Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.mft
File: oPedxcyv8VxqShP9qLcaj7drgow.mft (raw, json)
Hash identifier: kRS8Rl9+QXmiJudIrWogvRUsQ/tuQuwnE7706CdoIys=
Subject key identifier: D2:CB:00:C4:D6:C8:D5:26:95:A0:A7:61:BA:B6:1A:A5:2A:83:07:43
Authority key identifier: A0:F7:9D:C5:CC:AF:F1:5C:6A:4A:13:FD:A8:B7:1A:8F:B7:6B:82:8C
Certificate issuer: /CN=a0f79dc5ccaff15c6a4a13fda8b71a8fb76b828c
Certificate serial: 0194BBCE59041703DCEEDA55E02236A4060D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oPedxcyv8VxqShP9qLcaj7drgow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.mft
Manifest number: 0678
Signing time: Fri 31 Jan 2025 10:00:50 +0000
Manifest this update: Fri 31 Jan 2025 10:00:50 +0000
Manifest next update: Sat 01 Feb 2025 10:00:50 +0000
Files and hashes: 1: oPedxcyv8VxqShP9qLcaj7drgow.crl (hash: SjEs4mdMcHUChyDytvykq+4UqvxK0/Xc/bAqKBesUmg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:59:04:17:03:dc:ee:da:55:e0:22:36:a4:06:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0f79dc5ccaff15c6a4a13fda8b71a8fb76b828c
Validity
Not Before: Jan 31 10:00:50 2025 GMT
Not After : Feb 1 10:00:50 2025 GMT
Subject: CN=d2cb00c4d6c8d52695a0a761bab61aa52a830743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:d3:97:ec:05:21:95:42:06:83:b6:3b:54:
f7:49:f7:02:53:d4:a9:ff:ba:b5:14:cd:59:d6:d6:
b6:5d:31:35:72:63:20:0d:a3:a1:6b:27:f6:02:c2:
37:70:61:87:31:89:2d:03:85:13:9b:81:e9:a3:3f:
6d:27:5d:a9:63:43:4a:41:d3:03:0e:47:dd:89:91:
07:0d:dd:58:44:aa:64:75:e8:ac:51:00:f8:c4:f3:
e5:37:df:3d:35:e1:57:c3:89:81:ce:52:36:bf:e1:
59:af:38:1f:7e:f6:37:d3:06:8d:1c:f0:f0:ea:dd:
82:01:fc:cb:a8:cc:11:c2:9a:83:d5:03:8a:77:72:
bf:42:12:25:bf:35:1e:b7:b5:a3:be:9c:e0:7a:cf:
a0:62:ed:29:e8:e5:08:d3:93:58:6a:aa:93:4c:ee:
e2:47:d8:8e:a6:c7:e5:57:c0:c9:05:3f:18:ba:ad:
5a:ea:83:e2:9e:ab:59:9f:d3:bc:a8:6e:70:f5:8b:
17:61:0f:11:81:17:94:ed:93:51:46:83:68:a8:0b:
55:30:0b:f0:dd:cd:c9:a9:20:d7:53:19:7e:fe:89:
a8:dc:30:69:5a:22:81:e2:3c:8a:39:fa:82:84:fc:
fe:e0:ed:92:44:f0:13:58:b0:1e:f8:7f:2f:e5:d0:
18:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CB:00:C4:D6:C8:D5:26:95:A0:A7:61:BA:B6:1A:A5:2A:83:07:43
X509v3 Authority Key Identifier:
keyid:A0:F7:9D:C5:CC:AF:F1:5C:6A:4A:13:FD:A8:B7:1A:8F:B7:6B:82:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oPedxcyv8VxqShP9qLcaj7drgow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/f8787a-3197-4e51-997a-5affd558e022/1/oPedxcyv8VxqShP9qLcaj7drgow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:50:09:b8:22:f6:4f:68:86:b6:57:df:f0:1b:bc:ee:f0:5d:
