Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
File: OpNtLymObP1WYEVz0e-eDoKZtSk.mft (raw, json)
Hash identifier: BZcO/7MkkJF36rHBp7J0CQkQeW5iipVb7Yg351qirig=
Subject key identifier: BD:05:08:D1:66:FA:84:81:95:6F:0A:3A:C6:87:30:19:B0:5B:4C:FE
Authority key identifier: 3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
Certificate issuer: /CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Certificate serial: 0194BC72EB8D77F7856EBDD147ACD7BC82D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
Manifest number: 0CEE
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: OpNtLymObP1WYEVz0e-eDoKZtSk.crl (hash: Y4Q9hZSwC1QFKkj4+xCskK8ykB7amqLgvi44Up7fG54=)
2: T24Mb-6KOyII9Zj4ApmqBzXBKxg.roa (hash: l/FPlArXvYmwy1iwUTLkf9bdXt1EQpVFOKjPM76DwnU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:eb:8d:77:f7:85:6e:bd:d1:47:ac:d7:bc:82:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a936d2f298e6cfd56604573d1ef9e0e8299b529
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=bd0508d166fa8481956f0a3ac6873019b05b4cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:26:f2:e1:a8:a5:9d:2e:bd:09:ce:49:a6:
4f:81:04:5d:21:ef:51:6a:1f:f6:61:d2:98:71:2a:
c5:b2:4f:44:67:88:50:27:35:46:4f:71:6c:54:86:
bc:c3:d1:0c:3f:ff:3e:c8:27:74:50:95:8d:2e:dc:
1f:3a:71:15:e2:1c:c7:3f:59:ae:7d:f3:a2:cd:e9:
e5:11:bf:8c:1d:6b:53:6e:6b:89:d7:ec:4b:d4:48:
d8:36:dc:4b:43:4d:be:15:cd:89:b4:0f:e6:c3:c3:
60:06:1b:ee:0a:cb:07:12:b7:33:c5:48:9d:d0:9d:
e0:2f:a0:c8:95:c8:47:02:0b:1b:b1:29:17:3e:02:
37:44:cd:2e:2b:f4:76:f5:c0:d9:66:88:87:af:3d:
2a:43:c2:97:19:27:e9:4a:f0:ec:ef:2e:24:45:45:
60:7d:e5:4a:77:ff:7d:8f:1f:2f:79:7f:f0:37:f8:
5f:3a:8b:b4:04:4c:43:02:86:29:0d:b4:43:17:08:
7e:57:65:bc:53:87:bd:b3:ba:97:10:06:f9:bc:43:
79:32:25:f7:e9:e4:85:a7:58:bc:fa:ef:64:cf:7b:
52:88:1b:da:44:b9:c0:7a:92:da:86:86:10:0a:5e:
39:a6:a6:55:e1:d9:4a:28:4c:a0:d6:16:b1:aa:ac:
13:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:05:08:D1:66:FA:84:81:95:6F:0A:3A:C6:87:30:19:B0:5B:4C:FE
X509v3 Authority Key Identifier:
keyid:3A:93:6D:2F:29:8E:6C:FD:56:60:45:73:D1:EF:9E:0E:82:99:B5:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OpNtLymObP1WYEVz0e-eDoKZtSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/704973-1866-40d1-9a1d-b5f8ec0aad7c/1/OpNtLymObP1WYEVz0e-eDoKZtSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c2:73:6c:96:b6:86:b9:ed:c4:02:1c:f0:b9:4c:d5:d7:7f:
