Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
File: OEypWHqC_DdH9GngCUXZ1VhaNbI.mft (raw, json)
Hash identifier: hnQihd1MJnbTunfvM17tYZsiNP10DX0VwKl2Er773tc=
Subject key identifier: 6B:E4:03:C3:76:DA:33:E7:23:6A:CD:02:D2:8F:53:A4:3D:79:7F:0D
Authority key identifier: 38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
Certificate issuer: /CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Certificate serial: 0194BC3C844311A76D955A27ADAF0B87A255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
Manifest number: 67
Signing time: Fri 31 Jan 2025 12:01:10 +0000
Manifest this update: Fri 31 Jan 2025 12:01:10 +0000
Manifest next update: Sat 01 Feb 2025 12:01:10 +0000
Files and hashes: 1: OEypWHqC_DdH9GngCUXZ1VhaNbI.crl (hash: r/beoQtxaSJfIpOtPno1ai+ZEmNxFzDCva8ubJvKZW0=)
2: jI7_nEj5zlq6z4OVYNSKuGo62t4.roa (hash: i7/oTU3XFkI0q3JhGCgkgLONW91UlNaDNMBJ9HMnxlo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:84:43:11:a7:6d:95:5a:27:ad:af:0b:87:a2:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=384ca9587a82fc3747f469e00945d9d5585a35b2
Validity
Not Before: Jan 31 12:01:10 2025 GMT
Not After : Feb 1 12:01:10 2025 GMT
Subject: CN=6be403c376da33e7236acd02d28f53a43d797f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:b8:b8:05:bf:c6:4c:3e:42:f0:c3:df:18:
02:ec:37:89:02:cc:da:4e:f0:62:d4:68:a7:64:78:
90:ce:1a:69:9d:63:78:88:03:36:6f:c4:5b:d1:b4:
16:95:fb:db:9a:da:9b:f3:02:9c:3f:9d:a2:16:1f:
67:af:d6:44:c6:92:19:8e:5a:0d:ba:86:b4:d2:47:
53:86:01:d7:3d:63:3b:1f:27:c0:2f:5f:98:14:b6:
71:de:82:eb:98:a0:bd:e8:91:e3:8f:2a:32:7a:b7:
99:8c:86:2d:be:93:8e:66:cb:82:3f:88:1d:ba:4d:
a3:50:dd:55:de:2f:00:74:d7:a4:3f:1d:fa:d5:66:
81:69:c1:e6:5f:58:b2:e2:a1:04:d6:2c:f5:99:a8:
06:0b:a4:4f:b4:36:b8:2c:48:80:32:c7:7c:ec:7d:
ed:4b:eb:e3:b2:3d:24:fa:bb:a1:b6:d3:50:a3:09:
45:8f:f6:5d:13:04:2d:9b:72:7c:e4:1f:2a:57:4d:
3f:79:32:b1:6f:e3:b0:92:0b:de:5b:dd:6e:28:ba:
8c:d1:d0:3f:44:61:41:a2:d6:af:dd:8a:38:24:72:
53:b0:af:cc:7f:3d:74:2e:88:a4:7c:9f:42:a0:c6:
9c:44:29:c6:22:48:74:bc:cb:d3:13:34:a8:bf:0b:
a2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E4:03:C3:76:DA:33:E7:23:6A:CD:02:D2:8F:53:A4:3D:79:7F:0D
X509v3 Authority Key Identifier:
keyid:38:4C:A9:58:7A:82:FC:37:47:F4:69:E0:09:45:D9:D5:58:5A:35:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OEypWHqC_DdH9GngCUXZ1VhaNbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a19654-adec-4397-8eb0-17ad2f01c009/1/OEypWHqC_DdH9GngCUXZ1VhaNbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5d:14:71:d9:9c:0e:62:3d:0c:5f:ee:0c:09:99:47:ce:20:
