64:5d:6c:70:4f:
cb:fa:29:9c:ec:94:b8:62:9f:e4:73:d8:2e:8d:17:35:42:91:
1e:b5:3a:2b:56:7b:a0:02:96:fc:15:8a:1e:9e:42:50:79:91:
f1:57:db:17:3b:6d:3c:87:e5:c9:5a:4f:e8:39:9a:af:98:f1:
8a:d2:23:0c:4a:48:f7:5d:57:35:3d:ac:52:29:4a:35:c1:19:
a8:57:40:93:96:ec:b4:60:51:b8:fc:62:1e:94:f2:fa:4f:1f:
50:dd:4d:09:06:fd:4d:1a:f8:22:2d:62:2b:e1:e5:15:20:01:
8a:a1:30:33:3b:93:5a:9c:4b:ed:3c:da:1d:8d:4e:56:1c:c2:
06:b5:84:63:87:da:39:d2:61:4e:45:0a:c3:04:fc:67:fa:3a:
80:75:e6:bb:58:0b:53:23:29:be:6d:d8:43:63:21:ad:77:de:
51:34:69:c0:07:da:41:3c:52:b8:2e:d0:93:7e:e3:dc:44:8c:
0a:2d:3b:b4:55:32:92:90:e1:b4:fb:f4:23:82:2c:6f:c6:a9:
0b:cc:53:fd:3c:52:d4:18:a1:54:a5:05:08:0f:00:92:af:4f:
56:9a:5e:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zoCHeUA3oBvVXk4M1r51MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNTU1ZDg0ZGNkN2RkYjY0MDY5MWI5NDBjN2NhMDk3NzI4
OGExYzQwHhcNMjUwMTMxMTAwMTAwWhcNMjUwMjAxMTAwMTAwWjAzMTEwLwYDVQQD
EygyZmMyZmUxNDVmMDkzODQ4Y2Q2ZTJmNjk0ODY5ZjYxOGJhNDRlYWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTYzpQbwfCHjLF/SnD6JpZ08wtgv
qKn1jFLcImCutV7vX04A6yiQ2luJAiBdFu2cVb1x4rZJt7gzLOGFbVm7D6YZmKV+
G8o5F69JK8QedMetqqaIuhMbxLODL7ntN6vQUDE61E4+7F5uyx4C58XUNtU/hhHG
wWAAhaKuwLNj9BNrxSKZP+0B2/BL22iZxwnHSd4vrJfDYKVYR4EOoGKEG059HIBv
6Ca6tT9oqbq9Ws3tihsG6KpR4ucFX1DpMnDUrf/w8zq42eKeresWqofF+ikQLDjc
YRnHdM3OO69si4glQnZAjoj2tGEWateoYPwAbtAT7sLK8cTuS3wqw3PyJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC/C/hRfCThIzW4vaUhp9hi6ROqnMB8GA1UdIwQY
MBaAFDpVXYTc1922QGkblAx8oJdyiKHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2xWZGhOelgzYlpBYVJ1VURIeWdsM0tJb2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy85YWQwODEtZGE1YS00MmE0LWE0MzAt
MWU2NzE3MGRmYmJhLzEvT2xWZGhOelgzYlpBYVJ1VURIeWdsM0tJb2NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy85YWQwODEtZGE1YS00MmE0LWE0MzAtMWU2NzE3MGRmYmJh
LzEvT2xWZGhOelgzYlpBYVJ1VURIeWdsM0tJb2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfiJpegdq
l/fEqx/VGb0IWxM2EkzeXlDCHkBDQRSO82RdbHBPy/opnOyUuGKf5HPYLo0XNUKR
HrU6K1Z7oAKW/BWKHp5CUHmR8VfbFzttPIflyVpP6Dmar5jxitIjDEpI911XNT2s
UilKNcEZqFdAk5bstGBRuPxiHpTy+k8fUN1NCQb9TRr4Ii1iK+HlFSABiqEwMzuT
WpxL7TzaHY1OVhzCBrWEY4faOdJhTkUKwwT8Z/o6gHXmu1gLUyMpvm3YQ2MhrXfe
UTRpwAfaQTxSuC7Qk37j3ESMCi07tFUykpDhtPv0I4Isb8apC8xT/TxS1BihVKUF
CA8Akq9PVppeBA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:22 2025 by rpki-client