Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
File: oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft (raw, json)
Hash identifier: wkoO5A5cpmHIC7B2V8yjeqZ99S9tCo8LS4FAPucn9Rc=
Subject key identifier: 42:74:A2:50:A5:44:88:7C:05:C2:85:5E:79:30:82:E0:1A:83:6F:0C
Authority key identifier: A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
Certificate issuer: /CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Certificate serial: 0194BC3C67E7AB57B60514E4C5B98FD7BD80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
Manifest number: 057F
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl (hash: YyT4nnkDZ7/wX29Rw7alm3pmu7H4B/xrTZTMrXmpZpg=)
2: vVp_ERdrnRIqLCUsItb5VjVaAYU.roa (hash: qquI+vjzguENR1gQyNKb61rrA2a/ZfrzpGtiqom6A+8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:67:e7:ab:57:b6:05:14:e4:c5:b9:8f:d7:bd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a22fcb54a091d6913ffe9fafb983c57a4ac22c
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=4274a250a544887c05c2855e793082e01a836f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:21:69:dc:60:a0:19:08:1f:13:e9:64:f3:
7e:20:6f:95:33:90:5d:5c:e2:11:09:7c:da:bd:8b:
7e:9f:f0:2a:38:ae:da:21:61:ae:18:ae:e3:0b:7e:
49:62:67:e7:62:b9:59:b4:e6:bb:0e:d5:f9:08:31:
8e:39:f5:a6:58:ff:bb:d2:59:21:0d:e6:68:d9:38:
46:ae:d5:18:86:f1:18:f7:38:f6:a3:41:f6:26:7a:
d4:74:ac:13:2e:24:61:32:9f:66:6d:85:b3:a4:a3:
65:78:c9:e5:43:af:68:3a:e1:29:25:10:5d:4d:3e:
bf:e0:49:0e:ab:7c:df:1f:e8:ac:db:f3:0b:e4:9d:
fb:39:ef:a8:05:df:df:2c:ff:76:da:0e:21:be:48:
bc:90:7e:24:6e:c1:14:2d:ce:cb:19:a7:48:24:40:
65:e1:fd:fb:2b:f2:48:80:44:6c:03:c6:27:b9:fe:
ce:6f:30:2f:04:18:f4:6d:b7:d0:86:d2:8d:a7:47:
32:e5:f7:2b:33:75:f7:a4:9a:d3:07:0e:dc:4b:a7:
49:5e:32:36:df:a4:aa:48:25:30:1c:2f:65:55:74:
62:b6:90:de:33:80:01:e6:14:26:01:d0:0e:79:cb:
43:e1:81:fa:da:80:6a:dd:93:b7:ba:2d:7e:78:a5:
8e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:74:A2:50:A5:44:88:7C:05:C2:85:5E:79:30:82:E0:1A:83:6F:0C
X509v3 Authority Key Identifier:
keyid:A0:A2:2F:CB:54:A0:91:D6:91:3F:FE:9F:AF:B9:83:C5:7A:4A:C2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKIvy1SgkdaRP_6fr7mDxXpKwiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/df3b30-1ba9-4c4b-aa0c-f927e582ebf9/1/oKIvy1SgkdaRP_6fr7mDxXpKwiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:79:55:8e:0d:b7:10:a3:cb:ad:e6:65:dc:ab:ae:50:9b:b9:
