Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/2fb352-ef94-42de-89ac-d9af710ba1de/1/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.mft
File: Ou8xs2gmh5x-vBEsYpQaHNOiuzM.mft (raw, json)
Hash identifier: f2jmAnw1haaVgFWcqwgDG65LhX5axt4g0CFHjLd/ZFM=
Subject key identifier: 22:62:99:CE:6A:E8:0F:82:D5:4D:18:AA:6D:0D:F8:85:26:AB:0B:9C
Authority key identifier: 3A:EF:31:B3:68:26:87:9C:7E:BC:11:2C:62:94:1A:1C:D3:A2:BB:33
Certificate issuer: /CN=3aef31b36826879c7ebc112c62941a1cd3a2bb33
Certificate serial: 0194BBCDCC811EDE7AC0FD2606847246363F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/2fb352-ef94-42de-89ac-d9af710ba1de/1/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.mft
Manifest number: 0836
Signing time: Fri 31 Jan 2025 10:00:14 +0000
Manifest this update: Fri 31 Jan 2025 10:00:14 +0000
Manifest next update: Sat 01 Feb 2025 10:00:14 +0000
Files and hashes: 1: Ou8xs2gmh5x-vBEsYpQaHNOiuzM.crl (hash: 8uvaHkaMoGL+6u/mVt6VHT5ndmFhEXODgJFtBDz+Qpk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:cc:81:1e:de:7a:c0:fd:26:06:84:72:46:36:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aef31b36826879c7ebc112c62941a1cd3a2bb33
Validity
Not Before: Jan 31 10:00:14 2025 GMT
Not After : Feb 1 10:00:14 2025 GMT
Subject: CN=226299ce6ae80f82d54d18aa6d0df88526ab0b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:ae:ca:ec:6b:6d:53:91:5e:83:f8:03:51:
8f:d2:aa:7c:f0:80:b5:d0:b0:e8:70:b2:34:09:2a:
b9:be:2d:61:14:86:25:2d:ce:40:69:63:91:96:60:
2b:3f:69:ac:50:e0:c1:f9:5c:d7:3d:9b:5f:80:c8:
70:58:d2:5e:c5:9d:1b:c4:e7:21:21:3a:6e:1e:ea:
1f:6d:f4:30:84:5e:8d:57:2c:75:cd:16:24:4e:59:
86:ef:1b:a8:74:49:c9:d5:a7:cc:76:c9:c4:f8:24:
e3:7c:06:48:f6:68:97:6f:e2:95:d4:55:b2:97:52:
df:14:56:03:6c:b1:d9:44:56:d5:25:20:a7:6d:42:
83:40:ca:56:6d:da:6f:ca:7e:ed:80:52:69:f6:7a:
05:56:27:8b:04:f8:30:92:e5:b2:f0:9c:df:5c:f9:
4f:ea:36:56:2e:9a:d5:a0:7a:27:9d:f5:93:5b:32:
5d:47:89:42:d8:0e:49:58:99:13:14:9b:55:a8:51:
04:e7:06:60:55:bd:21:f9:a6:07:09:8f:12:41:a4:
ec:fa:e0:41:83:13:9d:01:37:7d:24:18:05:ea:3f:
8b:aa:5d:d4:fe:4d:d8:b4:c8:70:e7:52:d2:9f:3f:
f8:32:0d:04:b8:80:9e:be:58:cf:31:71:24:2f:bb:
e8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:62:99:CE:6A:E8:0F:82:D5:4D:18:AA:6D:0D:F8:85:26:AB:0B:9C
X509v3 Authority Key Identifier:
keyid:3A:EF:31:B3:68:26:87:9C:7E:BC:11:2C:62:94:1A:1C:D3:A2:BB:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2fb352-ef94-42de-89ac-d9af710ba1de/1/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/2fb352-ef94-42de-89ac-d9af710ba1de/1/Ou8xs2gmh5x-vBEsYpQaHNOiuzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d8:4a:e9:5d:41:2e:c0:e3:4b:bf:04:4e:12:cc:46:0a:f5:
