Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
File: oZ_WM6TT0hDez321fRIrZIuY7SU.mft (raw, json)
Hash identifier: pFntht58674DyA8aZbkPY8sKeMvodyD3ughKbT4Z7zQ=
Subject key identifier: 04:36:CB:4A:18:EB:01:58:16:04:C8:83:6B:6F:5F:81:19:28:35:8F
Authority key identifier: A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
Certificate issuer: /CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Certificate serial: 0194BC72A645689C7103927E8346174587BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
Manifest number: 32
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: oZ_WM6TT0hDez321fRIrZIuY7SU.crl (hash: eUuNUhVb0ZAqqgHXTwZ5yf4SqO8wPJkj1E7eFdE8T4U=)
2: q9EscCe7t5gVibmBd58asAmZMUg.roa (hash: VIc3vlhk4rBIAMQ48+/9jl8SQU9fOCllGCJznJGDS5M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a6:45:68:9c:71:03:92:7e:83:46:17:45:87:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a19fd633a4d3d210decf7db57d122b648b98ed25
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=0436cb4a18eb01581604c8836b6f5f811928358f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5f:6f:3a:c9:a7:13:ea:ae:c5:b9:ac:04:3f:
af:a7:0a:08:33:69:06:ee:d1:1b:27:0d:46:50:b7:
1c:79:27:10:db:16:3c:b2:57:88:26:6c:3d:75:18:
22:4f:5f:34:b0:34:80:1f:ef:38:c4:9a:b0:56:ec:
d9:ec:7a:15:6e:57:b9:2b:49:54:27:15:f6:66:e2:
9a:3e:3e:03:b8:13:14:94:a5:e4:16:57:07:4c:29:
d8:41:27:07:f0:b4:ed:3a:28:89:79:ba:da:2a:af:
ea:32:66:63:9a:f5:de:c2:5f:de:5e:d0:3b:68:1b:
05:71:e1:a7:37:bb:b6:c4:a9:20:6b:72:2b:3b:26:
b3:cf:4b:cd:d9:4b:b9:67:79:13:fc:f1:68:9f:0f:
1d:d3:7a:85:1a:1b:0f:a8:18:35:eb:74:12:f8:36:
92:95:9a:19:eb:2f:48:00:8d:18:03:96:cc:6d:a4:
6d:b5:01:39:e3:1a:e5:83:60:b1:26:c3:f1:48:36:
17:ba:78:d2:21:14:d4:3e:ef:d6:1b:26:6e:4d:fd:
0b:ec:31:94:62:80:5e:eb:5f:bf:c4:fa:b1:8c:8c:
16:27:cc:c2:f1:79:a8:d9:91:6b:81:78:98:b6:2e:
2d:3e:47:36:34:3b:9c:37:9c:83:2d:ce:3f:dc:02:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:36:CB:4A:18:EB:01:58:16:04:C8:83:6B:6F:5F:81:19:28:35:8F
X509v3 Authority Key Identifier:
keyid:A1:9F:D6:33:A4:D3:D2:10:DE:CF:7D:B5:7D:12:2B:64:8B:98:ED:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oZ_WM6TT0hDez321fRIrZIuY7SU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7cabe0-6d84-47a7-acec-c7cad5020eef/1/oZ_WM6TT0hDez321fRIrZIuY7SU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:38:e5:51:ed:da:10:9b:13:6d:bc:64:b0:db:cd:f7:46:1b:
