Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
File: O849R0p3XOR3Y3FjK8GWyh9Owjs.mft (raw, json)
Hash identifier: pEpGNuzfXgIbcK+xllIgV76VkyvFDSZ2DSi+0u4TF1I=
Subject key identifier: BB:BC:C4:10:10:BD:21:86:C7:8C:15:31:AF:F2:97:2C:BE:E9:C9:E8
Authority key identifier: 3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B
Certificate issuer: /CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
Certificate serial: 0194BD17BB074DE9400EA27D86CE5EC4785D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
Manifest number: C5
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: O849R0p3XOR3Y3FjK8GWyh9Owjs.crl (hash: TsEAqAxFs5huaN4r/qw4XUNg82Q3yGM0SSQUUG9xqio=)
2: aqZglDYGnEsB53FUZu6hOgHFRNI.roa (hash: PiTo1HXxs70zjyTF54PbMNKhREuF1Fd5QySzyhgibes=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:bb:07:4d:e9:40:0e:a2:7d:86:ce:5e:c4:78:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bce3d474a775ce4776371632bc196ca1f4ec23b
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=bbbcc41010bd2186c78c1531aff2972cbee9c9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:40:26:56:24:ea:a8:a2:be:56:73:9f:af:
f0:f2:8b:6c:6c:d8:ea:c1:80:de:38:01:09:10:42:
0e:0c:2c:d1:13:24:38:62:2f:38:a8:1d:f0:fc:b2:
93:fd:97:fc:07:37:05:3d:7b:ac:3f:60:8d:6b:21:
d6:6b:53:d9:3b:9f:6d:8d:2b:85:a5:1c:5f:ba:69:
98:38:32:06:31:a0:86:2c:4c:27:4f:39:1f:66:d3:
8a:fe:8f:54:b2:58:b3:e7:89:ff:8a:75:aa:c8:9e:
56:31:8c:c1:b2:b7:6f:46:13:95:c4:23:9d:89:dd:
50:46:db:40:c8:1e:53:66:58:b7:0f:ae:cb:a5:bc:
76:49:87:c5:c4:49:54:d8:8f:d3:9f:35:b1:89:11:
55:81:4c:17:54:36:1c:98:29:0b:73:7e:10:c5:b7:
72:59:79:44:e5:c1:9d:aa:e2:2d:3c:b7:6a:da:c3:
20:08:6d:80:97:93:6b:b4:2b:12:d4:5a:25:37:b3:
fa:f4:15:c1:c9:77:60:0a:e4:bd:5f:90:3a:5b:55:
9f:af:c9:a5:53:98:9b:c9:0d:26:ab:9f:fb:30:97:
14:22:89:ad:1c:19:55:b2:73:b4:df:dd:91:53:b7:
05:5e:dc:f4:54:19:89:51:72:94:c4:af:78:ce:60:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:BC:C4:10:10:BD:21:86:C7:8C:15:31:AF:F2:97:2C:BE:E9:C9:E8
X509v3 Authority Key Identifier:
keyid:3B:CE:3D:47:4A:77:5C:E4:77:63:71:63:2B:C1:96:CA:1F:4E:C2:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O849R0p3XOR3Y3FjK8GWyh9Owjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/5338bd-f321-4d51-be4a-63cc6c67c995/1/O849R0p3XOR3Y3FjK8GWyh9Owjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a4:1c:8a:a6:97:be:20:0a:f0:4b:1b:84:85:09:3e:ac:a3:
