Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/2bf1b1-1683-4c99-9fbe-dbee66d73313/1/OGKIZa_YpN-v3e-BHvz8ecA4czI.mft
File: OGKIZa_YpN-v3e-BHvz8ecA4czI.mft (raw, json)
Hash identifier: LNs4PLRq9znCbB2uHW/UXB7AsmzjywuWmiUm9wnvj0Q=
Subject key identifier: 07:0C:4A:36:22:8A:5D:46:DD:9F:3A:16:2E:74:4F:53:0F:D9:41:B6
Authority key identifier: 38:62:88:65:AF:D8:A4:DF:AF:DD:EF:81:1E:FC:FC:79:C0:38:73:32
Certificate issuer: /CN=38628865afd8a4dfafddef811efcfc79c0387332
Certificate serial: 0194BBCDCFF44B3F08EAA1F7E9785FBB9229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGKIZa_YpN-v3e-BHvz8ecA4czI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/2bf1b1-1683-4c99-9fbe-dbee66d73313/1/OGKIZa_YpN-v3e-BHvz8ecA4czI.mft
Manifest number: 0921
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: OGKIZa_YpN-v3e-BHvz8ecA4czI.crl (hash: 6o2AOR5MBuPkvjr+yqo0fnpUfbjNhe8gFefzkg0ufZI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cf:f4:4b:3f:08:ea:a1:f7:e9:78:5f:bb:92:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38628865afd8a4dfafddef811efcfc79c0387332
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=070c4a36228a5d46dd9f3a162e744f530fd941b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6a:48:53:09:76:b7:85:6f:aa:86:e7:f5:37:
a3:90:ef:c5:18:a3:0f:c1:4f:c3:aa:03:a4:fd:fe:
a5:92:86:e5:d6:fd:c0:fa:a9:9a:6e:ed:10:a9:ff:
88:d5:86:a4:dc:60:f3:41:78:fe:de:4a:ae:aa:2a:
b5:14:0b:bd:57:8f:ac:aa:d2:b9:de:2c:9e:6a:d7:
a3:cd:7a:a8:44:88:c3:40:59:d0:ac:fe:48:51:48:
d5:7b:46:a1:5a:90:78:c3:2e:04:4b:77:c4:e4:f7:
c3:89:8c:84:cd:33:8f:99:50:a9:b3:aa:af:41:03:
0c:aa:7d:61:02:be:03:b3:f6:9e:18:03:49:ed:bc:
2e:7b:87:3a:1c:2b:d9:bb:05:6b:28:82:ab:0d:71:
53:4c:c6:5c:7e:97:d5:de:ff:55:0f:11:78:b9:9d:
1e:5e:cd:c7:29:79:a3:ea:5c:c0:ca:14:df:df:76:
4f:3e:15:fa:38:7a:3a:bc:54:44:48:e3:1d:c1:0a:
6c:8a:80:b2:44:e5:23:b0:a2:5d:ad:38:8d:17:fe:
57:fc:55:ee:92:a1:26:89:85:51:7b:38:9c:4e:2b:
03:d4:5f:63:6e:80:89:0b:10:89:e5:c9:f5:9f:f2:
5b:c4:21:1b:4c:c8:89:dc:fc:05:64:bc:e6:64:fc:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0C:4A:36:22:8A:5D:46:DD:9F:3A:16:2E:74:4F:53:0F:D9:41:B6
X509v3 Authority Key Identifier:
keyid:38:62:88:65:AF:D8:A4:DF:AF:DD:EF:81:1E:FC:FC:79:C0:38:73:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGKIZa_YpN-v3e-BHvz8ecA4czI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/2bf1b1-1683-4c99-9fbe-dbee66d73313/1/OGKIZa_YpN-v3e-BHvz8ecA4czI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/2bf1b1-1683-4c99-9fbe-dbee66d73313/1/OGKIZa_YpN-v3e-BHvz8ecA4czI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:30:35:11:82:ea:ba:0e:a1:10:47:79:be:51:3b:b8:f7:fe:
76:d7:d9:6d:0e:77:6a:d7:b9:d5:51:8c:9e:bc:51:b4:05:d3:
aa:b5:46:56:7e:4b:45:22:aa:0d:03:6f:5a:3c:75:70:08:ec:
db:76:8e:4e:22:af:fe:1d:40:22:aa:7d:2f:0c:7c:f0:8e:b2:
bb:83:c8:3b:fb:ca:d1:f9:f5:89:b4:43:c0:14:99:4a:05:d3:
b7:03:e4:df:96:18:41:7a:c4:d2:5a:26:dd:61:37:ff:aa:40:
73:b4:46:d0:b6:3e:f1:b4:e2:c8:e7:2f:63:a3:44:69:f3:c7:
42:6b:9c:26:6f:eb:a3:4a:a0:f0:dc:10:2a:e0:e4:46:19:2c:
a9:31:80:34:68:35:ce:b9:25:61:11:e4:c4:85:36:36:99:02:
1a:1d:ba:8d:7f:35:68:0d:cf:b9:7b:bc:50:e6:69:20:9d:dc:
ff:dc:48:1d:7b:cd:b6:03:25:9b:ec:ec:61:16:ca:12:5b:ce:
d9:53:f7:1d:37:06:27:f4:bc:6c:83:1e:75:8f:52:4e:e4:43:
b8:45:87:81:c9:87:6b:0e:4b:ab:8a:00:54:14:0c:0c:ed:fe:
cb:dc:d2:ba:a1:3a:00:dd:ab:f1:65:df:35:7d:32:f8:81:f7:
d9:61:61:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zc/0Sz8I6qH36Xhfu5IpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NjI4ODY1YWZkOGE0ZGZhZmRkZWY4MTFlZmNmYzc5YzAz
ODczMzIwHhcNMjUwMTMxMTAwMDE0WhcNMjUwMjAxMTAwMDE0WjAzMTEwLwYDVQQD
EygwNzBjNGEzNjIyOGE1ZDQ2ZGQ5ZjNhMTYyZTc0NGY1MzBmZDk0MWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWpIUwl2t4Vvqobn9TejkO/FGKMP
wU/DqgOk/f6lkobl1v3A+qmabu0Qqf+I1Yak3GDzQXj+3kquqiq1FAu9V4+sqtK5
3iyeatejzXqoRIjDQFnQrP5IUUjVe0ahWpB4wy4ES3fE5PfDiYyEzTOPmVCps6qv
QQMMqn1hAr4Ds/aeGANJ7bwue4c6HCvZuwVrKIKrDXFTTMZcfpfV3v9VDxF4uZ0e
Xs3HKXmj6lzAyhTf33ZPPhX6OHo6vFRESOMdwQpsioCyROUjsKJdrTiNF/5X/FXu
kqEmiYVRezicTisD1F9jboCJCxCJ5cn1n/JbxCEbTMiJ3PwFZLzmZPzgUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcMSjYiil1G3Z86Fi50T1MP2UG2MB8GA1UdIwQY
MBaAFDhiiGWv2KTfr93vgR78/HnAOHMyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0dLSVphX1lwTi12M2UtQkh2ejhlY0E0Y3pJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yYmYxYjEtMTY4My00Yzk5LTlmYmUt
ZGJlZTY2ZDczMzEzLzEvT0dLSVphX1lwTi12M2UtQkh2ejhlY0E0Y3pJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8yYmYxYjEtMTY4My00Yzk5LTlmYmUtZGJlZTY2ZDczMzEz
LzEvT0dLSVphX1lwTi12M2UtQkh2ejhlY0E0Y3pJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTA1EYLq
ug6hEEd5vlE7uPf+dtfZbQ53ate51VGMnrxRtAXTqrVGVn5LRSKqDQNvWjx1cAjs
23aOTiKv/h1AIqp9Lwx88I6yu4PIO/vK0fn1ibRDwBSZSgXTtwPk35YYQXrE0lom
3WE3/6pAc7RG0LY+8bTiyOcvY6NEafPHQmucJm/ro0qg8NwQKuDkRhksqTGANGg1
zrklYRHkxIU2NpkCGh26jX81aA3PuXu8UOZpIJ3c/9xIHXvNtgMlm+zsYRbKElvO
2VP3HTcGJ/S8bIMedY9STuRDuEWHgcmHaw5Lq4oAVBQMDO3+y9zSuqE6AN2r8WXf
NX0y+IH32WFhzg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:27 2025 by rpki-client