Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
File: OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft (raw, json)
Hash identifier: AtLAxRSi8M6cSlO2ACCsbn/PySkRY9Q3ROnBWgT36q8=
Subject key identifier: E4:14:4B:62:A8:41:13:1A:F8:C9:3D:EC:3D:66:99:B3:0A:2A:E9:51
Authority key identifier: 38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
Certificate issuer: /CN=3841266f2c94ac422b96a68a7500bb82c1179191
Certificate serial: 0194BD4E70A38F359A0905DA65FFF366D3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
Manifest number: 1380
Signing time: Fri 31 Jan 2025 17:00:21 +0000
Manifest this update: Fri 31 Jan 2025 17:00:21 +0000
Manifest next update: Sat 01 Feb 2025 17:00:21 +0000
Files and hashes: 1: OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl (hash: qgJrTPfjlM5C9hV4G/Oy5GBUtK6zNeOu2qywt5zJSVw=)
2: QOav3lyPZWYZ9A-33IdmOq4p0Mo.roa (hash: MbjZHir8r+jpFNjo1IiwrrSwZjkeJw6BZ6V05J/2V+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:70:a3:8f:35:9a:09:05:da:65:ff:f3:66:d3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3841266f2c94ac422b96a68a7500bb82c1179191
Validity
Not Before: Jan 31 17:00:21 2025 GMT
Not After : Feb 1 17:00:21 2025 GMT
Subject: CN=e4144b62a841131af8c93dec3d6699b30a2ae951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ca:6a:d7:d2:e5:dc:49:7f:8a:9d:97:1f:2e:
16:2d:14:33:f6:55:3a:9b:0e:6d:02:15:49:50:a5:
01:14:ff:18:e2:2f:61:6a:95:df:a0:47:d5:18:1a:
4b:33:2b:10:c7:8c:ad:4b:e4:2c:1e:a0:83:98:82:
8d:67:80:e9:31:99:81:95:c2:08:2f:a2:75:e9:c8:
8b:4d:c8:ef:7e:d0:62:b7:0b:30:56:09:ec:a7:55:
d7:bf:42:51:32:7f:5d:58:86:98:ff:8e:0e:53:0e:
43:be:31:98:47:ba:20:5a:96:a6:88:34:3f:29:9f:
32:52:63:82:ff:ab:2e:90:88:80:c5:45:ae:8d:fb:
78:32:7d:a4:a0:c4:33:5f:b8:69:76:03:ba:f1:df:
1c:72:95:80:e1:95:4b:be:00:fa:76:81:a7:a1:08:
88:be:93:81:b8:02:a4:64:49:d4:0b:0f:66:cd:51:
15:da:6e:da:8c:47:c4:28:23:90:df:b6:cf:f4:23:
ad:60:44:79:0c:d5:7b:85:7a:fe:3f:62:b4:20:d9:
0b:e2:35:1a:f0:9f:e0:b5:40:e3:bd:c0:e8:be:67:
4f:09:ee:31:1d:d0:ba:f2:75:bf:f8:8f:a8:36:07:
09:fa:ee:56:e1:47:86:cc:7c:0a:0b:08:19:c2:0e:
a3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:14:4B:62:A8:41:13:1A:F8:C9:3D:EC:3D:66:99:B3:0A:2A:E9:51
X509v3 Authority Key Identifier:
keyid:38:41:26:6F:2C:94:AC:42:2B:96:A6:8A:75:00:BB:82:C1:17:91:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEEmbyyUrEIrlqaKdQC7gsEXkZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/10a444-3e30-4421-b439-86e5a9ef862a/1/OEEmbyyUrEIrlqaKdQC7gsEXkZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:cb:1d:12:aa:f0:ff:c0:97:2c:ca:be:c0:25:2b:f9:13:28:
a8:b7:c4:b7:77:03:d6:aa:45:8f:77:0a:f9:95:6e:5f:9c:54:
0f:dd:12:40:2f:e2:16:4b:91:0d:02:c7:cd:ef:4e:a0:fd:29:
18:99:12:46:21:6e:5e:a8:6d:05:05:56:39:dc:fc:cc:86:6f:
a3:e0:75:89:3d:bc:a6:54:6a:c6:d0:13:35:ba:12:3a:47:e9:
cf:72:74:fc:90:a6:8e:00:6b:e9:91:a7:a2:ba:b7:d5:9f:78:
c0:9c:74:19:08:70:cd:46:23:5c:e4:58:ca:8f:a3:eb:39:bf:
c5:0c:92:13:5b:db:c3:cc:05:6e:f1:58:b3:81:ab:f2:75:04:
a1:83:ce:4d:b7:09:c3:b3:c9:80:bd:b3:18:6c:8a:05:d2:42:
03:f4:10:10:d7:9c:93:b2:2f:8c:04:89:a8:c6:bd:e9:ff:8d:
de:f1:3a:54:4e:90:ab:b9:17:6c:90:28:26:d7:d3:9f:c2:b5:
ac:35:5a:57:22:cf:3c:ef:fd:d8:99:ef:90:7d:b7:0b:95:a6:
87:46:00:8f:2f:85:21:e5:1d:6f:54:be:cf:34:fa:c7:af:6b:
e7:ef:3b:ee:e4:7c:b4:cf:52:66:a2:01:f7:4b:42:de:9e:44:
60:77:29:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TnCjjzWaCQXaZf/zZtPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NDEyNjZmMmM5NGFjNDIyYjk2YTY4YTc1MDBiYjgyYzEx
NzkxOTEwHhcNMjUwMTMxMTcwMDIxWhcNMjUwMjAxMTcwMDIxWjAzMTEwLwYDVQQD
EyhlNDE0NGI2MmE4NDExMzFhZjhjOTNkZWMzZDY2OTliMzBhMmFlOTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMpq19Ll3El/ip2XHy4WLRQz9lU6
mw5tAhVJUKUBFP8Y4i9hapXfoEfVGBpLMysQx4ytS+QsHqCDmIKNZ4DpMZmBlcII
L6J16ciLTcjvftBitwswVgnsp1XXv0JRMn9dWIaY/44OUw5DvjGYR7ogWpamiDQ/
KZ8yUmOC/6sukIiAxUWujft4Mn2koMQzX7hpdgO68d8ccpWA4ZVLvgD6doGnoQiI
vpOBuAKkZEnUCw9mzVEV2m7ajEfEKCOQ37bP9COtYER5DNV7hXr+P2K0INkL4jUa
8J/gtUDjvcDovmdPCe4xHdC68nW/+I+oNgcJ+u5W4UeGzHwKCwgZwg6jGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQUS2KoQRMa+Mk97D1mmbMKKulRMB8GA1UdIwQY
MBaAFDhBJm8slKxCK5aminUAu4LBF5GRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0VFbWJ5eVVyRUlybHFhS2RRQzdnc0VYa1pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8xMGE0NDQtM2UzMC00NDIxLWI0Mzkt
ODZlNWE5ZWY4NjJhLzEvT0VFbWJ5eVVyRUlybHFhS2RRQzdnc0VYa1pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8xMGE0NDQtM2UzMC00NDIxLWI0MzktODZlNWE5ZWY4NjJh
LzEvT0VFbWJ5eVVyRUlybHFhS2RRQzdnc0VYa1pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMsdEqrw
/8CXLMq+wCUr+RMoqLfEt3cD1qpFj3cK+ZVuX5xUD90SQC/iFkuRDQLHze9OoP0p
GJkSRiFuXqhtBQVWOdz8zIZvo+B1iT28plRqxtATNboSOkfpz3J0/JCmjgBr6ZGn
orq31Z94wJx0GQhwzUYjXORYyo+j6zm/xQySE1vbw8wFbvFYs4Gr8nUEoYPOTbcJ
w7PJgL2zGGyKBdJCA/QQENeck7IvjASJqMa96f+N3vE6VE6Qq7kXbJAoJtfTn8K1
rDVaVyLPPO/92JnvkH23C5Wmh0YAjy+FIeUdb1S+zzT6x69r5+877uR8tM9SZqIB
90tC3p5EYHcpXg==
-----END CERTIFICATE-----
Generated at Thu May 1 13:22:40 2025 by rpki-client