Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
File: r2Okes26jsHNhdTXnzazW2mOX4k.mft (raw, json)
Hash identifier: GBpLXERlzn/BS4/9VBFEKrppd4CvtyUaR/zfYoMZUfg=
Subject key identifier: 0F:D2:E6:EF:A1:42:88:32:E0:B6:86:8D:7C:E5:D9:EC:57:0F:3B:66
Authority key identifier: AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
Certificate issuer: /CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Certificate serial: 0194BCE0CF69DCE64AFFBC122514096046B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: YXk4VQ9w2ydeFfWUpTPAL38DI14.roa (hash: 63k2DxSPaDP/x2Jl3oeCNKnb4PXDg6/RYTgk7tLrZPw=)
2: r2Okes26jsHNhdTXnzazW2mOX4k.crl (hash: YP/JDE5gHq0fphZEAfHgS0/paJcHfUJx+l6M1zt7WX4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:cf:69:dc:e6:4a:ff:bc:12:25:14:09:60:46:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af63a47acdba8ec1cd85d4d79f36b35b698e5f89
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=0fd2e6efa1428832e0b6868d7ce5d9ec570f3b66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5a:1a:93:bc:65:08:b2:ae:4b:8b:65:0a:24:
7c:a7:0a:7a:f9:9a:e5:df:58:26:94:8c:9c:4d:54:
7c:08:ab:8f:02:22:c5:60:4d:df:cf:48:b6:78:3e:
b4:62:da:88:6a:d1:26:85:75:29:c9:47:e3:ab:b0:
b9:ec:38:38:fa:0a:7b:70:7a:e6:38:fc:0d:42:cc:
24:8f:4c:0f:8c:8f:8e:a8:17:2b:93:cb:72:72:a9:
4e:30:20:b8:48:54:c0:ab:8b:d6:c5:e0:97:f1:44:
40:70:40:18:15:38:dc:67:e7:95:b7:96:45:21:70:
3d:dc:93:54:f4:28:5e:72:8d:8e:91:a0:6c:1d:80:
a7:33:63:d3:0f:a5:31:d6:9d:3c:10:d2:9b:1a:44:
56:d5:ae:fd:a3:10:8f:1a:40:92:ad:fb:8c:3e:8e:
9d:14:00:22:20:b6:a6:93:f8:f0:69:6e:58:7b:cf:
d7:61:84:32:eb:6f:6c:f4:dc:e8:03:72:4e:38:e0:
d7:47:29:85:0e:0d:1a:f8:02:ea:61:68:50:f5:f9:
67:8a:a5:0f:4e:cc:cd:55:7a:f7:45:78:2e:67:a2:
0d:c2:0e:0a:cf:b3:3e:37:f2:44:a6:2b:23:7a:fb:
57:59:34:e7:12:a8:15:c8:4f:b2:48:10:ef:67:7a:
f2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D2:E6:EF:A1:42:88:32:E0:B6:86:8D:7C:E5:D9:EC:57:0F:3B:66
X509v3 Authority Key Identifier:
keyid:AF:63:A4:7A:CD:BA:8E:C1:CD:85:D4:D7:9F:36:B3:5B:69:8E:5F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r2Okes26jsHNhdTXnzazW2mOX4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/c4d7b0-6ebf-4cac-a8ad-fe3e318cae9c/1/r2Okes26jsHNhdTXnzazW2mOX4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:80:1b:c5:01:86:0a:88:67:9d:5f:5e:87:34:ba:15:a8:88:
81:bb:74:09:99:d9:76:0f:e1:68:ef:38:cd:cd:0d:e7:dd:23:
