Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
File: OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft (raw, json)
Hash identifier: UGa+ZgYghFoyMvDFrQ+xOVYcVvX51+Xt6jiwb+9nBR4=
Subject key identifier: 95:B9:CB:B4:61:AF:A1:9A:91:E3:4F:A9:E8:6B:69:02:4C:E5:4F:D9
Authority key identifier: 38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58
Certificate issuer: /CN=386ab970bfb6947597e97cefb916ec76a0c56858
Certificate serial: 0194BCE061306391D2BF3C4CB14AE19AB871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: I01Lo7qwhvaLI2U54ucZ10pkExs.roa (hash: mTrGRc4f1Skt/0lHfZ3XZbVEvrQ9mBUuWZXJpIXORz4=)
2: OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl (hash: T616MQqJIRAndWm9AYozKhhfxs+w9YFLJ8vN2koXrGk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:61:30:63:91:d2:bf:3c:4c:b1:4a:e1:9a:b8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=386ab970bfb6947597e97cefb916ec76a0c56858
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=95b9cbb461afa19a91e34fa9e86b69024ce54fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:48:0f:5f:7b:71:96:ca:f1:7f:7a:f0:28:d1:
7d:00:5d:93:4b:0a:30:d4:38:8b:e9:38:ee:00:f8:
bd:6c:0a:72:ff:d9:b0:56:9c:d1:87:77:dd:dc:0e:
fc:f1:40:9f:e9:33:ee:92:98:5c:a8:22:72:4b:a6:
a0:09:71:b6:de:b2:75:5c:2a:1c:8e:e7:25:16:2d:
b8:9e:00:69:98:74:2a:99:12:4d:20:b7:30:bf:fe:
77:d2:19:d3:9e:f7:84:86:9d:d1:58:02:c3:f7:77:
c9:2f:01:21:0c:25:11:2c:b6:b8:da:5e:d4:35:29:
1b:7c:86:7e:f5:2e:5e:19:19:54:45:49:ae:7b:54:
02:9b:8c:85:ec:ef:5c:da:28:75:4e:5a:86:82:a1:
12:89:70:0b:31:a2:2f:33:19:3c:60:54:1a:d6:fb:
2a:d3:94:70:b1:d9:40:d9:94:4e:54:1d:ee:cf:c8:
10:59:52:85:d0:f7:f4:1b:5e:31:04:8f:98:b8:3a:
6a:0c:ac:eb:45:43:3a:9f:d9:23:11:e3:17:69:f6:
a1:89:e2:36:fa:2e:52:54:c0:7e:7b:c0:96:7d:ce:
a6:a6:f4:8f:02:40:4f:83:05:fb:9d:f2:d8:ad:69:
fc:7f:a4:3a:68:2c:77:cd:a8:0d:4a:37:3d:c6:13:
5f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:B9:CB:B4:61:AF:A1:9A:91:E3:4F:A9:E8:6B:69:02:4C:E5:4F:D9
X509v3 Authority Key Identifier:
keyid:38:6A:B9:70:BF:B6:94:75:97:E9:7C:EF:B9:16:EC:76:A0:C5:68:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OGq5cL-2lHWX6XzvuRbsdqDFaFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/41fda9-9702-458d-982f-8d11257d4af6/1/OGq5cL-2lHWX6XzvuRbsdqDFaFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:b1:2d:48:10:f7:02:ba:0b:7e:05:a9:6a:7e:d7:49:16:6a:
d1:01:56:6e:cf:36:44:24:af:c8:19:82:df:b9:f9:9c:42:a3:
06:36:fe:aa:5a:76:63:bd:2a:05:7d:71:b1:21:1c:ea:f3:86:
79:87:88:25:8d:33:3f:6e:af:84:38:2b:9f:5b:a4:60:37:bd:
e3:75:84:49:f0:18:12:5e:6d:e9:9d:11:fb:09:ed:2b:50:83:
ee:57:26:bf:71:1d:7b:51:34:25:71:da:a1:12:84:37:9f:0b:
9e:97:fa:5e:ec:80:1f:0f:f0:11:ec:85:fc:43:60:01:b6:79:
ff:c2:0b:75:6e:b0:45:ea:f4:7a:2b:46:5c:42:ef:60:20:fe:
29:4c:1d:5a:29:07:0d:a5:c6:ce:fc:a1:3c:2d:34:c5:36:de:
7b:f4:ef:16:f1:8f:fe:33:bc:f3:84:c8:e2:5a:df:c4:43:3d:
eb:a5:8e:78:0f:5b:a5:c5:3f:5d:e5:dc:53:cc:96:3d:13:5c:
88:64:0c:33:d0:d0:3b:a9:0c:ee:da:f3:7b:15:56:5b:43:83:
60:25:18:ef:b7:bc:c4:26:e9:d4:6b:49:49:16:a6:89:35:21:
d8:59:fb:97:b9:94:7f:df:66:47:4e:bc:8e:e6:b8:40:33:44:
e2:43:63:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84GEwY5HSvzxMsUrhmrhxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NmFiOTcwYmZiNjk0NzU5N2U5N2NlZmI5MTZlYzc2YTBj
NTY4NTgwHhcNMjUwMTMxMTUwMDA4WhcNMjUwMjAxMTUwMDA4WjAzMTEwLwYDVQQD
Eyg5NWI5Y2JiNDYxYWZhMTlhOTFlMzRmYTllODZiNjkwMjRjZTU0ZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EgPX3txlsrxf3rwKNF9AF2TSwow
1DiL6TjuAPi9bApy/9mwVpzRh3fd3A788UCf6TPukphcqCJyS6agCXG23rJ1XCoc
juclFi24ngBpmHQqmRJNILcwv/530hnTnveEhp3RWALD93fJLwEhDCURLLa42l7U
NSkbfIZ+9S5eGRlURUmue1QCm4yF7O9c2ih1TlqGgqESiXALMaIvMxk8YFQa1vsq
05RwsdlA2ZROVB3uz8gQWVKF0Pf0G14xBI+YuDpqDKzrRUM6n9kjEeMXafahieI2
+i5SVMB+e8CWfc6mpvSPAkBPgwX7nfLYrWn8f6Q6aCx3zagNSjc9xhNfEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJW5y7Rhr6GakeNPqehraQJM5U/ZMB8GA1UdIwQY
MBaAFDhquXC/tpR1l+l877kW7HagxWhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC80MWZkYTktOTcwMi00NThkLTk4MmYt
OGQxMTI1N2Q0YWY2LzEvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC80MWZkYTktOTcwMi00NThkLTk4MmYtOGQxMTI1N2Q0YWY2
LzEvT0dxNWNMLTJsSFdYNlh6dnVSYnNkcURGYUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbEtSBD3
AroLfgWpan7XSRZq0QFWbs82RCSvyBmC37n5nEKjBjb+qlp2Y70qBX1xsSEc6vOG
eYeIJY0zP26vhDgrn1ukYDe943WESfAYEl5t6Z0R+wntK1CD7lcmv3Ede1E0JXHa
oRKEN58Lnpf6XuyAHw/wEeyF/ENgAbZ5/8ILdW6wRer0eitGXELvYCD+KUwdWikH
DaXGzvyhPC00xTbee/TvFvGP/jO884TI4lrfxEM966WOeA9bpcU/XeXcU8yWPRNc
iGQMM9DQO6kM7trzexVWW0ODYCUY77e8xCbp1GtJSRamiTUh2Fn7l7mUf99mR068
jua4QDNE4kNjYg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:23:34 2025 by rpki-client