f0:4a:b7:9c:29:a4:d1:67:b3:b3:50:f0:be:d5:7b:6b:ac:1d:
1f:86:4b:e7:f3:b5:24:8b:a0:2f:9f:5e:6b:0b:d1:47:96:54:
8c:ad:d1:36:8f:85:0f:48:c8:46:02:87:23:9c:ca:1f:4e:c3:
34:46:2d:7d:17:47:55:7c:73:82:59:3a:e2:35:f6:26:7a:00:
ca:d6:b8:b3:19:0d:9d:a9:c6:7a:d9:97:c1:62:fc:dd:2d:39:
2c:59:57:f2:e6:c5:7c:d6:de:91:89:9a:0f:9f:01:04:4c:8d:
87:a9:24:34:b1:97:0a:12:3a:ef:ec:37:5b:fa:50:bf:32:79:
51:9a:9c:d4:ed:5b:79:87:af:2c:66:5c:22:54:d9:f5:6b:35:
b1:1c:18:1f:85:2a:74:aa:19:d9:e4:40:b7:fa:ca:fb:92:45:
ef:e1:7a:be:89:1e:9a:55:e0:4e:7c:59:58:44:09:a3:a7:44:
02:b9:5b:a5:ee:cb:7c:17:59:80:01:c0:6d:e4:5d:32:f4:e0:
79:e9:33:f6:96:d6:a7:c5:89:ae:a0:b6:fa:e6:0a:7c:05:82:
bd:40:84:6e:ad:d4:6e:d2:a5:de:19:6f:b7:40:c6:16:fd:3d:
e8:22:09:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zcyBHt56wP0mBoRyRjY/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWYzMWIzNjgyNjg3OWM3ZWJjMTEyYzYyOTQxYTFjZDNh
MmJiMzMwHhcNMjUwMTMxMTAwMDE0WhcNMjUwMjAxMTAwMDE0WjAzMTEwLwYDVQQD
EygyMjYyOTljZTZhZTgwZjgyZDU0ZDE4YWE2ZDBkZjg4NTI2YWIwYjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlSuyuxrbVORXoP4A1GP0qp88IC1
0LDocLI0CSq5vi1hFIYlLc5AaWORlmArP2msUODB+VzXPZtfgMhwWNJexZ0bxOch
ITpuHuofbfQwhF6NVyx1zRYkTlmG7xuodEnJ1afMdsnE+CTjfAZI9miXb+KV1FWy
l1LfFFYDbLHZRFbVJSCnbUKDQMpWbdpvyn7tgFJp9noFVieLBPgwkuWy8JzfXPlP
6jZWLprVoHonnfWTWzJdR4lC2A5JWJkTFJtVqFEE5wZgVb0h+aYHCY8SQaTs+uBB
gxOdATd9JBgF6j+Lql3U/k3YtMhw51LSnz/4Mg0EuICevljPMXEkL7voMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJimc5q6A+C1U0Yqm0N+IUmqwucMB8GA1UdIwQY
MBaAFDrvMbNoJoecfrwRLGKUGhzTorszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3U4eHMyZ21oNXgtdkJFc1lwUWFITk9pdXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8yZmIzNTItZWY5NC00MmRlLTg5YWMt
ZDlhZjcxMGJhMWRlLzEvT3U4eHMyZ21oNXgtdkJFc1lwUWFITk9pdXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8yZmIzNTItZWY5NC00MmRlLTg5YWMtZDlhZjcxMGJhMWRl
LzEvT3U4eHMyZ21oNXgtdkJFc1lwUWFITk9pdXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9hK6V1B
LsDjS78EThLMRgr18Eq3nCmk0Wezs1DwvtV7a6wdH4ZL5/O1JIugL59eawvRR5ZU
jK3RNo+FD0jIRgKHI5zKH07DNEYtfRdHVXxzglk64jX2JnoAyta4sxkNnanGetmX
wWL83S05LFlX8ubFfNbekYmaD58BBEyNh6kkNLGXChI67+w3W/pQvzJ5UZqc1O1b
eYevLGZcIlTZ9Ws1sRwYH4UqdKoZ2eRAt/rK+5JF7+F6vokemlXgTnxZWEQJo6dE
Arlbpe7LfBdZgAHAbeRdMvTgeekz9pbWp8WJrqC2+uYKfAWCvUCEbq3UbtKl3hlv
t0DGFv096CIJog==
-----END CERTIFICATE-----
Generated at Sat Apr 26 17:36:13 2025 by rpki-client