af:bb:03:09:cb:c8:c7:80:82:8f:e9:47:af:c0:92:89:d0:0b:
9c:cf:af:75:cb:9c:3f:f1:e2:9f:d5:1b:bc:1c:d3:8a:d5:2a:
4b:30:a6:0d:bd:9b:ea:1f:c2:a7:7e:7f:24:be:86:cb:fe:04:
70:68:24:ba:8a:c7:7a:7a:7c:93:cc:16:db:60:4f:7f:c5:c5:
3b:e9:46:e1:6c:b1:b3:11:b8:9d:a5:06:d9:2c:0b:f8:28:9a:
0a:ac:9d:93:7d:1e:e2:3e:ee:1f:dd:0d:5f:73:82:99:f6:65:
4f:a8:0c:bb:e0:56:fb:ea:50:26:81:15:d5:d0:d2:c6:7f:27:
55:30:ff:53:6d:78:f0:4b:6e:46:86:b3:54:04:91:73:4f:4f:
d9:fb:77:49:65:20:b3:93:0e:0e:e6:0d:09:50:af:8a:ce:20:
21:6f:68:44:6b:d1:73:ac:85:1e:0c:d7:9c:4f:be:2b:11:c2:
d4:3d:1a:b3:4d:d0:e4:c2:c1:62:5f:e3:9f:bb:65:78:ba:a4:
81:5c:cc:8b:60:b5:69:60:f5:27:f5:bb:44:28:3b:48:27:82:
fa:52:47:ed:09:21:41:83:f2:84:42:3a:84:fc:26:dd:62:98:
eb:06:94:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cuuNd/eFbr3RR6zXvILSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhOTM2ZDJmMjk4ZTZjZmQ1NjYwNDU3M2QxZWY5ZTBlODI5
OWI1MjkwHhcNMjUwMTMxMTMwMDM1WhcNMjUwMjAxMTMwMDM1WjAzMTEwLwYDVQQD
EyhiZDA1MDhkMTY2ZmE4NDgxOTU2ZjBhM2FjNjg3MzAxOWIwNWI0Y2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PUm8uGopZ0uvQnOSaZPgQRdIe9R
ah/2YdKYcSrFsk9EZ4hQJzVGT3FsVIa8w9EMP/8+yCd0UJWNLtwfOnEV4hzHP1mu
ffOizenlEb+MHWtTbmuJ1+xL1EjYNtxLQ02+Fc2JtA/mw8NgBhvuCssHErczxUid
0J3gL6DIlchHAgsbsSkXPgI3RM0uK/R29cDZZoiHrz0qQ8KXGSfpSvDs7y4kRUVg
feVKd/99jx8veX/wN/hfOou0BExDAoYpDbRDFwh+V2W8U4e9s7qXEAb5vEN5MiX3
6eSFp1i8+u9kz3tSiBvaRLnAepLahoYQCl45pqZV4dlKKEyg1haxqqwTpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL0FCNFm+oSBlW8KOsaHMBmwW0z+MB8GA1UdIwQY
MBaAFDqTbS8pjmz9VmBFc9Hvng6CmbUpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3BOdEx5bU9iUDFXWUVWejBlLWVEb0tadFNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy83MDQ5NzMtMTg2Ni00MGQxLTlhMWQt
YjVmOGVjMGFhZDdjLzEvT3BOdEx5bU9iUDFXWUVWejBlLWVEb0tadFNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy83MDQ5NzMtMTg2Ni00MGQxLTlhMWQtYjVmOGVjMGFhZDdj
LzEvT3BOdEx5bU9iUDFXWUVWejBlLWVEb0tadFNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8JzbJa2
hrntxAIc8LlM1dd/r7sDCcvIx4CCj+lHr8CSidALnM+vdcucP/Hin9UbvBzTitUq
SzCmDb2b6h/Cp35/JL6Gy/4EcGgkuorHenp8k8wW22BPf8XFO+lG4WyxsxG4naUG
2SwL+CiaCqydk30e4j7uH90NX3OCmfZlT6gMu+BW++pQJoEV1dDSxn8nVTD/U214
8EtuRoazVASRc09P2ft3SWUgs5MODuYNCVCvis4gIW9oRGvRc6yFHgzXnE++KxHC
1D0as03Q5MLBYl/jn7tleLqkgVzMi2C1aWD1J/W7RCg7SCeC+lJH7QkhQYPyhEI6
hPwm3WKY6waUwA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:07 2025 by rpki-client