Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
File: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft (raw, json)
Hash identifier: Sj8TRbfsND/tbIAn8T7rKad+o56hsnI+O4W+Uo4Zk5o=
Subject key identifier: FA:9D:F8:18:AE:D9:CE:0E:FD:EE:53:44:8A:F2:17:4E:AC:61:96:CA
Authority key identifier: A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
Certificate issuer: /CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Certificate serial: 0194BC7307705477FB31D12B476D69ED88C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
Manifest number: 03AE
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl (hash: vzE3Y3siQ7bXy+IKwRSjtUz6Ki8vMpZfm7b2F/399Wg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:07:70:54:77:fb:31:d1:2b:47:6d:69:ed:88:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c56ec130d98af2d0d29459f20fa79bd6359015
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=fa9df818aed9ce0efdee53448af2174eac6196ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:07:35:a6:fa:98:1d:e7:ab:22:d9:d4:9d:bf:
c0:bd:ec:84:1d:cb:5e:cd:57:4e:5e:7b:33:8c:cf:
4a:5a:21:ac:aa:90:b8:bb:88:9c:67:b9:3a:3b:6f:
e7:40:e8:d0:31:77:e4:9e:f4:41:89:1e:02:5a:f3:
79:13:db:cb:c9:7e:81:56:34:b8:93:62:04:74:6b:
b7:a9:45:93:52:5a:00:47:27:15:8a:6a:50:8b:75:
d7:b0:56:05:c2:5c:f6:8d:c7:d7:fd:e1:5e:6c:70:
92:3c:fa:3a:41:f6:47:2f:b6:b9:7a:b6:13:86:41:
5a:d5:4d:e6:95:36:57:ce:36:d3:44:60:92:62:ac:
53:30:b9:f7:8c:93:ca:55:ba:dd:9e:fa:0e:70:02:
fa:59:eb:93:a7:a5:90:a9:51:9e:fc:7e:1d:ef:c4:
a9:96:dd:d4:b8:bd:4e:2a:48:3f:4a:41:45:9d:35:
a0:07:1a:0f:b9:f3:37:2a:04:a2:2d:2e:37:63:10:
44:1a:6e:39:59:80:f5:d6:96:f5:6c:79:c0:99:14:
e0:58:99:03:3d:d4:95:fc:b1:f6:34:bc:28:3b:11:
85:4c:7d:29:71:86:69:5d:f8:a7:c5:cf:58:b5:a7:
5d:47:23:cd:c2:f3:2f:1c:3d:24:56:09:6e:e9:9a:
f1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9D:F8:18:AE:D9:CE:0E:FD:EE:53:44:8A:F2:17:4E:AC:61:96:CA
X509v3 Authority Key Identifier:
keyid:A3:C5:6E:C1:30:D9:8A:F2:D0:D2:94:59:F2:0F:A7:9B:D6:35:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/20d9cc-143f-4ee8-8c69-b3e9be742894/1/o8VuwTDZivLQ0pRZ8g-nm9Y1kBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:33:d1:7f:24:4e:47:75:53:b2:e4:d9:08:e5:e4:a7:22:68:
9a:20:51:fe:62:81:72:31:cc:a2:b7:8a:f6:92:cf:d8:4b:78:
31:22:c3:29:5f:a8:72:5c:ee:69:6c:af:08:ed:5d:8f:01:af:
89:01:93:0e:e2:c7:62:52:ce:dc:ec:da:14:ed:52:c3:89:6a:
ad:05:c7:88:c8:44:ba:82:44:f9:61:19:02:71:16:a1:af:03:
93:86:da:cd:e8:ee:a2:33:2f:b1:68:44:f7:23:d5:01:72:f6:
fd:62:93:3e:41:22:fa:03:48:ea:a4:26:3c:56:06:c7:71:83:
3b:68:af:24:b4:80:2b:19:7b:e9:a2:a1:c6:51:e2:b5:a5:7a:
d8:95:c9:78:a7:1a:64:a4:d8:44:a8:c0:74:4e:d9:24:41:1e:
ef:ed:68:2b:b5:d3:bb:9d:7b:00:2f:be:2c:09:e2:6d:aa:76:
42:0f:8b:04:24:47:06:1a:93:86:61:8b:fc:68:69:16:30:d3:
1d:a6:a3:6e:cc:d7:e5:65:a0:e6:9f:fc:ea:1e:a7:9e:3f:20:
af:7b:a1:9b:bd:76:7f:b7:12:29:d5:be:89:f3:0e:39:36:e4:
fd:54:c1:50:78:67:c4:73:e1:97:e7:bd:27:68:d9:76:e8:67:
8b:ea:44:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cwdwVHf7MdErR21p7YjEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYzU2ZWMxMzBkOThhZjJkMGQyOTQ1OWYyMGZhNzliZDYz
NTkwMTUwHhcNMjUwMTMxMTMwMDQyWhcNMjUwMjAxMTMwMDQyWjAzMTEwLwYDVQQD
EyhmYTlkZjgxOGFlZDljZTBlZmRlZTUzNDQ4YWYyMTc0ZWFjNjE5NmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgc1pvqYHeerItnUnb/AveyEHcte
zVdOXnszjM9KWiGsqpC4u4icZ7k6O2/nQOjQMXfknvRBiR4CWvN5E9vLyX6BVjS4
k2IEdGu3qUWTUloARycVimpQi3XXsFYFwlz2jcfX/eFebHCSPPo6QfZHL7a5erYT
hkFa1U3mlTZXzjbTRGCSYqxTMLn3jJPKVbrdnvoOcAL6WeuTp6WQqVGe/H4d78Sp
lt3UuL1OKkg/SkFFnTWgBxoPufM3KgSiLS43YxBEGm45WYD11pb1bHnAmRTgWJkD
PdSV/LH2NLwoOxGFTH0pcYZpXfinxc9YtaddRyPNwvMvHD0kVglu6ZrxhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqd+Biu2c4O/e5TRIryF06sYZbKMB8GA1UdIwQY
MBaAFKPFbsEw2Yry0NKUWfIPp5vWNZAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yMGQ5Y2MtMTQzZi00ZWU4LThjNjkt
YjNlOWJlNzQyODk0LzEvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8yMGQ5Y2MtMTQzZi00ZWU4LThjNjktYjNlOWJlNzQyODk0
LzEvbzhWdXdURFppdkxRMHBSWjhnLW5tOVkxa0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeDPRfyRO
R3VTsuTZCOXkpyJomiBR/mKBcjHMoreK9pLP2Et4MSLDKV+oclzuaWyvCO1djwGv
iQGTDuLHYlLO3OzaFO1Sw4lqrQXHiMhEuoJE+WEZAnEWoa8Dk4bazejuojMvsWhE
9yPVAXL2/WKTPkEi+gNI6qQmPFYGx3GDO2ivJLSAKxl76aKhxlHitaV62JXJeKca
ZKTYRKjAdE7ZJEEe7+1oK7XTu517AC++LAnibap2Qg+LBCRHBhqThmGL/GhpFjDT
HaajbszX5WWg5p/86h6nnj8gr3uhm712f7cSKdW+ifMOOTbk/VTBUHhnxHPhl+e9
J2jZduhni+pE2w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:31:02 2025 by rpki-client