Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
File: oynU0nVy71pqbb7NeS7vmM6QcW0.mft (raw, json)
Hash identifier: /B8VEA4tuzdHgIrIU3lVGjhD6y/SHEushN2v9ff9UM8=
Subject key identifier: 19:30:30:CB:97:9D:D7:E2:6D:E5:42:E8:66:B9:B5:E4:35:1C:89:27
Authority key identifier: A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
Certificate issuer: /CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Certificate serial: 0194BCE0CE22670FE9DE4C8AF40AED67B79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:36 +0000
Manifest this update: Fri 31 Jan 2025 15:00:36 +0000
Manifest next update: Sat 01 Feb 2025 15:00:36 +0000
Files and hashes: 1: blse6v5EH2fVrElwGZmlrK99XJk.roa (hash: otAVsYT9s6hCs6g9uAr3ovy061yRH8/KdKxwyyD5qvk=)
2: oynU0nVy71pqbb7NeS7vmM6QcW0.crl (hash: WAm6fEcqy2h4nXf059V65sHIhm/rHYCwrZro3CIfaxs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:ce:22:67:0f:e9:de:4c:8a:f4:0a:ed:67:b7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a329d4d27572ef5a6a6dbecd792eef98ce90716d
Validity
Not Before: Jan 31 15:00:36 2025 GMT
Not After : Feb 1 15:00:36 2025 GMT
Subject: CN=193030cb979dd7e26de542e866b9b5e4351c8927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:41:d4:61:86:69:89:cd:b3:0a:54:f4:78:26:
f5:03:58:67:9b:f1:28:fc:15:b4:d3:fb:b0:13:10:
27:d4:ad:87:67:04:f8:0d:95:2f:e6:db:e7:e6:20:
f9:c3:d4:65:9d:e4:7e:b5:2d:e8:ab:81:1d:de:de:
a4:87:8c:93:ed:f6:a9:e0:37:bf:fd:7c:b7:2f:9c:
3a:c9:0c:4d:ed:31:68:3a:b0:72:ee:bf:31:4d:9a:
e6:9d:2e:1e:9f:4f:23:f0:92:d2:7e:93:d3:b4:4b:
73:03:a3:e3:de:46:11:53:91:7a:0b:88:82:0c:c3:
85:38:8f:d8:09:cf:4b:bb:fc:1c:2c:3f:28:01:e6:
9d:8b:a0:c8:ac:9a:8f:93:ac:36:6c:cd:75:25:e4:
1a:76:27:ee:52:a2:d3:45:63:5b:35:51:00:ee:8d:
e2:4c:0c:2f:4d:79:43:1f:d3:ba:39:11:d5:c7:27:
cd:7c:a7:58:11:d9:13:d1:77:2d:1a:66:ce:5d:3f:
be:7c:80:5e:02:ab:63:65:8f:c6:5a:67:cb:93:fa:
7c:02:0d:73:f1:de:a6:85:30:57:49:6f:54:4c:b3:
2a:04:b8:6c:7b:91:e9:71:0d:17:42:f4:06:de:32:
ec:3c:7b:a6:04:f5:1d:c5:34:7d:72:66:e5:05:ee:
4e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:30:30:CB:97:9D:D7:E2:6D:E5:42:E8:66:B9:B5:E4:35:1C:89:27
X509v3 Authority Key Identifier:
keyid:A3:29:D4:D2:75:72:EF:5A:6A:6D:BE:CD:79:2E:EF:98:CE:90:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oynU0nVy71pqbb7NeS7vmM6QcW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0f3d8a-a430-4b27-8f95-ee178578dcb5/1/oynU0nVy71pqbb7NeS7vmM6QcW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c3:c2:1f:59:d5:18:b8:1c:d0:6a:e7:15:c9:aa:44:6f:9b:
