Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
File: Oe6oRlUcbkGblH4NoQfuywBwQZo.mft (raw, json)
Hash identifier: HDKlDah5Mlxgbn92InK16bh4+tzg3sePyDzssBdt29Y=
Subject key identifier: 17:82:94:E3:94:47:C3:5D:C7:26:7A:05:2E:B4:9A:15:CB:A7:7C:CB
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 0194BCE0898EDB5F88B266A51A88097B309B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
Manifest number: 11AA
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: 2pNXf0uuaUo_v6geF9VahBwgrbc.roa (hash: yalFfTBWkYIk5wuNVfUk7Fs0lLBWm9jkqivyXm/tu/w=)
2: Oe6oRlUcbkGblH4NoQfuywBwQZo.crl (hash: YHeVbA2w0+xAuDXuFeyAD+mc3TrEqQbCpw8ltRJvLYM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:89:8e:db:5f:88:b2:66:a5:1a:88:09:7b:30:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=178294e39447c35dc7267a052eb49a15cba77ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:1a:9f:46:a1:c6:f0:63:df:b9:2b:4b:7a:
54:28:27:8a:51:33:cc:93:51:39:b4:b4:ba:86:99:
98:92:35:a2:f6:42:aa:1e:9c:0a:00:c1:24:e8:f4:
5e:87:0f:80:8c:b2:40:a5:b1:e4:73:b9:df:51:8f:
89:48:27:ed:c9:1d:c8:7f:97:d3:5c:ba:19:67:57:
de:c3:92:b0:48:d6:45:f1:ca:a6:2f:03:87:76:42:
56:5f:a1:98:e7:4f:85:0b:33:90:ae:79:d7:b3:04:
99:ae:42:01:6a:29:59:5f:ea:cf:d0:3d:af:93:c8:
81:ae:8e:29:c0:dc:c7:19:81:49:33:ec:fd:6e:d9:
ce:f4:53:66:90:ef:df:ad:be:84:35:1a:64:c7:05:
3f:e3:52:dd:2b:b5:3d:d1:55:3f:79:05:62:00:5a:
d7:21:77:4b:7d:25:87:94:3e:3d:2a:67:94:ff:5b:
1d:f7:e8:c4:e9:d6:9d:7e:5d:62:fe:28:cf:8e:41:
73:6a:ce:bb:53:73:bf:53:39:28:27:68:18:52:8d:
a2:78:44:47:83:e4:98:e6:86:56:46:b6:40:c4:28:
d2:c9:dd:36:13:a2:f3:55:37:89:d3:92:8b:bf:7b:
a1:7e:70:f8:08:7b:d7:4a:15:95:32:42:87:5d:c8:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:82:94:E3:94:47:C3:5D:C7:26:7A:05:2E:B4:9A:15:CB:A7:7C:CB
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bf:79:b4:df:88:f6:b6:a0:2b:d3:f5:8b:fd:7e:1e:b5:e8:
c3:48:90:d5:6a:7f:df:ca:f4:4b:8b:88:92:59:1a:36:1e:91:
20:11:9f:3e:d6:bd:8c:03:d2:65:40:49:73:d4:16:a9:ff:15:
95:fb:c0:01:6b:d0:3d:09:21:81:d9:29:cf:8b:53:d4:0d:00:
62:9c:db:ba:d3:02:46:ad:e1:1f:10:e8:8f:bc:dd:a8:91:46:
ca:87:ae:b3:ca:af:7e:17:24:11:81:0c:30:83:5d:23:32:b4:
a0:40:d4:33:e6:55:11:c1:b8:65:aa:65:07:83:80:a4:60:2f:
a9:30:cb:b3:e9:47:5a:bc:d5:72:a6:1e:2c:44:33:2b:aa:2b:
17:fc:f3:85:eb:13:8d:c7:8d:e2:c6:0b:5f:24:96:30:6c:af:
52:ae:b5:f4:2b:bf:2d:98:b2:07:9d:36:78:df:5a:db:f0:c6:
21:21:05:2e:d1:f7:0c:fb:0a:7e:99:d9:c1:bb:46:c0:d0:cf:
80:c0:53:21:ad:a2:94:39:1c:e0:52:4a:ad:17:1c:e5:20:fe:
5c:ed:c3:a4:0a:30:d6:25:ca:90:17:d2:55:ea:70:b5:10:90:
2e:41:f9:c8:21:c4:2b:c0:f1:a8:fd:43:dd:75:94:0c:78:70:
8d:2d:2c:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84ImO21+IsmalGogJezCbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZWVhODQ2NTUxYzZlNDE5Yjk0N2UwZGExMDdlZWNiMDA3
MDQxOWEwHhcNMjUwMTMxMTUwMDE5WhcNMjUwMjAxMTUwMDE5WjAzMTEwLwYDVQQD
EygxNzgyOTRlMzk0NDdjMzVkYzcyNjdhMDUyZWI0OWExNWNiYTc3Y2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArukan0ahxvBj37krS3pUKCeKUTPM
k1E5tLS6hpmYkjWi9kKqHpwKAMEk6PRehw+AjLJApbHkc7nfUY+JSCftyR3If5fT
XLoZZ1few5KwSNZF8cqmLwOHdkJWX6GY50+FCzOQrnnXswSZrkIBailZX+rP0D2v
k8iBro4pwNzHGYFJM+z9btnO9FNmkO/frb6ENRpkxwU/41LdK7U90VU/eQViAFrX
IXdLfSWHlD49KmeU/1sd9+jE6dadfl1i/ijPjkFzas67U3O/UzkoJ2gYUo2ieERH
g+SY5oZWRrZAxCjSyd02E6LzVTeJ05KLv3uhfnD4CHvXShWVMkKHXcgRbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeClOOUR8NdxyZ6BS60mhXLp3zLMB8GA1UdIwQY
MBaAFDnuqEZVHG5Bm5R+DaEH7ssAcEGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODIt
MjgzMWE0ODUwNjQ1LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODItMjgzMWE0ODUwNjQ1
LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc795tN+I
9ragK9P1i/1+HrXow0iQ1Wp/38r0S4uIklkaNh6RIBGfPta9jAPSZUBJc9QWqf8V
lfvAAWvQPQkhgdkpz4tT1A0AYpzbutMCRq3hHxDoj7zdqJFGyoeus8qvfhckEYEM
MINdIzK0oEDUM+ZVEcG4ZaplB4OApGAvqTDLs+lHWrzVcqYeLEQzK6orF/zzhesT
jceN4sYLXySWMGyvUq619Cu/LZiyB502eN9a2/DGISEFLtH3DPsKfpnZwbtGwNDP
gMBTIa2ilDkc4FJKrRcc5SD+XO3DpAow1iXKkBfSVepwtRCQLkH5yCHEK8DxqP1D
3XWUDHhwjS0s+g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:37:52 2025 by rpki-client