Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
File: Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft (raw, json)
Hash identifier: oU+MTTLd2mx0C03KZaFbXchx7Vz4oj224J2dHx8BNtE=
Subject key identifier: 89:E5:03:0F:B1:51:FE:52:C5:61:49:59:32:53:31:07:2C:79:DF:8A
Authority key identifier: 39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
Certificate issuer: /CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Certificate serial: 0194BC72A569D9A60761F8DE90861411D7CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl (hash: ZpIMq9qEGcFmP5E372CAfodm/9c1OBnCoXHUcLNmcXQ=)
2: d4RsxxDF2qky1rlWD_iJofCuhN0.roa (hash: TcNufvctzuiZQt+YfPnOobzCexSj/+lFh6EqwA5TY9I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a5:69:d9:a6:07:61:f8:de:90:86:14:11:d7:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39ae828573f39413f806b51ee040cd34bc5f63ae
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=89e5030fb151fe52c5614959325331072c79df8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:cf:4d:b0:80:2c:89:f7:06:e3:d7:db:e6:
3d:3f:fe:24:07:38:b3:c8:f3:28:d3:40:f8:a9:69:
ee:ce:6d:49:16:e9:9f:3a:7b:2f:9f:e2:6b:fc:63:
cf:e2:aa:d5:74:19:7d:f8:3b:31:ae:dd:51:67:55:
89:10:40:32:51:ab:fa:e3:e5:ae:24:88:0e:70:24:
04:41:21:a4:f9:ee:91:9e:46:7d:95:93:3d:2d:64:
96:1a:54:28:6e:83:65:eb:01:8a:75:a8:5d:d0:a7:
ad:4b:7b:da:06:ac:a0:10:ae:20:75:b2:76:5b:0d:
da:3b:99:85:d3:78:e9:b2:3b:92:2c:d7:2d:6c:b6:
dd:c4:17:49:55:d1:9b:7d:71:8a:bf:12:94:a8:09:
00:a4:0d:69:2a:38:ba:e1:2f:c2:18:cd:f1:59:27:
cc:4a:95:05:a3:0f:12:87:10:96:aa:d5:41:73:8f:
02:8a:a9:81:94:ea:9b:6b:e1:22:7f:90:f1:65:d6:
0d:03:25:89:f2:7a:7f:f0:08:82:78:1f:65:23:40:
9b:50:4d:86:2d:cc:56:f9:46:9e:c7:91:48:b2:69:
6a:ea:12:08:ca:7f:64:ec:f8:69:e0:3f:60:73:17:
03:33:7b:42:ea:d5:fd:ef:48:e7:98:77:a5:90:6f:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E5:03:0F:B1:51:FE:52:C5:61:49:59:32:53:31:07:2C:79:DF:8A
X509v3 Authority Key Identifier:
keyid:39:AE:82:85:73:F3:94:13:F8:06:B5:1E:E0:40:CD:34:BC:5F:63:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oa6ChXPzlBP4BrUe4EDNNLxfY64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/b61a1c-ba6f-4327-bacd-89718ebc3847/1/Oa6ChXPzlBP4BrUe4EDNNLxfY64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:89:9b:b1:73:13:86:5b:37:d7:a6:b7:a0:79:cc:1f:d0:0c:
18:88:52:80:a1:5d:3e:7e:3a:56:3b:e3:2f:b2:e0:02:fa:64:
32:71:85:d0:39:41:09:5c:77:12:5a:30:d9:d3:6a:20:aa:2a:
bf:2e:f0:39:11:22:04:2a:d9:9b:37:cb:cf:7a:75:b5:e7:e2:
dd:0f:ff:de:7f:d3:46:99:d8:78:5a:a8:3a:98:bb:a1:27:fc:
24:62:bc:8f:25:38:09:6b:4d:59:fc:d1:9c:20:df:f0:2f:26:
a8:f9:f9:21:e3:26:43:ca:36:66:65:92:0f:f7:47:f2:56:66:
75:93:00:ef:ac:8a:71:68:db:b3:20:f2:e3:49:83:71:a1:41:
e0:8b:df:ad:b0:fd:40:02:7e:ca:60:75:24:7e:19:91:ff:21:
2a:98:89:32:69:25:b0:33:2b:81:44:1e:74:cc:b3:ee:73:59:
2f:df:2a:05:08:bc:ef:94:6e:77:87:7c:b2:cc:de:f1:a8:90:
01:15:d4:4f:b6:69:1d:e7:10:c9:b6:13:de:33:60:ad:35:8b:
5c:c6:9b:92:45:74:81:b1:1c:cc:79:9c:f4:4b:28:0c:98:ca:
8b:c8:f9:08:bd:27:c8:5f:6b:6b:57:e6:1d:1e:2c:61:cd:d2:
48:75:0a:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cqVp2aYHYfjekIYUEdfLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YWU4Mjg1NzNmMzk0MTNmODA2YjUxZWUwNDBjZDM0YmM1
ZjYzYWUwHhcNMjUwMTMxMTMwMDE3WhcNMjUwMjAxMTMwMDE3WjAzMTEwLwYDVQQD
Eyg4OWU1MDMwZmIxNTFmZTUyYzU2MTQ5NTkzMjUzMzEwNzJjNzlkZjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+jPTbCALIn3BuPX2+Y9P/4kBziz
yPMo00D4qWnuzm1JFumfOnsvn+Jr/GPP4qrVdBl9+Dsxrt1RZ1WJEEAyUav64+Wu
JIgOcCQEQSGk+e6RnkZ9lZM9LWSWGlQoboNl6wGKdahd0KetS3vaBqygEK4gdbJ2
Ww3aO5mF03jpsjuSLNctbLbdxBdJVdGbfXGKvxKUqAkApA1pKji64S/CGM3xWSfM
SpUFow8ShxCWqtVBc48CiqmBlOqba+Eif5DxZdYNAyWJ8np/8AiCeB9lI0CbUE2G
LcxW+Uaex5FIsmlq6hIIyn9k7Php4D9gcxcDM3tC6tX970jnmHelkG8MGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInlAw+xUf5SxWFJWTJTMQcsed+KMB8GA1UdIwQY
MBaAFDmugoVz85QT+Aa1HuBAzTS8X2OuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iNjFhMWMtYmE2Zi00MzI3LWJhY2Qt
ODk3MThlYmMzODQ3LzEvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9iNjFhMWMtYmE2Zi00MzI3LWJhY2QtODk3MThlYmMzODQ3
LzEvT2E2Q2hYUHpsQlA0QnJVZTRFRE5OTHhmWTY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUImbsXMT
hls316a3oHnMH9AMGIhSgKFdPn46VjvjL7LgAvpkMnGF0DlBCVx3Elow2dNqIKoq
vy7wOREiBCrZmzfLz3p1tefi3Q//3n/TRpnYeFqoOpi7oSf8JGK8jyU4CWtNWfzR
nCDf8C8mqPn5IeMmQ8o2ZmWSD/dH8lZmdZMA76yKcWjbsyDy40mDcaFB4IvfrbD9
QAJ+ymB1JH4Zkf8hKpiJMmklsDMrgUQedMyz7nNZL98qBQi875Rud4d8ssze8aiQ
ARXUT7ZpHecQybYT3jNgrTWLXMabkkV0gbEczHmc9EsoDJjKi8j5CL0nyF9ra1fm
HR4sYc3SSHUK1Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:28 2025 by rpki-client