1a:eb:6c:a0:20:f2:27:0e:25:82:1b:90:0d:45:33:0d:04:92:
ec:02:ae:87:e7:b7:eb:99:53:c7:f3:99:7b:17:cb:35:19:cb:
55:ee:5f:b3:57:15:8b:3a:e0:e4:8f:91:8e:fd:3c:eb:87:39:
de:08:01:ee:43:8f:af:eb:0c:29:66:7e:8f:88:9a:7e:1b:85:
97:93:06:5d:6e:cd:3f:2f:50:b4:63:36:28:f9:77:38:ad:e2:
0d:3e:2b:45:43:f1:dd:3e:2a:26:62:ad:ab:7e:13:48:43:97:
0a:ed:29:a1:db:3b:77:35:e9:09:a5:1d:45:1a:db:9d:e1:f1:
93:e5:1c:8a:0b:62:88:92:34:80:4c:63:38:c7:b8:8e:8c:79:
9a:6a:fa:97:c6:59:f9:9c:34:58:13:63:e0:a8:6c:c1:ff:51:
60:18:95:e8:9e:97:0f:6b:5f:eb:88:c2:f2:c1:7e:80:96:9b:
01:3e:ba:f0:60:99:81:80:33:89:71:de:b6:bd:78:ab:d3:d2:
fb:c1:a9:31:2d:ae:11:1f:7b:9a:00:14:88:47:27:6f:fc:b4:
df:e8:5f:c6:51:c3:28:85:27:17:14:e4:ea:c2:c2:bc:b5:e7:
fa:e1:ad:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84M4iZw/p3kyK9ArtZ7ebMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMjlkNGQyNzU3MmVmNWE2YTZkYmVjZDc5MmVlZjk4Y2U5
MDcxNmQwHhcNMjUwMTMxMTUwMDM2WhcNMjUwMjAxMTUwMDM2WjAzMTEwLwYDVQQD
EygxOTMwMzBjYjk3OWRkN2UyNmRlNTQyZTg2NmI5YjVlNDM1MWM4OTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UHUYYZpic2zClT0eCb1A1hnm/Eo
/BW00/uwExAn1K2HZwT4DZUv5tvn5iD5w9RlneR+tS3oq4Ed3t6kh4yT7fap4De/
/Xy3L5w6yQxN7TFoOrBy7r8xTZrmnS4en08j8JLSfpPTtEtzA6Pj3kYRU5F6C4iC
DMOFOI/YCc9Lu/wcLD8oAeadi6DIrJqPk6w2bM11JeQadifuUqLTRWNbNVEA7o3i
TAwvTXlDH9O6ORHVxyfNfKdYEdkT0XctGmbOXT++fIBeAqtjZY/GWmfLk/p8Ag1z
8d6mhTBXSW9UTLMqBLhse5HpcQ0XQvQG3jLsPHumBPUdxTR9cmblBe5OjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkwMMuXndfibeVC6Ga5teQ1HIknMB8GA1UdIwQY
MBaAFKMp1NJ1cu9aam2+zXku75jOkHFtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3luVTBuVnk3MXBxYmI3TmVTN3ZtTTZRY1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wZjNkOGEtYTQzMC00YjI3LThmOTUt
ZWUxNzg1NzhkY2I1LzEvb3luVTBuVnk3MXBxYmI3TmVTN3ZtTTZRY1cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8wZjNkOGEtYTQzMC00YjI3LThmOTUtZWUxNzg1NzhkY2I1
LzEvb3luVTBuVnk3MXBxYmI3TmVTN3ZtTTZRY1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQsPCH1nV
GLgc0GrnFcmqRG+bGutsoCDyJw4lghuQDUUzDQSS7AKuh+e365lTx/OZexfLNRnL
Ve5fs1cVizrg5I+Rjv0864c53ggB7kOPr+sMKWZ+j4iafhuFl5MGXW7NPy9QtGM2
KPl3OK3iDT4rRUPx3T4qJmKtq34TSEOXCu0pods7dzXpCaUdRRrbneHxk+Ucigti
iJI0gExjOMe4jox5mmr6l8ZZ+Zw0WBNj4Khswf9RYBiV6J6XD2tf64jC8sF+gJab
AT668GCZgYAziXHetr14q9PS+8GpMS2uER97mgAUiEcnb/y03+hfxlHDKIUnFxTk
6sLCvLXn+uGtHg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:43 2025 by rpki-client