b4:25:47:d1:17:ec:72:75:07:1f:8f:16:f0:f1:4f:41:a3:25:
3a:a8:ef:dc:ff:6c:b0:09:f8:42:0b:f9:91:c4:ce:31:c2:f0:
8a:6e:49:32:0f:98:e1:be:bb:b1:e3:48:25:83:fd:24:5d:cc:
9c:f4:e4:09:b5:81:2f:3a:a5:3b:8f:a7:86:ed:d9:c6:77:0c:
ca:2c:a4:fa:65:41:4b:de:0f:1e:15:f1:74:38:92:c6:a2:53:
7a:61:74:c8:d5:71:ec:41:45:60:17:21:17:95:90:c4:d9:cd:
e4:77:e8:c1:f9:19:ac:6e:42:6e:d2:bc:f1:5b:71:9d:a0:71:
6d:a5:4e:12:f1:be:1f:9d:ce:88:49:f0:83:d4:48:c2:4a:84:
08:18:b0:78:42:f4:02:af:4a:1b:43:96:0a:8d:1d:bb:3b:dd:
ee:b5:36:a6:0a:03:1b:1c:83:1b:2f:11:05:28:23:49:0b:7b:
ad:48:41:f2:09:c5:0f:5e:31:1b:05:73:7b:38:d3:8b:49:a6:
de:00:a2:06:6b:f9:a7:91:cf:b9:b9:da:f8:87:23:3a:47:03:
85:de:c8:b4:ba:ee:32:b9:af:5f:a7:f4:e7:d5:90:88:37:77:
c3:16:de:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGfnq1e2BRTkxbmP172AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTIyZmNiNTRhMDkxZDY5MTNmZmU5ZmFmYjk4M2M1N2E0
YWMyMmMwHhcNMjUwMTMxMTIwMTAyWhcNMjUwMjAxMTIwMTAyWjAzMTEwLwYDVQQD
Eyg0Mjc0YTI1MGE1NDQ4ODdjMDVjMjg1NWU3OTMwODJlMDFhODM2ZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LAhadxgoBkIHxPpZPN+IG+VM5Bd
XOIRCXzavYt+n/AqOK7aIWGuGK7jC35JYmfnYrlZtOa7DtX5CDGOOfWmWP+70lkh
DeZo2ThGrtUYhvEY9zj2o0H2JnrUdKwTLiRhMp9mbYWzpKNleMnlQ69oOuEpJRBd
TT6/4EkOq3zfH+is2/ML5J37Oe+oBd/fLP922g4hvki8kH4kbsEULc7LGadIJEBl
4f37K/JIgERsA8Ynuf7ObzAvBBj0bbfQhtKNp0cy5fcrM3X3pJrTBw7cS6dJXjI2
36SqSCUwHC9lVXRitpDeM4AB5hQmAdAOectD4YH62oBq3ZO3ui1+eKWOvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJ0olClRIh8BcKFXnkwguAag28MMB8GA1UdIwQY
MBaAFKCiL8tUoJHWkT/+n6+5g8V6SsIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tJdnkxU2drZGFSUF82ZnI3bUR4WHBLd2l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9kZjNiMzAtMWJhOS00YzRiLWFhMGMt
ZjkyN2U1ODJlYmY5LzEvb0tJdnkxU2drZGFSUF82ZnI3bUR4WHBLd2l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9kZjNiMzAtMWJhOS00YzRiLWFhMGMtZjkyN2U1ODJlYmY5
LzEvb0tJdnkxU2drZGFSUF82ZnI3bUR4WHBLd2l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtHlVjg23
EKPLreZl3KuuUJu5tCVH0RfscnUHH48W8PFPQaMlOqjv3P9ssAn4Qgv5kcTOMcLw
im5JMg+Y4b67seNIJYP9JF3MnPTkCbWBLzqlO4+nhu3ZxncMyiyk+mVBS94PHhXx
dDiSxqJTemF0yNVx7EFFYBchF5WQxNnN5HfowfkZrG5CbtK88VtxnaBxbaVOEvG+
H53OiEnwg9RIwkqECBiweEL0Aq9KG0OWCo0duzvd7rU2pgoDGxyDGy8RBSgjSQt7
rUhB8gnFD14xGwVzezjTi0mm3gCiBmv5p5HPubna+IcjOkcDhd7ItLruMrmvX6f0
59WQiDd3wxbejg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:13:59 2025 by rpki-client