1b:99:41:d8:c9:ff:05:ab:d0:73:07:5b:3c:15:13:a3:77:a8:
3a:6e:5f:5f:95:81:0b:d7:6f:4d:96:73:c9:ae:0e:74:6d:2a:
f5:18:81:07:82:9c:14:4b:2d:00:1d:f8:dc:16:37:f3:09:5a:
08:f9:c0:c2:aa:85:c5:af:69:3c:2d:70:90:7d:97:81:20:7d:
61:82:0f:2e:7d:e9:cb:26:17:97:2e:72:09:51:fd:53:f5:3e:
8b:33:2b:ae:24:26:a5:55:fd:86:8f:e0:04:60:68:fd:ae:66:
dd:99:ae:5a:1d:fe:1d:1c:6b:71:e2:10:1c:e6:3f:81:49:8e:
5a:17:57:32:82:ca:75:c9:cc:18:c4:7d:bc:80:c1:58:1d:30:
2b:26:2c:17:29:d4:77:cb:21:53:29:60:96:b1:a5:ba:e5:ac:
a5:29:e8:42:2f:76:98:ad:38:e6:28:c5:90:bf:e8:bc:25:7b:
53:ab:af:af:d1:1c:c7:0a:68:c4:30:24:c5:95:41:18:7e:c9:
87:f2:f8:61:6a:f6:40:f6:23:9c:d8:c3:8b:7c:9a:72:13:d6:
dd:c7:d5:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84M9p3OZK/7wSJRQJYEa4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNjNhNDdhY2RiYThlYzFjZDg1ZDRkNzlmMzZiMzViNjk4
ZTVmODkwHhcNMjUwMTMxMTUwMDM3WhcNMjUwMjAxMTUwMDM3WjAzMTEwLwYDVQQD
EygwZmQyZTZlZmExNDI4ODMyZTBiNjg2OGQ3Y2U1ZDllYzU3MGYzYjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Foak7xlCLKuS4tlCiR8pwp6+Zrl
31gmlIycTVR8CKuPAiLFYE3fz0i2eD60YtqIatEmhXUpyUfjq7C57Dg4+gp7cHrm
OPwNQswkj0wPjI+OqBcrk8tycqlOMCC4SFTAq4vWxeCX8URAcEAYFTjcZ+eVt5ZF
IXA93JNU9Checo2OkaBsHYCnM2PTD6Ux1p08ENKbGkRW1a79oxCPGkCSrfuMPo6d
FAAiILamk/jwaW5Ye8/XYYQy629s9NzoA3JOOODXRymFDg0a+ALqYWhQ9flniqUP
TszNVXr3RXguZ6INwg4Kz7M+N/JEpisjevtXWTTnEqgVyE+ySBDvZ3ryAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA/S5u+hQogy4LaGjXzl2exXDztmMB8GA1UdIwQY
MBaAFK9jpHrNuo7BzYXU1582s1tpjl+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjJPa2VzMjZqc0hOaGRUWG56YXpXMm1PWDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9jNGQ3YjAtNmViZi00Y2FjLWE4YWQt
ZmUzZTMxOGNhZTljLzEvcjJPa2VzMjZqc0hOaGRUWG56YXpXMm1PWDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9jNGQ3YjAtNmViZi00Y2FjLWE4YWQtZmUzZTMxOGNhZTlj
LzEvcjJPa2VzMjZqc0hOaGRUWG56YXpXMm1PWDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARYAbxQGG
CohnnV9ehzS6FaiIgbt0CZnZdg/haO84zc0N590jG5lB2Mn/BavQcwdbPBUTo3eo
Om5fX5WBC9dvTZZzya4OdG0q9RiBB4KcFEstAB343BY38wlaCPnAwqqFxa9pPC1w
kH2XgSB9YYIPLn3pyyYXly5yCVH9U/U+izMrriQmpVX9ho/gBGBo/a5m3ZmuWh3+
HRxrceIQHOY/gUmOWhdXMoLKdcnMGMR9vIDBWB0wKyYsFynUd8shUylglrGluuWs
pSnoQi92mK045ijFkL/ovCV7U6uvr9EcxwpoxDAkxZVBGH7Jh/L4YWr2QPYjnNjD
i3yachPW3cfVBg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:13 2025 by rpki-client