8a:80:f2:42:f7:ec:36:8d:a6:c6:51:3f:91:c6:89:64:f6:3a:
1f:78:cf:7b:ed:d8:5b:da:99:d6:ad:15:ed:d2:79:9e:33:79:
78:ae:10:ca:12:e8:94:74:09:4a:fd:aa:98:52:1c:45:f1:d7:
ba:ce:b7:5a:03:eb:bc:53:2e:cd:bd:2e:e1:15:89:ee:37:3f:
52:5b:01:44:9f:ce:5d:db:83:e5:7c:e8:b0:51:d2:64:40:71:
24:9a:e7:c2:df:eb:07:3a:c4:da:bb:9e:b3:1e:d1:60:f7:4b:
3e:75:9f:64:bc:78:74:df:b2:d4:ec:e9:ac:9b:ac:e4:5f:1b:
74:92:0e:f0:43:d1:67:4e:9f:f0:4a:d1:8a:b1:99:5d:e8:f1:
d9:af:7b:cd:6d:f4:eb:f8:06:55:df:97:22:f6:cd:ac:4a:d5:
28:f5:57:f2:6e:15:df:a0:8a:ee:4f:3f:9c:b3:dd:2f:bb:56:
61:8c:5c:bf:04:5f:08:be:67:c7:53:a3:dd:df:5b:e0:04:2e:
77:13:f4:a4:6f:ab:b7:d6:20:24:77:b9:28:59:d9:54:be:39:
eb:1a:44:49:db:e1:71:d7:63:e2:b2:2e:c6:79:2f:d7:f3:b0:
78:b9:ae:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PIRDEadtlVonra8Lh6JVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NGNhOTU4N2E4MmZjMzc0N2Y0NjllMDA5NDVkOWQ1NTg1
YTM1YjIwHhcNMjUwMTMxMTIwMTEwWhcNMjUwMjAxMTIwMTEwWjAzMTEwLwYDVQQD
Eyg2YmU0MDNjMzc2ZGEzM2U3MjM2YWNkMDJkMjhmNTNhNDNkNzk3ZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUq4uAW/xkw+QvDD3xgC7DeJAsza
TvBi1GinZHiQzhppnWN4iAM2b8Rb0bQWlfvbmtqb8wKcP52iFh9nr9ZExpIZjloN
uoa00kdThgHXPWM7HyfAL1+YFLZx3oLrmKC96JHjjyoyereZjIYtvpOOZsuCP4gd
uk2jUN1V3i8AdNekPx361WaBacHmX1iy4qEE1iz1magGC6RPtDa4LEiAMsd87H3t
S+vjsj0k+ruhttNQowlFj/ZdEwQtm3J85B8qV00/eTKxb+OwkgveW91uKLqM0dA/
RGFBotav3Yo4JHJTsK/Mfz10LoikfJ9CoMacRCnGIkh0vMvTEzSovwuiAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvkA8N22jPnI2rNAtKPU6Q9eX8NMB8GA1UdIwQY
MBaAFDhMqVh6gvw3R/Rp4AlF2dVYWjWyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAt
MTdhZDJmMDFjMDA5LzEvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9hMTk2NTQtYWRlYy00Mzk3LThlYjAtMTdhZDJmMDFjMDA5
LzEvT0V5cFdIcUNfRGRIOUduZ0NVWFoxVmhhTmJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADl0Ucdmc
DmI9DF/uDAmZR84gioDyQvfsNo2mxlE/kcaJZPY6H3jPe+3YW9qZ1q0V7dJ5njN5
eK4QyhLolHQJSv2qmFIcRfHXus63WgPrvFMuzb0u4RWJ7jc/UlsBRJ/OXduD5Xzo
sFHSZEBxJJrnwt/rBzrE2ruesx7RYPdLPnWfZLx4dN+y1OzprJus5F8bdJIO8EPR
Z06f8ErRirGZXejx2a97zW306/gGVd+XIvbNrErVKPVX8m4V36CK7k8/nLPdL7tW
YYxcvwRfCL5nx1Oj3d9b4AQudxP0pG+rt9YgJHe5KFnZVL456xpESdvhcddj4rIu
xnkv1/OweLmuNg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:21:04 2025 by rpki-client