Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
File: O8zbDbfPRmTsx9vdGAHIfODYR88.mft (raw, json)
Hash identifier: 0HnLiXsyr6RtRXdXLT1w8iRT3Uqk9OG+uhM2mkYQCsw=
Subject key identifier: 56:4A:8E:7E:D6:CC:EA:90:82:57:6D:64:80:79:51:C1:31:57:47:4B
Authority key identifier: 3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
Certificate issuer: /CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Certificate serial: 0194BC0511EB6335ED98B77A54F1D364D2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
Manifest number: 0AC1
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: O8zbDbfPRmTsx9vdGAHIfODYR88.crl (hash: YEGoQsvoxdYJW/tu8tNR0UAYEli3lope2v6G1kwtqDc=)
2: Xmkl6LzftdXXTuFIy5y0gG04yrg.roa (hash: VpMbkZK9BvTFQ9VrZssWDiP6KBXBDS7UNKrt58XY9h8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:11:eb:63:35:ed:98:b7:7a:54:f1:d3:64:d2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bccdb0db7cf4664ecc7dbdd1801c87ce0d847cf
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=564a8e7ed6ccea9082576d64807951c13157474b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:86:c8:10:31:cc:be:ff:f3:5a:3f:e7:f4:36:
0b:30:0f:2f:c8:f9:da:fb:3e:a6:eb:5e:31:15:9a:
d7:6f:7f:10:d6:98:f9:0d:5e:5f:e1:92:bb:33:32:
87:2c:b2:7b:6b:80:f7:8f:7f:ed:61:b1:f4:2f:04:
e3:46:97:5c:1f:20:ce:7d:f4:fe:60:b9:f3:d2:db:
2b:25:7a:64:df:ac:ef:44:1d:ac:bd:3d:d6:20:b8:
8b:ae:dd:47:bc:17:ad:45:d8:81:18:f6:80:c2:bc:
f5:82:29:a3:5f:8a:c3:d4:2e:b7:6a:38:dd:64:0c:
ff:03:a0:01:b5:b8:f3:df:78:24:ba:b7:a9:28:0c:
fd:12:17:ae:22:a7:37:48:15:29:e3:22:ef:ea:e3:
a0:4e:d2:ac:7f:3a:fa:29:bb:3b:5c:53:c5:46:13:
b7:4b:47:9a:0e:dc:0d:1a:34:02:49:9b:f3:84:8e:
c2:42:1e:3e:bd:09:1a:07:15:96:a9:ac:a5:06:e6:
38:05:20:b0:97:a6:26:b8:7b:be:4b:d8:9c:40:28:
bd:39:d2:35:37:9c:3f:58:6e:43:18:0f:dc:ad:60:
da:ba:6c:da:8c:3e:af:0e:86:62:72:a5:8a:c3:97:
9b:14:50:6c:63:2f:2a:97:24:dc:df:be:e1:51:97:
04:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:4A:8E:7E:D6:CC:EA:90:82:57:6D:64:80:79:51:C1:31:57:47:4B
X509v3 Authority Key Identifier:
keyid:3B:CC:DB:0D:B7:CF:46:64:EC:C7:DB:DD:18:01:C8:7C:E0:D8:47:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O8zbDbfPRmTsx9vdGAHIfODYR88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1ccf80-0925-40e0-8714-c4d9be137eea/1/O8zbDbfPRmTsx9vdGAHIfODYR88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:28:64:6e:64:16:20:94:b5:99:64:1b:04:e4:ca:4d:bd:2c:
54:8b:7f:64:a3:a2:1f:f8:dd:12:cc:7c:a5:7e:63:ae:5b:e2:
08:66:1e:ab:a3:97:3f:ca:61:b0:21:0a:18:e8:76:96:d7:76:
ea:c5:34:ac:e9:69:10:ca:de:15:99:7b:5e:79:85:8f:98:1d:
73:1a:82:66:55:14:b9:63:ca:c5:e4:ac:ac:b6:0c:f6:35:43:
ef:30:69:21:69:2f:44:0d:39:5e:ac:28:29:60:e2:f1:82:52:
19:41:89:a0:a7:50:5f:bf:ff:97:eb:3d:14:b4:16:a4:3a:2b:
f7:af:14:4d:8b:a6:36:8f:7f:7a:66:bc:71:be:da:4c:62:20:
2d:50:78:28:17:76:12:eb:b3:5d:ac:2b:0f:55:d4:92:e6:35:
80:4a:97:07:e9:3e:d4:7e:76:26:6a:17:22:75:9b:a6:71:77:
1f:55:9d:47:1c:c3:57:0e:6d:51:06:95:4c:b4:f3:78:2c:70:
10:da:ad:b3:ef:a1:a7:8f:2b:cc:8c:6f:63:96:ab:c6:df:c4:
d2:68:31:b2:2a:a7:e7:fe:f6:f4:71:c7:26:62:af:0a:0b:bc:
58:4b:26:70:23:4c:e3:d7:64:ae:2e:a1:92:b7:98:c4:3f:bb:
a6:df:c0:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRHrYzXtmLd6VPHTZNKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiY2NkYjBkYjdjZjQ2NjRlY2M3ZGJkZDE4MDFjODdjZTBk
ODQ3Y2YwHhcNMjUwMTMxMTEwMDM2WhcNMjUwMjAxMTEwMDM2WjAzMTEwLwYDVQQD
Eyg1NjRhOGU3ZWQ2Y2NlYTkwODI1NzZkNjQ4MDc5NTFjMTMxNTc0NzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IbIEDHMvv/zWj/n9DYLMA8vyPna
+z6m614xFZrXb38Q1pj5DV5f4ZK7MzKHLLJ7a4D3j3/tYbH0LwTjRpdcHyDOffT+
YLnz0tsrJXpk36zvRB2svT3WILiLrt1HvBetRdiBGPaAwrz1gimjX4rD1C63ajjd
ZAz/A6ABtbjz33gkurepKAz9EheuIqc3SBUp4yLv6uOgTtKsfzr6Kbs7XFPFRhO3
S0eaDtwNGjQCSZvzhI7CQh4+vQkaBxWWqaylBuY4BSCwl6YmuHu+S9icQCi9OdI1
N5w/WG5DGA/crWDaumzajD6vDoZicqWKw5ebFFBsYy8qlyTc377hUZcE+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZKjn7WzOqQgldtZIB5UcExV0dLMB8GA1UdIwQY
MBaAFDvM2w23z0Zk7Mfb3RgByHzg2EfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8xY2NmODAtMDkyNS00MGUwLTg3MTQt
YzRkOWJlMTM3ZWVhLzEvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8xY2NmODAtMDkyNS00MGUwLTg3MTQtYzRkOWJlMTM3ZWVh
LzEvTzh6YkRiZlBSbVRzeDl2ZEdBSElmT0RZUjg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVihkbmQW
IJS1mWQbBOTKTb0sVIt/ZKOiH/jdEsx8pX5jrlviCGYeq6OXP8phsCEKGOh2ltd2
6sU0rOlpEMreFZl7XnmFj5gdcxqCZlUUuWPKxeSsrLYM9jVD7zBpIWkvRA05Xqwo
KWDi8YJSGUGJoKdQX7//l+s9FLQWpDor968UTYumNo9/ema8cb7aTGIgLVB4KBd2
EuuzXawrD1XUkuY1gEqXB+k+1H52JmoXInWbpnF3H1WdRxzDVw5tUQaVTLTzeCxw
ENqts++hp48rzIxvY5arxt/E0mgxsiqn5/729HHHJmKvCgu8WEsmcCNM49dkri6h
kreYxD+7pt/AfA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:33:06 2025 by rpki-client