Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
File: oej-6X2jZbZICCGxi-35_CNVOCY.mft (raw, json)
Hash identifier: JLX4SZZl+3Ijypg1CNmHqmde8GJHN25MFGImflEuCtk=
Subject key identifier: FD:E6:41:7A:3F:C8:33:14:14:48:E7:6E:74:85:47:F2:F8:63:31:B2
Authority key identifier: A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
Certificate issuer: /CN=a1e8fee97da365b6480821b18bedf9fc23553826
Certificate serial: 0194BCE093FDA0CBCA3275E0AAE478C09FD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
Manifest number: 0B10
Signing time: Fri 31 Jan 2025 15:00:22 +0000
Manifest this update: Fri 31 Jan 2025 15:00:22 +0000
Manifest next update: Sat 01 Feb 2025 15:00:22 +0000
Files and hashes: 1: 4DXia6r4DTEgUbfUdc0kmvwmm1Y.roa (hash: Z6UcUFwAm3cKPg0mR+/9vcq4H9MwUtI5vEk+Pz3XR3A=)
2: oej-6X2jZbZICCGxi-35_CNVOCY.crl (hash: ZQ+hTqMw7ElQ+0tv/WQWlK2jVs72ngjKImCWzufcPT4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:93:fd:a0:cb:ca:32:75:e0:aa:e4:78:c0:9f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1e8fee97da365b6480821b18bedf9fc23553826
Validity
Not Before: Jan 31 15:00:22 2025 GMT
Not After : Feb 1 15:00:22 2025 GMT
Subject: CN=fde6417a3fc833141448e76e748547f2f86331b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e1:bd:48:4f:7e:2e:f5:04:7c:bd:b1:34:25:
be:74:66:04:4d:3e:85:56:59:76:d6:93:fa:8f:f7:
80:08:d9:e9:cc:75:1a:f9:43:ce:af:3d:fa:d2:d9:
ba:39:f6:8b:93:70:5b:a7:6c:e0:de:e7:07:00:4e:
7f:fd:27:a9:47:3d:36:07:5d:67:cb:84:03:cc:ae:
ef:ec:9a:4c:2d:09:da:a6:6b:d9:f5:07:a5:35:ad:
e9:2a:e9:23:7c:db:76:4e:f0:05:16:e5:a4:c4:92:
28:78:e2:87:ef:7c:bc:a4:b0:99:81:e1:d9:73:4e:
54:d2:16:2f:01:14:92:68:7b:03:0b:d9:5a:35:04:
47:3f:26:e5:9b:ec:b5:84:bc:e1:b0:b8:15:6f:cf:
7a:3a:84:c1:e0:ef:80:24:82:a9:5b:1a:36:2c:f3:
17:28:d3:31:09:e6:54:e1:34:83:7a:4b:9f:c4:7c:
11:51:7e:25:47:20:31:45:c3:6d:96:25:36:07:0d:
6b:29:94:f1:7c:e6:7f:71:89:98:b1:70:7f:e1:85:
09:c0:8d:d6:15:2a:cc:fd:10:ea:ad:78:07:90:9b:
64:24:20:9b:88:04:55:28:60:4a:80:25:2a:b5:e3:
44:6e:8f:ee:74:40:fa:d6:1d:53:9a:57:3b:00:a3:
b6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E6:41:7A:3F:C8:33:14:14:48:E7:6E:74:85:47:F2:F8:63:31:B2
X509v3 Authority Key Identifier:
keyid:A1:E8:FE:E9:7D:A3:65:B6:48:08:21:B1:8B:ED:F9:FC:23:55:38:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oej-6X2jZbZICCGxi-35_CNVOCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9c72ae-8365-4f50-825e-f82137e00bc3/1/oej-6X2jZbZICCGxi-35_CNVOCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c7:af:fa:22:24:80:82:ee:ff:53:23:3a:37:b4:84:29:de:
ab:91:c3:0b:04:88:a0:f5:c3:47:ff:f3:1e:3e:1b:61:df:9c:
c3:b3:98:aa:27:43:71:f8:9d:a5:47:3a:7a:c6:f4:6d:ba:f6:
4d:d0:5a:ea:4d:45:35:76:44:e0:bb:bf:af:14:fb:b9:17:bf:
4d:a4:2f:67:36:4a:51:5b:aa:1f:8e:9b:eb:de:6b:95:50:9b:
61:35:19:c0:2c:ae:ef:9c:65:15:21:82:07:56:e1:d9:1f:11:
9f:7c:95:b7:8b:5d:ae:25:ea:e9:aa:97:52:4e:2e:49:c4:e1:
f1:20:23:3a:9c:d0:4b:42:fa:d2:94:65:00:b9:68:5b:be:6a:
58:b6:c7:79:56:b2:00:1c:4b:a3:f6:9f:87:0d:d9:3f:b2:65:
e5:f3:dc:9d:1d:4d:1c:05:c3:c0:36:ed:e2:8e:36:22:8a:80:
d8:b0:b2:cd:e9:8e:82:3a:83:a8:27:b1:a5:a9:64:0e:77:ba:
3a:5e:0a:f4:81:ec:20:01:1d:59:33:f3:68:22:6e:af:8e:4d:
ee:5f:23:1b:f9:77:dd:ed:1f:28:bb:90:ca:a5:49:e3:2e:dd:
22:93:e7:d6:e5:53:7d:0a:5a:3a:46:90:33:07:63:c4:78:1b:
4a:c7:ab:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JP9oMvKMnXgquR4wJ/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZThmZWU5N2RhMzY1YjY0ODA4MjFiMThiZWRmOWZjMjM1
NTM4MjYwHhcNMjUwMTMxMTUwMDIyWhcNMjUwMjAxMTUwMDIyWjAzMTEwLwYDVQQD
EyhmZGU2NDE3YTNmYzgzMzE0MTQ0OGU3NmU3NDg1NDdmMmY4NjMzMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOG9SE9+LvUEfL2xNCW+dGYETT6F
Vll21pP6j/eACNnpzHUa+UPOrz360tm6OfaLk3Bbp2zg3ucHAE5//SepRz02B11n
y4QDzK7v7JpMLQnapmvZ9QelNa3pKukjfNt2TvAFFuWkxJIoeOKH73y8pLCZgeHZ
c05U0hYvARSSaHsDC9laNQRHPyblm+y1hLzhsLgVb896OoTB4O+AJIKpWxo2LPMX
KNMxCeZU4TSDekufxHwRUX4lRyAxRcNtliU2Bw1rKZTxfOZ/cYmYsXB/4YUJwI3W
FSrM/RDqrXgHkJtkJCCbiARVKGBKgCUqteNEbo/udED61h1Tmlc7AKO2VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3mQXo/yDMUFEjnbnSFR/L4YzGyMB8GA1UdIwQY
MBaAFKHo/ul9o2W2SAghsYvt+fwjVTgmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUt
ZjgyMTM3ZTAwYmMzLzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85YzcyYWUtODM2NS00ZjUwLTgyNWUtZjgyMTM3ZTAwYmMz
LzEvb2VqLTZYMmpaYlpJQ0NHeGktMzVfQ05WT0NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWsev+iIk
gILu/1MjOje0hCneq5HDCwSIoPXDR//zHj4bYd+cw7OYqidDcfidpUc6esb0bbr2
TdBa6k1FNXZE4Lu/rxT7uRe/TaQvZzZKUVuqH46b695rlVCbYTUZwCyu75xlFSGC
B1bh2R8Rn3yVt4tdriXq6aqXUk4uScTh8SAjOpzQS0L60pRlALloW75qWLbHeVay
ABxLo/afhw3ZP7Jl5fPcnR1NHAXDwDbt4o42IoqA2LCyzemOgjqDqCexpalkDne6
Ol4K9IHsIAEdWTPzaCJur45N7l8jG/l33e0fKLuQyqVJ4y7dIpPn1uVTfQpaOkaQ
MwdjxHgbSserwg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:18 2025 by rpki-client