Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
File: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft (raw, json)
Hash identifier: DtJJk7NZfY8LUDJxh+g6nPupHRva/YN+sa4rLxo/WK0=
Subject key identifier: 12:E3:C6:45:3D:3C:0A:2D:D2:49:DB:BD:63:7A:78:4A:69:94:9D:08
Authority key identifier: 38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
Certificate issuer: /CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Certificate serial: 0194BCA9AD68C32714BED9246B98B0E9D29E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:24 +0000
Manifest this update: Fri 31 Jan 2025 14:00:24 +0000
Manifest next update: Sat 01 Feb 2025 14:00:24 +0000
Files and hashes: 1: OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl (hash: 4oqAwq3/Z9esXoEO8F6NaGCeQK060HFv0z4cvjurUs8=)
2: eMQhZAA1BBjlcx0eTkggms08VQo.roa (hash: xi+ujT09IBX2cdfgWniCY7aqnXMFDpXhE7QErRO6YQ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ad:68:c3:27:14:be:d9:24:6b:98:b0:e9:d2:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=385206ac08d840c28bf4ac56899f2a28f8fdccc5
Validity
Not Before: Jan 31 14:00:24 2025 GMT
Not After : Feb 1 14:00:24 2025 GMT
Subject: CN=12e3c6453d3c0a2dd249dbbd637a784a69949d08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:f9:e2:a8:1b:8e:ea:a0:21:c7:46:0b:90:
b1:f7:6b:f8:82:85:3a:39:ce:56:a4:7d:c7:ab:83:
ca:94:6b:fb:95:47:f4:6f:2c:7c:d5:8b:ae:f8:18:
9d:d1:7b:34:e9:9a:6b:13:45:74:c2:00:c3:9f:4d:
5c:41:30:fa:0b:f8:9f:94:8c:b5:81:74:ae:fd:3f:
1d:9d:b4:2c:a2:7e:67:b8:e4:97:ea:7c:eb:f6:8a:
93:a9:b4:9d:11:3f:4a:d2:18:af:50:de:02:5e:a2:
a4:2e:9c:42:9a:be:39:a4:73:5f:30:db:50:82:94:
a9:bd:fe:48:bd:1b:db:9b:34:a2:76:43:e2:3f:b8:
5e:3d:f4:c7:0b:ae:22:42:fa:83:ac:9a:2e:99:5c:
c2:93:0a:6a:20:2f:c8:a3:ab:e9:4e:94:85:4f:77:
12:1d:87:83:ab:c8:1f:bc:92:89:25:a9:e2:c2:68:
2f:ad:68:3e:98:a3:73:94:f4:7a:f9:e0:b4:34:ec:
b4:39:0a:56:25:50:15:85:e4:59:0f:84:bb:e6:14:
20:fb:50:ba:de:63:03:60:2e:d7:6a:dd:72:3e:a7:
3e:ed:e9:d0:d4:52:95:d6:31:37:35:9b:f8:3f:3c:
fd:96:6a:2e:c3:2e:85:a1:5f:b1:c3:39:5f:27:98:
29:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E3:C6:45:3D:3C:0A:2D:D2:49:DB:BD:63:7A:78:4A:69:94:9D:08
X509v3 Authority Key Identifier:
keyid:38:52:06:AC:08:D8:40:C2:8B:F4:AC:56:89:9F:2A:28:F8:FD:CC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f95969-67ef-408e-a743-e1eb79899242/1/OFIGrAjYQMKL9KxWiZ8qKPj9zMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ed:00:de:60:85:bf:37:9e:da:f2:b4:00:ff:03:d6:8d:75:
06:ee:04:ba:a0:9d:44:40:15:ee:75:6d:54:12:2c:d5:5f:87:
3b:6c:fa:6c:ca:aa:b8:9e:63:43:74:17:db:c3:c9:b8:64:21:
89:ef:6a:00:7d:e6:67:45:84:dd:e2:55:1c:51:55:11:3e:2a:
17:89:74:14:35:79:22:4d:f3:94:7a:6f:f4:f6:eb:1e:01:93:
da:af:f1:1d:ff:35:3e:e5:40:46:40:e4:83:7a:b5:de:cf:60:
e9:11:7c:3f:44:e3:5c:56:80:88:4c:8d:55:c9:10:d2:70:71:
33:d8:75:27:af:52:b4:ec:13:51:0d:f4:13:9b:ab:b7:5c:f8:
4b:d0:be:5b:40:a9:6e:87:f3:98:21:8c:d4:76:ff:6c:1b:2c:
78:34:8b:2a:b1:c0:8a:cb:22:bf:07:e0:a9:5a:0d:ef:bb:c6:
9f:3b:5a:98:2f:54:3d:e0:dd:d9:a6:4d:e3:d8:0e:f8:6b:c7:
45:04:6f:bd:8c:22:23:e3:5d:17:c7:9c:e5:d1:14:2d:dd:ab:
56:44:bb:d5:09:95:c1:28:57:b4:c5:48:33:45:81:52:da:ef:
42:72:3c:6e:44:b5:5d:11:4b:c7:7c:ef:22:ff:68:12:d7:4b:
f4:4e:9e:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qa1owycUvtkka5iw6dKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4NTIwNmFjMDhkODQwYzI4YmY0YWM1Njg5OWYyYTI4Zjhm
ZGNjYzUwHhcNMjUwMTMxMTQwMDI0WhcNMjUwMjAxMTQwMDI0WjAzMTEwLwYDVQQD
EygxMmUzYzY0NTNkM2MwYTJkZDI0OWRiYmQ2MzdhNzg0YTY5OTQ5ZDA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgH54qgbjuqgIcdGC5Cx92v4goU6
Oc5WpH3Hq4PKlGv7lUf0byx81Yuu+Bid0Xs06ZprE0V0wgDDn01cQTD6C/iflIy1
gXSu/T8dnbQson5nuOSX6nzr9oqTqbSdET9K0hivUN4CXqKkLpxCmr45pHNfMNtQ
gpSpvf5IvRvbmzSidkPiP7hePfTHC64iQvqDrJoumVzCkwpqIC/Io6vpTpSFT3cS
HYeDq8gfvJKJJaniwmgvrWg+mKNzlPR6+eC0NOy0OQpWJVAVheRZD4S75hQg+1C6
3mMDYC7Xat1yPqc+7enQ1FKV1jE3NZv4Pzz9lmouwy6FoV+xwzlfJ5gpKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLjxkU9PAot0knbvWN6eEpplJ0IMB8GA1UdIwQY
MBaAFDhSBqwI2EDCi/SsVomfKij4/czFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0ZJR3JBallRTUtMOUt4V2laOHFLUGo5ek1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mOTU5NjktNjdlZi00MDhlLWE3NDMt
ZTFlYjc5ODk5MjQyLzEvT0ZJR3JBallRTUtMOUt4V2laOHFLUGo5ek1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9mOTU5NjktNjdlZi00MDhlLWE3NDMtZTFlYjc5ODk5MjQy
LzEvT0ZJR3JBallRTUtMOUt4V2laOHFLUGo5ek1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIO0A3mCF
vzee2vK0AP8D1o11Bu4EuqCdREAV7nVtVBIs1V+HO2z6bMqquJ5jQ3QX28PJuGQh
ie9qAH3mZ0WE3eJVHFFVET4qF4l0FDV5Ik3zlHpv9PbrHgGT2q/xHf81PuVARkDk
g3q13s9g6RF8P0TjXFaAiEyNVckQ0nBxM9h1J69StOwTUQ30E5urt1z4S9C+W0Cp
bofzmCGM1Hb/bBsseDSLKrHAissivwfgqVoN77vGnztamC9UPeDd2aZN49gO+GvH
RQRvvYwiI+NdF8ec5dEULd2rVkS71QmVwShXtMVIM0WBUtrvQnI8bkS1XRFLx3zv
Iv9oEtdL9E6eUA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:27:21 2025 by rpki-client