Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
File: oYZO36QS13oDy_WRMeP8wDpg4Yg.mft (raw, json)
Hash identifier: Aej0NJ7uPyFRj9NqcmiNvsTUdQy42NacYLwQJ5Bp3Lg=
Subject key identifier: 0B:EE:84:BF:6B:EF:D4:09:68:E2:E4:F0:D0:23:A2:E1:CD:7E:76:E7
Authority key identifier: A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
Certificate issuer: /CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Certificate serial: 0194BC04E89AB4F51762D9C708E8D33546EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: L3VPH_zsfjbjwAwWmPKEb-EZRqg.roa (hash: UjjV+/8s9XVTqZqV/PGNgru/2pjUXQnn5HjnZe2AuZE=)
2: oYZO36QS13oDy_WRMeP8wDpg4Yg.crl (hash: ca/ptV9NWPpSicgVOsgsu6U1uQ4QxMhoWgNZlbicmRU=)
3: w0-GJVM_7K6n8cz6c8qV0ZIKekk.roa (hash: 8mJ/uqu688jBVtDnfLQQnmIToxnxL1kuys3V2s+nqY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e8:9a:b4:f5:17:62:d9:c7:08:e8:d3:35:46:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1864edfa412d77a03cbf59131e3fcc03a60e188
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=0bee84bf6befd40968e2e4f0d023a2e1cd7e76e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f2:72:63:09:9e:f6:fb:e1:c0:48:19:44:3f:
8d:2c:5c:b0:78:b7:9a:f1:2c:19:72:54:16:f2:47:
4a:2e:f1:97:47:30:d0:85:3d:4c:f1:c4:e2:d0:fb:
88:7e:a9:d4:86:6b:00:61:c8:58:b5:d6:fc:97:5c:
d8:24:5f:bc:a1:31:f7:ce:03:36:35:92:b0:4d:23:
37:e4:be:16:21:92:24:5a:29:ff:fb:26:ce:e5:d4:
87:6b:76:ed:64:00:de:93:4b:fb:24:bc:3f:48:58:
f8:2c:c2:29:dc:ff:65:37:b9:63:87:f3:f1:af:3d:
02:60:1e:b7:fb:31:5e:9b:e0:ea:c8:5e:36:ea:01:
35:b5:40:30:5d:08:cb:5f:9d:db:31:e4:db:8f:3c:
4b:47:c0:7a:10:37:c4:5c:39:ab:61:2c:cd:71:e8:
6b:e0:9c:9c:19:5d:c5:d3:52:39:32:d1:80:a8:e0:
88:cb:ae:97:8e:5f:61:cc:93:15:5b:77:63:25:fc:
70:1c:2b:04:2b:64:27:00:53:8f:2b:ed:ed:22:ec:
17:57:86:78:9a:1b:58:b7:39:4b:00:dd:9a:3d:5c:
f6:50:69:9c:20:dd:d3:0d:7f:4d:ec:3e:2c:64:6f:
be:20:ad:44:2c:13:fc:97:2f:01:66:3e:0b:d5:9c:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EE:84:BF:6B:EF:D4:09:68:E2:E4:F0:D0:23:A2:E1:CD:7E:76:E7
X509v3 Authority Key Identifier:
keyid:A1:86:4E:DF:A4:12:D7:7A:03:CB:F5:91:31:E3:FC:C0:3A:60:E1:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYZO36QS13oDy_WRMeP8wDpg4Yg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8c3d5c-a36c-4e3f-a059-1a5579e8c6c0/1/oYZO36QS13oDy_WRMeP8wDpg4Yg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:12:7a:4c:c0:28:30:7e:9a:54:29:c4:27:fe:d3:47:1e:92:
