Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft
File: oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft (raw, json)
Hash identifier: V9/illz0dXEtkL3NIz5d82StAqBlORYqHyCgah/WIDI=
Subject key identifier: 47:47:2A:4D:4D:C1:6D:B3:C1:73:39:AB:C8:59:90:5D:7C:78:86:CF
Authority key identifier: A0:A6:7E:06:B5:90:46:35:EB:4D:1C:91:C3:41:28:9F:59:AF:EA:A7
Certificate issuer: /CN=a0a67e06b5904635eb4d1c91c341289f59afeaa7
Certificate serial: 0194BBCE4759F898421424B8FD9B7970EB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: oKZ-BrWQRjXrTRyRw0Eon1mv6qc.crl (hash: LV7267jeXGiZMMwOY0lVRmnQLRE91D5ZJ3L0nyBQwMw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:47:59:f8:98:42:14:24:b8:fd:9b:79:70:eb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a67e06b5904635eb4d1c91c341289f59afeaa7
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=47472a4d4dc16db3c17339abc859905d7c7886cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:f4:54:0d:a8:57:33:92:96:96:2e:0f:ab:
61:fc:95:f1:6e:9c:81:9c:e2:8b:e4:92:50:3a:d3:
8f:0a:ba:e8:dd:1f:27:68:46:48:9b:66:6d:83:8e:
de:d7:1a:50:2b:ba:60:73:da:18:f2:87:93:cc:ab:
72:bd:2d:14:f1:6d:c3:3d:31:55:d1:38:07:7e:9d:
30:c4:24:c6:3f:12:ba:fa:ba:37:d0:e7:f8:55:f0:
9b:f6:39:ee:1e:16:b8:ed:2b:e0:66:b9:59:ea:8e:
9d:ba:2f:f3:bd:c1:e6:fc:3e:4d:c4:23:bd:80:6d:
cf:94:7c:33:10:f4:84:14:d5:7e:7e:47:ef:6d:23:
84:f4:af:ef:c9:cd:5a:4d:12:11:b1:24:86:a8:57:
b3:01:58:b5:15:66:0a:57:23:da:9a:14:a5:c8:6d:
13:07:f1:ce:9f:b9:13:ff:60:9d:5c:4a:9e:ad:ed:
e4:f2:24:27:42:f1:df:ba:2b:19:c0:4c:82:5b:a2:
0a:dc:66:bc:a6:a8:b6:62:71:d5:c4:ec:29:57:64:
7a:72:e2:b6:db:53:5c:92:c0:66:63:69:5c:4c:84:
3d:2c:ed:9d:41:7c:9e:a5:0f:5c:b0:c7:2a:02:08:
16:a0:c9:51:21:86:dd:c3:84:e6:dc:7d:7b:88:d8:
30:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:47:2A:4D:4D:C1:6D:B3:C1:73:39:AB:C8:59:90:5D:7C:78:86:CF
X509v3 Authority Key Identifier:
keyid:A0:A6:7E:06:B5:90:46:35:EB:4D:1C:91:C3:41:28:9F:59:AF:EA:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/05e1ac-e703-4f57-a91a-b0feb4f9319a/1/oKZ-BrWQRjXrTRyRw0Eon1mv6qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:05:e3:42:b8:0f:d6:34:39:92:00:16:40:1d:7d:12:bc:d3:
71:a7:6b:19:6e:89:82:8c:4a:90:5a:e2:14:17:63:74:1e:6b:
34:8f:26:57:44:c8:c5:99:b8:2b:9d:2b:bf:d6:f4:68:46:05:
cc:e8:fb:e2:04:9b:a9:64:29:30:ed:be:a1:51:99:f9:99:81:
a1:a2:fd:b3:b3:67:d1:3d:2d:60:8e:74:42:46:20:f3:64:8b:
f0:98:75:36:a1:46:66:3d:79:3a:8e:74:dc:0b:57:13:51:51:
e1:ee:9d:69:98:49:c4:13:9f:3d:9d:9d:04:44:06:9e:61:c8:
48:0c:12:9f:c1:32:fc:14:54:ea:36:47:70:f4:d5:93:85:33:
58:f9:48:b8:c8:95:49:42:68:46:45:f6:2a:0e:6c:e5:53:6d:
3d:a2:3c:fc:7b:fb:f8:a9:fc:0b:5b:45:5e:01:59:23:a7:f5:
3d:36:30:e5:bc:01:84:1f:72:6b:50:70:8a:60:d8:62:2a:f3:
ed:82:f5:cd:7a:5e:3f:77:a5:8d:06:3f:6a:14:7b:eb:2a:76:
df:09:70:1c:67:cd:28:87:6f:31:1e:c4:99:e4:d7:2b:2e:71:
db:10:08:29:5c:4e:39:50:a9:40:20:53:14:c8:2d:20:d0:6e:
6f:a4:a4:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zkdZ+JhCFCS4/Zt5cOuSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTY3ZTA2YjU5MDQ2MzVlYjRkMWM5MWMzNDEyODlmNTlh
ZmVhYTcwHhcNMjUwMTMxMTAwMDQ1WhcNMjUwMjAxMTAwMDQ1WjAzMTEwLwYDVQQD
Eyg0NzQ3MmE0ZDRkYzE2ZGIzYzE3MzM5YWJjODU5OTA1ZDdjNzg4NmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsln0VA2oVzOSlpYuD6th/JXxbpyB
nOKL5JJQOtOPCrro3R8naEZIm2Ztg47e1xpQK7pgc9oY8oeTzKtyvS0U8W3DPTFV
0TgHfp0wxCTGPxK6+ro30Of4VfCb9jnuHha47SvgZrlZ6o6dui/zvcHm/D5NxCO9
gG3PlHwzEPSEFNV+fkfvbSOE9K/vyc1aTRIRsSSGqFezAVi1FWYKVyPamhSlyG0T
B/HOn7kT/2CdXEqere3k8iQnQvHfuisZwEyCW6IK3Ga8pqi2YnHVxOwpV2R6cuK2
21NcksBmY2lcTIQ9LO2dQXyepQ9csMcqAggWoMlRIYbdw4Tm3H17iNgwlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdHKk1NwW2zwXM5q8hZkF18eIbPMB8GA1UdIwQY
MBaAFKCmfga1kEY1600ckcNBKJ9Zr+qnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0taLUJyV1FSalhyVFJ5UncwRW9uMW12NnFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8wNWUxYWMtZTcwMy00ZjU3LWE5MWEt
YjBmZWI0ZjkzMTlhLzEvb0taLUJyV1FSalhyVFJ5UncwRW9uMW12NnFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8wNWUxYWMtZTcwMy00ZjU3LWE5MWEtYjBmZWI0ZjkzMTlh
LzEvb0taLUJyV1FSalhyVFJ5UncwRW9uMW12NnFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwXjQrgP
1jQ5kgAWQB19ErzTcadrGW6JgoxKkFriFBdjdB5rNI8mV0TIxZm4K50rv9b0aEYF
zOj74gSbqWQpMO2+oVGZ+ZmBoaL9s7Nn0T0tYI50QkYg82SL8Jh1NqFGZj15Oo50
3AtXE1FR4e6daZhJxBOfPZ2dBEQGnmHISAwSn8Ey/BRU6jZHcPTVk4UzWPlIuMiV
SUJoRkX2Kg5s5VNtPaI8/Hv7+Kn8C1tFXgFZI6f1PTYw5bwBhB9ya1BwimDYYirz
7YL1zXpeP3eljQY/ahR76yp23wlwHGfNKIdvMR7EmeTXKy5x2xAIKVxOOVCpQCBT
FMgtINBub6Sklg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:56 2025 by rpki-client