Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
File: rkopxhOOLZPVSjYyi5TLH4o4Kms.mft (raw, json)
Hash identifier: L9dYq0AhhjdrzO0OkbW3e5OyHlcsxpc72LpEKSAYuXE=
Subject key identifier: 85:55:DE:3D:D3:25:AE:76:68:B4:B4:9B:78:62:6F:53:AA:57:56:C6
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial: 0194BBCDE563567959EB14EC280B23262A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
Manifest number: 08E8
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: BrYhHrEUiC6KPPt0z5zIenofLis.roa (hash: DE5/RvrYo8fEFuVG34PaeU1d6iLiNdb+LH6pRfnNAg0=)
2: rkopxhOOLZPVSjYyi5TLH4o4Kms.crl (hash: mMpQS6gKeD+Yoj0j9+hucH15d2woM4b8CgZqYsg3XaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e5:63:56:79:59:eb:14:ec:28:0b:23:26:2a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=8555de3dd325ae7668b4b49b78626f53aa5756c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:33:c0:20:4b:3e:62:af:01:b2:c7:30:8f:8b:
c4:91:1b:68:49:e5:11:15:95:d5:65:7f:20:6c:3c:
b2:c4:b0:57:eb:91:b2:e0:f5:46:bd:47:8b:ff:a3:
b8:53:83:04:ae:67:25:53:af:fd:87:21:58:07:16:
8b:13:4f:7b:9c:2f:02:1c:24:96:8e:9c:a3:8e:5f:
49:8b:5b:ca:95:34:0f:33:3d:3b:99:98:59:5c:40:
f8:1d:42:d7:16:13:95:2a:e4:56:66:51:04:9a:b4:
7e:8d:d0:8a:af:21:a6:84:54:97:f6:52:23:36:a8:
1e:54:e9:ed:30:c0:ec:35:c3:30:8f:67:b6:17:54:
09:2a:3c:c7:b1:aa:27:71:c9:18:2d:cf:f7:80:18:
dc:46:51:ca:30:02:e1:ba:06:e8:fb:19:1b:9c:9d:
81:19:1f:5c:79:d7:1f:f0:81:21:6e:00:b9:07:30:
f0:05:99:65:34:cb:37:4b:fc:82:be:1d:5a:99:b1:
a8:72:47:ef:42:e1:ee:54:c9:a2:a0:d0:eb:f4:09:
96:09:75:77:67:23:d2:2a:c6:09:f9:78:6e:b8:b1:
ac:53:17:87:ed:80:bf:e9:22:ce:e2:6e:c9:b9:e8:
20:1d:96:2d:2d:43:5b:84:92:31:bf:cd:b5:b6:ce:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:55:DE:3D:D3:25:AE:76:68:B4:B4:9B:78:62:6F:53:AA:57:56:C6
X509v3 Authority Key Identifier:
keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:1a:95:8c:46:26:47:95:2f:3c:56:87:90:92:8f:92:ec:d6:
8b:c7:63:ca:c3:4c:52:9e:7e:7e:18:8e:6c:cb:14:39:e3:16:
a9:5e:09:d3:93:3e:39:36:4a:df:31:9c:5e:f9:0c:6b:1a:30:
ff:98:9e:2f:5a:36:ed:4a:31:bb:68:e9:02:14:d8:68:8b:f8:
3f:f4:f9:72:db:12:fc:73:f4:d3:ea:be:fc:4c:65:91:b2:13:
60:e2:03:7a:4e:91:40:ab:38:27:ee:a3:a9:e3:d7:f4:b5:1f:
c5:78:78:91:e0:70:6a:43:55:d6:48:c9:0e:2c:e2:b1:df:03:
a5:0c:43:51:72:97:b3:9c:97:a6:a8:c9:ce:d2:c9:62:f2:07:
f1:b6:f5:51:1b:2e:aa:b0:bf:45:c3:e7:8d:ea:50:0f:00:e9:
69:0d:20:d6:be:d2:c0:a0:2b:b5:19:93:61:c0:86:18:e9:78:
20:78:66:74:8f:ba:d0:4e:0d:b6:ae:5a:a1:2f:71:82:ed:de:
0b:f6:14:ec:d9:ea:b4:7c:f5:56:d3:e3:27:94:9d:12:b6:52:
04:82:71:81:92:e1:3f:fc:9e:c2:5b:e4:b6:0d:c4:1f:b2:a8:
57:29:f4:c0:b2:37:31:c6:6c:06:93:1d:9f:39:b0:a8:d7:62:
4c:c7:72:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeVjVnlZ6xTsKAsjJipAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNGEyOWM2MTM4ZTJkOTNkNTRhMzYzMjhiOTRjYjFmOGEz
ODJhNmIwHhcNMjUwMTMxMTAwMDIwWhcNMjUwMjAxMTAwMDIwWjAzMTEwLwYDVQQD
Eyg4NTU1ZGUzZGQzMjVhZTc2NjhiNGI0OWI3ODYyNmY1M2FhNTc1NmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTPAIEs+Yq8Bsscwj4vEkRtoSeUR
FZXVZX8gbDyyxLBX65Gy4PVGvUeL/6O4U4MErmclU6/9hyFYBxaLE097nC8CHCSW
jpyjjl9Ji1vKlTQPMz07mZhZXED4HULXFhOVKuRWZlEEmrR+jdCKryGmhFSX9lIj
NqgeVOntMMDsNcMwj2e2F1QJKjzHsaoncckYLc/3gBjcRlHKMALhugbo+xkbnJ2B
GR9cedcf8IEhbgC5BzDwBZllNMs3S/yCvh1ambGockfvQuHuVMmioNDr9AmWCXV3
ZyPSKsYJ+XhuuLGsUxeH7YC/6SLO4m7JueggHZYtLUNbhJIxv821ts42HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVV3j3TJa52aLS0m3hib1OqV1bGMB8GA1UdIwQY
MBaAFK5KKcYTji2T1Uo2MouUyx+KOCprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zNWJlMDQtZDViNy00NGFhLWFkZTQt
MTM0MDFkMWYyMmQyLzEvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zNWJlMDQtZDViNy00NGFhLWFkZTQtMTM0MDFkMWYyMmQy
LzEvcmtvcHhoT09MWlBWU2pZeWk1VExING80S21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexqVjEYm
R5UvPFaHkJKPkuzWi8djysNMUp5+fhiObMsUOeMWqV4J05M+OTZK3zGcXvkMaxow
/5ieL1o27Uoxu2jpAhTYaIv4P/T5ctsS/HP00+q+/ExlkbITYOIDek6RQKs4J+6j
qePX9LUfxXh4keBwakNV1kjJDizisd8DpQxDUXKXs5yXpqjJztLJYvIH8bb1URsu
qrC/RcPnjepQDwDpaQ0g1r7SwKArtRmTYcCGGOl4IHhmdI+60E4Ntq5aoS9xgu3e
C/YU7NnqtHz1VtPjJ5SdErZSBIJxgZLhP/yewlvktg3EH7KoVyn0wLI3McZsBpMd
nzmwqNdiTMdybg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:32 2025 by rpki-client