85:18:89:dd:46:04:bd:40:18:3c:36:2a:76:00:62:74:d8:b6:
0e:ab:4d:20:f0:7f:a8:f5:d4:96:2e:14:eb:fa:57:74:df:05:
08:8d:09:26:b0:ad:a7:f0:a4:26:58:b2:01:d3:20:80:47:68:
75:92:8d:52:a2:e4:75:de:36:1f:01:bf:ec:cc:fc:27:c0:72:
d0:1d:b6:a0:a9:b2:49:a2:5a:c7:5c:73:be:13:ab:37:08:27:
ca:b0:b8:b9:c6:ed:5e:81:82:d4:66:03:7e:01:1b:a0:be:83:
96:f9:63:0c:8e:53:e8:eb:f5:2e:5f:6b:f5:16:db:31:3e:aa:
e8:13:c4:61:1c:08:b6:73:3b:75:dd:92:9b:16:48:39:40:84:
c3:d2:91:26:df:ad:b2:1c:ae:bd:98:cb:5b:57:05:32:7a:1e:
af:42:ae:a2:29:9a:f6:88:90:24:b3:e8:14:d9:28:ff:f1:59:
9c:63:bf:06:4e:18:f0:31:a0:50:9b:02:20:79:e3:48:af:61:
b9:65:ca:89:4e:63:3a:6e:d7:d6:d5:3d:d0:6e:6f:8f:fd:99:
2c:88:94:e3:b3:b5:d0:99:af:c8:4c:9c:5d:da:7f:66:19:2e:
cb:4c:63:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqZFaJxxA5J+g0YXRYe6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExOWZkNjMzYTRkM2QyMTBkZWNmN2RiNTdkMTIyYjY0OGI5
OGVkMjUwHhcNMjUwMTMxMTMwMDE3WhcNMjUwMjAxMTMwMDE3WjAzMTEwLwYDVQQD
EygwNDM2Y2I0YTE4ZWIwMTU4MTYwNGM4ODM2YjZmNWY4MTE5MjgzNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm19vOsmnE+quxbmsBD+vpwoIM2kG
7tEbJw1GULcceScQ2xY8sleIJmw9dRgiT180sDSAH+84xJqwVuzZ7HoVble5K0lU
JxX2ZuKaPj4DuBMUlKXkFlcHTCnYQScH8LTtOiiJebraKq/qMmZjmvXewl/eXtA7
aBsFceGnN7u2xKkga3IrOyazz0vN2Uu5Z3kT/PFonw8d03qFGhsPqBg163QS+DaS
lZoZ6y9IAI0YA5bMbaRttQE54xrlg2CxJsPxSDYXunjSIRTUPu/WGyZuTf0L7DGU
YoBe61+/xPqxjIwWJ8zC8Xmo2ZFrgXiYti4tPkc2NDucN5yDLc4/3AL9zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQ2y0oY6wFYFgTIg2tvX4EZKDWPMB8GA1UdIwQY
MBaAFKGf1jOk09IQ3s99tX0SK2SLmO0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1pfV002VFQwaERlejMyMWZSSXJaSXVZN1NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83Y2FiZTAtNmQ4NC00N2E3LWFjZWMt
YzdjYWQ1MDIwZWVmLzEvb1pfV002VFQwaERlejMyMWZSSXJaSXVZN1NVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC83Y2FiZTAtNmQ4NC00N2E3LWFjZWMtYzdjYWQ1MDIwZWVm
LzEvb1pfV002VFQwaERlejMyMWZSSXJaSXVZN1NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDjlUe3a
EJsTbbxksNvN90YbhRiJ3UYEvUAYPDYqdgBidNi2DqtNIPB/qPXUli4U6/pXdN8F
CI0JJrCtp/CkJliyAdMggEdodZKNUqLkdd42HwG/7Mz8J8By0B22oKmySaJax1xz
vhOrNwgnyrC4ucbtXoGC1GYDfgEboL6DlvljDI5T6Ov1Ll9r9RbbMT6q6BPEYRwI
tnM7dd2SmxZIOUCEw9KRJt+tshyuvZjLW1cFMnoer0Kuoima9oiQJLPoFNko//FZ
nGO/Bk4Y8DGgUJsCIHnjSK9huWXKiU5jOm7X1tU90G5vj/2ZLIiU47O10JmvyEyc
Xdp/Zhkuy0xj8w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:46 2025 by rpki-client