18:bc:b2:c9:45:40:6d:ca:80:47:47:b7:91:6d:fc:0a:89:9c:
29:2d:13:14:3a:ac:a8:2a:de:52:1d:c1:b9:49:27:bc:0f:ac:
78:2f:31:4a:d7:13:64:f2:2d:57:f6:f8:70:84:5c:04:40:49:
40:3a:cf:7c:93:16:53:bb:84:6c:e1:da:dd:ed:48:44:43:18:
b1:34:da:2c:27:1e:33:02:a5:93:c1:2f:bc:b4:2d:be:72:53:
9e:c1:14:3f:8b:cb:2e:10:80:46:45:1e:93:76:f7:0b:86:ab:
2a:55:ea:e4:7b:9f:93:7e:45:64:d0:2f:08:8d:75:dc:b6:34:
57:7a:0b:71:0c:db:12:ac:67:37:a2:09:66:4c:06:5d:3c:b1:
44:fe:9b:8a:ce:20:d8:16:b6:2f:5e:4f:1b:80:0f:28:b7:36:
86:c8:64:8f:e7:d3:25:77:d0:61:0b:60:ad:b2:ab:2d:cf:61:
5e:4e:77:3b:c6:18:17:ba:a6:71:aa:75:8e:e4:96:0a:27:c3:
05:2d:d4:33:65:3f:87:bc:55:f2:56:59:78:bf:10:5e:a5:d2:
ac:1e:dd:4a:5b:ee:2f:6e:fe:2c:a9:0b:39:47:46:f4:57:1c:
18:7e:31:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BOiatPUXYtnHCOjTNUbqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExODY0ZWRmYTQxMmQ3N2EwM2NiZjU5MTMxZTNmY2MwM2E2
MGUxODgwHhcNMjUwMTMxMTEwMDI1WhcNMjUwMjAxMTEwMDI1WjAzMTEwLwYDVQQD
EygwYmVlODRiZjZiZWZkNDA5NjhlMmU0ZjBkMDIzYTJlMWNkN2U3NmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPJyYwme9vvhwEgZRD+NLFyweLea
8SwZclQW8kdKLvGXRzDQhT1M8cTi0PuIfqnUhmsAYchYtdb8l1zYJF+8oTH3zgM2
NZKwTSM35L4WIZIkWin/+ybO5dSHa3btZADek0v7JLw/SFj4LMIp3P9lN7ljh/Px
rz0CYB63+zFem+DqyF426gE1tUAwXQjLX53bMeTbjzxLR8B6EDfEXDmrYSzNcehr
4JycGV3F01I5MtGAqOCIy66Xjl9hzJMVW3djJfxwHCsEK2QnAFOPK+3tIuwXV4Z4
mhtYtzlLAN2aPVz2UGmcIN3TDX9N7D4sZG++IK1ELBP8ly8BZj4L1ZwIVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvuhL9r79QJaOLk8NAjouHNfnbnMB8GA1UdIwQY
MBaAFKGGTt+kEtd6A8v1kTHj/MA6YOGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1laTzM2UVMxM29EeV9XUk1lUDh3RHBnNFlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84YzNkNWMtYTM2Yy00ZTNmLWEwNTkt
MWE1NTc5ZThjNmMwLzEvb1laTzM2UVMxM29EeV9XUk1lUDh3RHBnNFlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84YzNkNWMtYTM2Yy00ZTNmLWEwNTktMWE1NTc5ZThjNmMw
LzEvb1laTzM2UVMxM29EeV9XUk1lUDh3RHBnNFlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARxJ6TMAo
MH6aVCnEJ/7TRx6SGLyyyUVAbcqAR0e3kW38ComcKS0TFDqsqCreUh3BuUknvA+s
eC8xStcTZPItV/b4cIRcBEBJQDrPfJMWU7uEbOHa3e1IREMYsTTaLCceMwKlk8Ev
vLQtvnJTnsEUP4vLLhCARkUek3b3C4arKlXq5Hufk35FZNAvCI113LY0V3oLcQzb
EqxnN6IJZkwGXTyxRP6bis4g2Ba2L15PG4APKLc2hshkj+fTJXfQYQtgrbKrLc9h
Xk53O8YYF7qmcap1juSWCifDBS3UM2U/h7xV8lZZeL8QXqXSrB7dSlvuL27+LKkL
OUdG9FccGH4xbQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:14 2025 by rpki-client