b4:39:ad:db:1e:fb:4f:d3:58:68:27:46:9c:51:cc:15:6a:3c:
81:c5:60:74:d3:dc:fc:8a:37:22:83:33:c4:fb:a0:87:6f:99:
40:0b:12:d5:0c:e8:65:fc:ee:06:c1:b4:21:fe:20:06:fa:b8:
06:35:8e:91:4c:da:1b:61:d0:d8:ab:7d:ba:ac:ec:21:6f:d3:
af:ea:32:d4:66:cb:60:ae:22:43:ed:61:50:d5:04:18:48:c2:
75:57:d6:d7:cb:11:fb:8b:6a:87:a9:e3:76:98:dd:69:81:e1:
a5:7d:74:45:81:54:f9:43:2f:7d:0f:98:d0:e4:8d:96:72:d5:
ba:25:d2:82:91:e9:2e:cc:de:f8:b3:42:fa:24:68:46:b9:36:
d0:f9:53:64:6e:5c:a1:45:63:c0:48:92:a0:3e:44:03:2e:d1:
e0:a0:d5:e5:3a:f2:e8:3b:14:69:e0:ae:14:3c:6a:69:08:69:
42:e0:d2:56:8c:48:08:d1:0e:53:6c:a8:04:ad:31:9d:6b:dd:
6a:bd:42:7f:2e:31:74:d7:ab:70:fa:95:fe:04:a0:e9:cb:b1:
f1:22:6e:49:3a:a1:5b:4e:ac:1b:8e:f4:52:ec:ec:3d:64:82:
5e:f9:1a:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zlkEFwPc7tpV4CI2pAYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZjc5ZGM1Y2NhZmYxNWM2YTRhMTNmZGE4YjcxYThmYjc2
YjgyOGMwHhcNMjUwMTMxMTAwMDUwWhcNMjUwMjAxMTAwMDUwWjAzMTEwLwYDVQQD
EyhkMmNiMDBjNGQ2YzhkNTI2OTVhMGE3NjFiYWI2MWFhNTJhODMwNzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJjTl+wFIZVCBoO2O1T3SfcCU9Sp
/7q1FM1Z1ta2XTE1cmMgDaOhayf2AsI3cGGHMYktA4UTm4Hpoz9tJ12pY0NKQdMD
DkfdiZEHDd1YRKpkdeisUQD4xPPlN989NeFXw4mBzlI2v+FZrzgffvY30waNHPDw
6t2CAfzLqMwRwpqD1QOKd3K/QhIlvzUet7Wjvpzges+gYu0p6OUI05NYaqqTTO7i
R9iOpsflV8DJBT8Yuq1a6oPinqtZn9O8qG5w9YsXYQ8RgReU7ZNRRoNoqAtVMAvw
3c3JqSDXUxl+/omo3DBpWiKB4jyKOfqChPz+4O2SRPATWLAe+H8v5dAYDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNLLAMTWyNUmlaCnYbq2GqUqgwdDMB8GA1UdIwQY
MBaAFKD3ncXMr/FcakoT/ai3Go+3a4KMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1BlZHhjeXY4VnhxU2hQOXFMY2FqN2RyZ293LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mODc4N2EtMzE5Ny00ZTUxLTk5N2Et
NWFmZmQ1NThlMDIyLzEvb1BlZHhjeXY4VnhxU2hQOXFMY2FqN2RyZ293Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9mODc4N2EtMzE5Ny00ZTUxLTk5N2EtNWFmZmQ1NThlMDIy
LzEvb1BlZHhjeXY4VnhxU2hQOXFMY2FqN2RyZ293LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWFAJuCL2
T2iGtlff8Bu87vBdtDmt2x77T9NYaCdGnFHMFWo8gcVgdNPc/Io3IoMzxPugh2+Z
QAsS1QzoZfzuBsG0If4gBvq4BjWOkUzaG2HQ2Kt9uqzsIW/Tr+oy1GbLYK4iQ+1h
UNUEGEjCdVfW18sR+4tqh6njdpjdaYHhpX10RYFU+UMvfQ+Y0OSNlnLVuiXSgpHp
Lsze+LNC+iRoRrk20PlTZG5coUVjwEiSoD5EAy7R4KDV5Try6DsUaeCuFDxqaQhp
QuDSVoxICNEOU2yoBK0xnWvdar1Cfy4xdNercPqV/gSg6cux8SJuSTqhW06sG470
UuzsPWSCXvka+g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:35 2025 by rpki-client