Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
File: OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft (raw, json)
Hash identifier: 34AzfXnakpxPqUz007dDa1iyx6Hjtu45N5zguq1eTwg=
Subject key identifier: 1C:1E:43:34:1D:6B:0C:2C:38:F9:23:3F:4F:C6:20:4A:95:0A:05:63
Authority key identifier: 3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
Certificate issuer: /CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Certificate serial: 0194BCAA3711BA31544C188FE3CF3E4F51CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:59 +0000
Manifest this update: Fri 31 Jan 2025 14:00:59 +0000
Manifest next update: Sat 01 Feb 2025 14:00:59 +0000
Files and hashes: 1: OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl (hash: P0RZRdQgZaggcQFPDCYqFgeUGS7170wDry5UeTO3r4Q=)
2: n8MWvNRKO36sf1pxZSj8cGYzibI.roa (hash: 1WbDvWw9T3omYw1SSZsXT4FxvvF0ZRhs3TvSkgmyWAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:37:11:ba:31:54:4c:18:8f:e3:cf:3e:4f:51:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6c606f20cecfe312cc6c814dec9904b6db7c3c
Validity
Not Before: Jan 31 14:00:59 2025 GMT
Not After : Feb 1 14:00:59 2025 GMT
Subject: CN=1c1e43341d6b0c2c38f9233f4fc6204a950a0563
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:dd:84:f2:8d:54:6f:21:a8:46:ec:8f:50:5e:
c5:23:0a:b1:20:e6:49:8e:f0:b8:50:cc:ca:31:95:
d5:6e:de:fe:82:c1:c7:dc:b8:a7:1b:11:fd:62:cc:
36:70:7d:02:eb:10:f6:08:9e:e1:fd:9e:d6:ea:02:
0e:66:43:d6:19:bf:cf:d3:85:04:13:76:cf:9f:7c:
a1:1d:3a:be:88:b1:18:77:b3:09:55:2e:76:53:7f:
8d:2a:7a:3e:1e:f4:c3:b9:7f:21:b9:f0:31:25:78:
08:e9:6c:6d:53:37:f5:1b:dc:42:33:4a:b6:25:7a:
bf:e6:82:37:a6:2d:81:64:cb:e8:4b:f7:67:89:08:
15:a7:7a:f9:94:e3:1f:1a:ec:d1:91:5c:2e:26:7b:
53:ff:c2:04:80:70:38:09:f1:b6:db:eb:36:43:61:
d8:12:ef:4d:ff:a2:77:b3:01:40:c4:18:e1:57:ab:
f4:3a:37:35:0f:8d:73:b5:da:3b:01:47:60:cb:7a:
fe:0f:8f:5c:65:7e:c9:d6:b1:1b:4c:0b:29:49:aa:
a3:e1:6c:a7:53:ab:b1:24:1e:d8:d0:f1:c6:c0:ed:
63:b7:3b:0a:d3:56:68:31:cc:1a:3a:1b:fc:b1:ea:
f5:a5:23:d7:cb:08:62:9e:84:88:f6:ea:90:54:77:
6b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:1E:43:34:1D:6B:0C:2C:38:F9:23:3F:4F:C6:20:4A:95:0A:05:63
X509v3 Authority Key Identifier:
keyid:3A:6C:60:6F:20:CE:CF:E3:12:CC:6C:81:4D:EC:99:04:B6:DB:7C:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OmxgbyDOz-MSzGyBTeyZBLbbfDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/8c3f6f-5ae9-492e-9d3a-750d62e9e53a/1/OmxgbyDOz-MSzGyBTeyZBLbbfDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:36:d2:20:21:99:46:a4:17:d4:64:d8:41:64:58:00:68:53:
05:aa:c7:77:87:16:50:88:69:9c:5a:b3:93:62:fa:c6:91:dd:
be:88:95:d8:e1:6f:50:34:a7:aa:57:be:eb:82:cd:16:b1:98:
10:de:98:59:4c:0d:64:01:6d:26:ec:df:4a:0e:b1:dc:b1:b8:
81:a1:30:cd:49:10:52:bf:46:73:41:69:7e:67:c7:6d:4e:89:
df:f5:ee:f2:87:9b:46:97:dd:7e:b1:32:5a:ba:b7:8f:55:6a:
1a:26:65:d6:3e:2f:bd:5d:2d:c5:e2:08:31:65:56:65:ab:8b:
f9:05:0e:92:46:1b:58:b8:3a:24:1b:7e:54:e6:36:be:d3:7b:
ad:a1:61:ff:6d:f6:20:f4:6f:e0:db:6b:1a:4f:39:b0:55:b9:
86:14:c6:9e:29:ff:0d:22:b1:bc:c6:e9:16:b4:fe:cf:e3:58:
e0:f2:e9:e9:13:66:55:14:4b:2c:0a:58:9c:c7:c4:e8:be:a3:
12:c5:b8:5e:07:06:20:6e:34:f6:02:d3:36:71:11:c1:bb:e5:
2a:ae:0f:1c:2f:28:e6:61:f9:5b:35:17:68:fd:a4:f3:2a:09:
9a:a8:a7:21:11:a7:c1:27:9b:5c:ad:28:b1:93:0d:79:d5:89:
bb:e8:80:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjcRujFUTBiP488+T1HMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNmM2MDZmMjBjZWNmZTMxMmNjNmM4MTRkZWM5OTA0YjZk
YjdjM2MwHhcNMjUwMTMxMTQwMDU5WhcNMjUwMjAxMTQwMDU5WjAzMTEwLwYDVQQD
EygxYzFlNDMzNDFkNmIwYzJjMzhmOTIzM2Y0ZmM2MjA0YTk1MGEwNTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3t2E8o1UbyGoRuyPUF7FIwqxIOZJ
jvC4UMzKMZXVbt7+gsHH3LinGxH9Ysw2cH0C6xD2CJ7h/Z7W6gIOZkPWGb/P04UE
E3bPn3yhHTq+iLEYd7MJVS52U3+NKno+HvTDuX8hufAxJXgI6WxtUzf1G9xCM0q2
JXq/5oI3pi2BZMvoS/dniQgVp3r5lOMfGuzRkVwuJntT/8IEgHA4CfG22+s2Q2HY
Eu9N/6J3swFAxBjhV6v0Ojc1D41ztdo7AUdgy3r+D49cZX7J1rEbTAspSaqj4Wyn
U6uxJB7Y0PHGwO1jtzsK01ZoMcwaOhv8ser1pSPXywhinoSI9uqQVHdrMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBweQzQdawwsOPkjP0/GIEqVCgVjMB8GA1UdIwQY
MBaAFDpsYG8gzs/jEsxsgU3smQS223w8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT214Z2J5RE96LU1Tekd5QlRleVpCTGJiZkR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi84YzNmNmYtNWFlOS00OTJlLTlkM2Et
NzUwZDYyZTllNTNhLzEvT214Z2J5RE96LU1Tekd5QlRleVpCTGJiZkR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi84YzNmNmYtNWFlOS00OTJlLTlkM2EtNzUwZDYyZTllNTNh
LzEvT214Z2J5RE96LU1Tekd5QlRleVpCTGJiZkR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDbSICGZ
RqQX1GTYQWRYAGhTBarHd4cWUIhpnFqzk2L6xpHdvoiV2OFvUDSnqle+64LNFrGY
EN6YWUwNZAFtJuzfSg6x3LG4gaEwzUkQUr9Gc0FpfmfHbU6J3/Xu8oebRpfdfrEy
Wrq3j1VqGiZl1j4vvV0txeIIMWVWZauL+QUOkkYbWLg6JBt+VOY2vtN7raFh/232
IPRv4NtrGk85sFW5hhTGnin/DSKxvMbpFrT+z+NY4PLp6RNmVRRLLApYnMfE6L6j
EsW4XgcGIG409gLTNnERwbvlKq4PHC8o5mH5WzUXaP2k8yoJmqinIRGnwSebXK0o
sZMNedWJu+iAqg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:38 2025 by rpki-client