Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
File: OyMEQv6un8Jri9iH-qDtAnWCelg.mft (raw, json)
Hash identifier: s4CenQBtvDAz4cVZ/iySzgw4XvXr1riVfPpWfeavtkM=
Subject key identifier: CB:D6:9F:BC:AD:74:4D:CC:94:23:E0:5B:9C:AC:79:FF:C1:10:1F:E4
Authority key identifier: 3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
Certificate issuer: /CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Certificate serial: 0194BBCDEE6E4FD2AE2C107C9A7F578E334A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
Manifest number: 143A
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: OyMEQv6un8Jri9iH-qDtAnWCelg.crl (hash: Np5SlL+Tu43R8R6MsVYrArJCV9PQZrUEyAcliGwYIXg=)
2: bYZg5VNnDS3g8_L52xT8Z2YcZHI.roa (hash: 0G8Nfe3vvbb4R9E1kVJGXztygd9crnFLcrSCl4faEH8=)
3: uQkJp5gejSkWH0cMZgm49Hidyo8.roa (hash: DCLiMhSoFxaa6tq6Shu2BcZUIDAzjhGc3ukCezafEuo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ee:6e:4f:d2:ae:2c:10:7c:9a:7f:57:8e:33:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b230442feae9fc26b8bd887faa0ed0275827a58
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=cbd69fbcad744dcc9423e05b9cac79ffc1101fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1c:37:87:3a:98:2d:51:a2:f7:d0:be:be:a2:
a6:7b:49:c7:ca:7e:1d:df:e8:45:ea:8c:2d:ce:1d:
8a:f4:21:06:1e:2d:bf:62:68:7b:9d:b3:9a:d1:04:
9f:6e:eb:1e:08:ad:1c:76:ed:88:36:19:4a:40:2e:
36:49:11:d0:52:fc:32:6a:7f:90:c4:eb:b6:b9:69:
10:ab:0f:e7:57:ed:50:a9:be:60:90:6d:3f:ff:20:
0e:dd:d9:57:8b:26:af:36:5f:e6:49:f1:e7:09:f2:
3d:29:37:84:2c:7e:e0:d3:53:bd:64:79:f5:d3:6f:
d7:dc:ce:5a:33:09:0c:c0:ed:2b:06:31:f5:b3:2b:
3b:26:19:46:49:ff:32:4a:e0:d1:1b:cc:66:7a:37:
e0:6c:a0:97:a6:96:58:ec:d2:a8:6a:85:0c:10:5e:
4a:f1:d0:92:18:81:3a:70:5f:07:04:c2:de:48:d0:
95:de:bb:66:71:10:53:da:fe:bd:9f:9c:93:c7:a6:
d7:c7:95:db:ec:02:96:f4:fa:3c:3a:30:4e:d4:9a:
70:dd:e9:67:aa:c1:84:37:d5:52:3f:8d:e8:22:fa:
55:8d:40:c5:34:ce:e9:c5:47:b2:1d:57:fd:47:fe:
8f:0c:e8:c7:c7:0b:a2:ca:7e:18:8b:cd:f8:3f:c3:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D6:9F:BC:AD:74:4D:CC:94:23:E0:5B:9C:AC:79:FF:C1:10:1F:E4
X509v3 Authority Key Identifier:
keyid:3B:23:04:42:FE:AE:9F:C2:6B:8B:D8:87:FA:A0:ED:02:75:82:7A:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OyMEQv6un8Jri9iH-qDtAnWCelg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a1094-9b70-4251-b68f-7267073761d4/1/OyMEQv6un8Jri9iH-qDtAnWCelg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d6:95:d9:9b:e3:a8:8a:a1:43:c1:e0:04:4c:c1:88:ba:86:
57:53:04:48:ff:cd:f7:2b:c6:1b:25:fb:1a:a1:e2:cf:d3:2f:
57:c1:2d:6b:06:07:c4:a1:48:b3:00:ec:90:25:c8:99:d2:68:
22:60:cb:9a:69:85:26:cd:3e:18:29:d8:93:c5:b5:d6:53:f5:
61:1a:3e:23:f7:9d:40:ee:5f:66:b6:a9:8d:80:0a:71:83:46:
d8:85:ff:f3:e5:a8:ec:ca:09:bf:ad:6d:9c:d4:e0:17:36:5a:
8f:c1:7d:f2:b6:5a:52:71:5e:54:f9:17:7c:74:0a:fa:55:51:
09:58:7e:8c:46:6c:f8:b2:3e:65:12:ef:94:08:53:0b:43:bb:
72:29:cc:ca:8a:e9:72:8f:db:25:94:88:99:37:b5:72:3f:1d:
63:44:2e:dd:b7:aa:52:4f:16:14:75:05:a1:31:10:4d:6c:19:
e1:93:39:7f:ee:62:ec:ff:2b:bf:ec:07:ac:01:04:60:60:dc:
e4:18:42:15:68:e4:6d:21:38:5f:40:58:f7:b4:4f:87:e3:b9:
90:1d:3b:c7:24:81:23:05:74:82:cf:8c:0f:18:4e:fd:c2:7e:
bc:86:23:83:cd:f7:05:06:cd:bf:43:64:f4:d6:6c:f0:9e:84:
cb:a1:40:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ze5uT9KuLBB8mn9XjjNKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMjMwNDQyZmVhZTlmYzI2YjhiZDg4N2ZhYTBlZDAyNzU4
MjdhNTgwHhcNMjUwMTMxMTAwMDIyWhcNMjUwMjAxMTAwMDIyWjAzMTEwLwYDVQQD
EyhjYmQ2OWZiY2FkNzQ0ZGNjOTQyM2UwNWI5Y2FjNzlmZmMxMTAxZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixw3hzqYLVGi99C+vqKme0nHyn4d
3+hF6owtzh2K9CEGHi2/Ymh7nbOa0QSfbuseCK0cdu2INhlKQC42SRHQUvwyan+Q
xOu2uWkQqw/nV+1Qqb5gkG0//yAO3dlXiyavNl/mSfHnCfI9KTeELH7g01O9ZHn1
02/X3M5aMwkMwO0rBjH1sys7JhlGSf8ySuDRG8xmejfgbKCXppZY7NKoaoUMEF5K
8dCSGIE6cF8HBMLeSNCV3rtmcRBT2v69n5yTx6bXx5Xb7AKW9Po8OjBO1Jpw3eln
qsGEN9VSP43oIvpVjUDFNM7pxUeyHVf9R/6PDOjHxwuiyn4Yi834P8OGfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvWn7ytdE3MlCPgW5ysef/BEB/kMB8GA1UdIwQY
MBaAFDsjBEL+rp/Ca4vYh/qg7QJ1gnpYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zYTEwOTQtOWI3MC00MjUxLWI2OGYt
NzI2NzA3Mzc2MWQ0LzEvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8zYTEwOTQtOWI3MC00MjUxLWI2OGYtNzI2NzA3Mzc2MWQ0
LzEvT3lNRVF2NnVuOEpyaTlpSC1xRHRBbldDZWxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAataV2Zvj
qIqhQ8HgBEzBiLqGV1MESP/N9yvGGyX7GqHiz9MvV8EtawYHxKFIswDskCXImdJo
ImDLmmmFJs0+GCnYk8W11lP1YRo+I/edQO5fZrapjYAKcYNG2IX/8+Wo7MoJv61t
nNTgFzZaj8F98rZaUnFeVPkXfHQK+lVRCVh+jEZs+LI+ZRLvlAhTC0O7cinMyorp
co/bJZSImTe1cj8dY0Qu3beqUk8WFHUFoTEQTWwZ4ZM5f+5i7P8rv+wHrAEEYGDc
5BhCFWjkbSE4X0BY97RPh+O5kB07xySBIwV0gs+MDxhO/cJ+vIYjg833BQbNv0Nk
9NZs8J6Ey6FAow==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:15 2025 by rpki-client