ec:84:7f:de:0b:07:77:29:7a:67:9d:2d:e5:1b:d9:0d:18:e4:
f6:ee:60:da:2e:8a:32:34:13:df:0b:98:68:57:bf:e0:99:2e:
29:95:e2:83:4d:f9:9b:c2:74:2e:19:0f:b9:6b:a7:df:ee:e6:
13:5c:d6:ac:a2:2e:58:c1:cd:37:fe:d0:38:49:72:07:45:5e:
1b:67:cb:9a:f1:61:f3:c8:1f:a2:1c:49:45:11:02:a7:83:93:
2d:76:cc:58:c9:a5:90:b9:e6:71:93:48:c0:c8:b2:43:ae:0c:
09:ae:7e:4c:aa:42:e2:8e:d3:44:3c:89:b4:fc:ba:1e:ec:91:
2f:93:52:f2:eb:4a:a5:6e:04:99:9f:ab:02:62:be:88:af:0b:
ec:d9:b9:3a:67:d9:2d:8e:4f:a8:66:08:ff:97:7e:74:ec:20:
b3:db:70:bc:0e:1e:7c:e1:6e:e3:0e:f6:e3:fb:67:03:b8:cc:
dc:9a:9c:5f:4e:24:58:7f:86:42:02:4b:d2:89:96:c7:39:4d:
52:13:1b:fc:23:aa:b3:36:af:5e:46:fe:15:a5:28:7e:f1:54:
26:c9:1f:9c:71:26:fb:91:ca:f2:4f:61:ce:d2:39:ee:40:70:
85:8f:84:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7sHTelADqJ9hs5exHhdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiY2UzZDQ3NGE3NzVjZTQ3NzYzNzE2MzJiYzE5NmNhMWY0
ZWMyM2IwHhcNMjUwMTMxMTYwMDM2WhcNMjUwMjAxMTYwMDM2WjAzMTEwLwYDVQQD
EyhiYmJjYzQxMDEwYmQyMTg2Yzc4YzE1MzFhZmYyOTcyY2JlZTljOWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8JAJlYk6qiivlZzn6/w8otsbNjq
wYDeOAEJEEIODCzREyQ4Yi84qB3w/LKT/Zf8BzcFPXusP2CNayHWa1PZO59tjSuF
pRxfummYODIGMaCGLEwnTzkfZtOK/o9Usliz54n/inWqyJ5WMYzBsrdvRhOVxCOd
id1QRttAyB5TZli3D67Lpbx2SYfFxElU2I/TnzWxiRFVgUwXVDYcmCkLc34Qxbdy
WXlE5cGdquItPLdq2sMgCG2Al5NrtCsS1FolN7P69BXByXdgCuS9X5A6W1Wfr8ml
U5ibyQ0mq5/7MJcUIomtHBlVsnO0392RU7cFXtz0VBmJUXKUxK94zmAJLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLu8xBAQvSGGx4wVMa/ylyy+6cnoMB8GA1UdIwQY
MBaAFDvOPUdKd1zkd2NxYyvBlsofTsI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzg0OVIwcDNYT1IzWTNGaks4R1d5aDlPd2pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni81MzM4YmQtZjMyMS00ZDUxLWJlNGEt
NjNjYzZjNjdjOTk1LzEvTzg0OVIwcDNYT1IzWTNGaks4R1d5aDlPd2pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni81MzM4YmQtZjMyMS00ZDUxLWJlNGEtNjNjYzZjNjdjOTk1
LzEvTzg0OVIwcDNYT1IzWTNGaks4R1d5aDlPd2pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqQciqaX
viAK8EsbhIUJPqyj7IR/3gsHdyl6Z50t5RvZDRjk9u5g2i6KMjQT3wuYaFe/4Jku
KZXig035m8J0LhkPuWun3+7mE1zWrKIuWMHNN/7QOElyB0VeG2fLmvFh88gfohxJ
RRECp4OTLXbMWMmlkLnmcZNIwMiyQ64MCa5+TKpC4o7TRDyJtPy6HuyRL5NS8utK
pW4EmZ+rAmK+iK8L7Nm5OmfZLY5PqGYI/5d+dOwgs9twvA4efOFu4w724/tnA7jM
3JqcX04kWH+GQgJL0omWxzlNUhMb/COqszavXkb+FaUofvFUJskfnHEm+5HK8k9h
ztI57kBwhY+Eig==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:00 2025 by rpki-client