Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
File: OTe1pRVrXHL_wPnAtxBLsYjby7w.mft (raw, json)
Hash identifier: HpHwIMlL5QkoX74EIVo7zVgR4D+0gS11k8f22Qrv304=
Subject key identifier: 16:CE:8E:4D:6B:21:CD:23:E7:3A:41:91:AE:1F:AF:B0:36:2F:58:00
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 0194BCAA222A3AFD73834756E6CF85A09487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: OTe1pRVrXHL_wPnAtxBLsYjby7w.crl (hash: 37a8ir49xBBtyj2fXxWaa8ilByNmpYmWvshlwUAI1Bs=)
2: o1Ho1AoDVivcPIuSoHTiqdRiLsw.roa (hash: 2VRi6zWzRrWILpFGgvS4R1+SnUUqoGeAipP4Ra7rcD4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:22:2a:3a:fd:73:83:47:56:e6:cf:85:a0:94:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=16ce8e4d6b21cd23e73a4191ae1fafb0362f5800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:a4:6b:b4:60:a2:9b:3f:4f:b2:c7:54:d1:
67:d9:56:50:bf:84:12:85:47:ee:60:99:0a:e8:8d:
09:d9:7e:9e:e5:9d:25:a0:34:70:64:be:38:4b:a1:
ff:1c:39:f9:3e:cc:95:2c:39:53:37:e5:20:ae:5a:
83:ca:68:ab:f8:2f:86:aa:bd:54:1b:a4:ff:eb:c0:
3e:65:bf:c9:17:96:b9:4d:82:19:b2:7c:94:3d:b9:
0b:8e:6a:7c:6f:f7:8f:c3:0c:ea:3e:8d:63:2e:8b:
e2:d4:fb:4a:c7:84:82:bd:28:33:02:5f:b3:d5:f7:
86:6f:9f:9a:04:38:62:00:c9:3a:60:51:40:d9:07:
ba:60:51:32:13:02:06:5e:d3:9d:41:d3:0d:1b:13:
4d:48:d6:d7:d2:f2:f2:a4:d7:34:ce:47:3b:1a:f7:
14:a0:80:04:c0:44:6a:aa:94:01:2d:52:70:db:25:
ab:86:93:45:4b:f3:e0:e4:2e:73:27:f0:36:f1:5d:
1d:14:ca:69:9e:9f:9e:c9:f8:5e:d8:5a:33:d7:7c:
d3:09:31:c7:2f:4c:06:4b:98:df:97:e2:d9:8e:ee:
3f:22:9b:f5:63:e5:d2:55:c2:b7:06:22:74:4c:37:
b8:0b:e8:85:1e:b1:e3:79:c6:ab:96:4e:af:23:97:
34:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CE:8E:4D:6B:21:CD:23:E7:3A:41:91:AE:1F:AF:B0:36:2F:58:00
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0f:19:f2:ed:96:25:28:4c:f6:eb:de:d9:59:d9:af:76:8f:
10:fd:68:b2:9e:b8:ff:8e:e6:9d:06:a5:7e:dd:77:91:17:df:
42:d2:79:b3:4f:5f:67:f0:5a:09:65:db:3b:3d:c7:ea:6d:81:
76:25:45:28:f1:f6:65:f1:a6:c7:47:3f:d9:4f:c1:8a:2f:ec:
b0:7d:11:1b:43:cf:62:93:df:38:4b:74:40:1d:f9:89:5b:ff:
e6:30:d9:e6:16:34:41:85:23:83:45:3d:95:9c:7e:ce:3d:00:
69:2f:9f:f0:cd:39:8b:e8:2f:45:06:47:54:59:73:a9:06:de:
bb:33:6f:0a:57:6a:cd:f9:2a:0c:b9:ae:bc:13:e5:9f:ff:4e:
bf:4f:55:ac:ae:ca:90:f9:94:03:c9:bc:fa:f3:3a:5a:2b:fc:
d3:59:c7:b0:17:f2:45:69:a3:63:c8:71:e5:60:f0:4c:34:02:
d1:e4:ed:28:0f:b3:4b:ab:da:21:0f:a5:ba:9b:76:9a:0a:19:
76:04:96:9c:4e:9e:d4:0d:e8:92:5b:c9:bb:0e:dc:ba:0f:c9:
ef:49:de:32:25:c1:9a:ce:60:fa:45:74:73:dc:9f:30:12:6a:
b6:4d:51:00:1a:e8:9c:65:76:5b:89:c1:6f:e6:89:88:51:1c:
75:c6:7a:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qiIqOv1zg0dW5s+FoJSHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzdiNWE1MTU2YjVjNzJmZmMwZjljMGI3MTA0YmIxODhk
YmNiYmMwHhcNMjUwMTMxMTQwMDUzWhcNMjUwMjAxMTQwMDUzWjAzMTEwLwYDVQQD
EygxNmNlOGU0ZDZiMjFjZDIzZTczYTQxOTFhZTFmYWZiMDM2MmY1ODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOKka7Rgops/T7LHVNFn2VZQv4QS
hUfuYJkK6I0J2X6e5Z0loDRwZL44S6H/HDn5PsyVLDlTN+UgrlqDymir+C+Gqr1U
G6T/68A+Zb/JF5a5TYIZsnyUPbkLjmp8b/ePwwzqPo1jLovi1PtKx4SCvSgzAl+z
1feGb5+aBDhiAMk6YFFA2Qe6YFEyEwIGXtOdQdMNGxNNSNbX0vLypNc0zkc7GvcU
oIAEwERqqpQBLVJw2yWrhpNFS/Pg5C5zJ/A28V0dFMppnp+eyfhe2Foz13zTCTHH
L0wGS5jfl+LZju4/Ipv1Y+XSVcK3BiJ0TDe4C+iFHrHjecarlk6vI5c0DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbOjk1rIc0j5zpBka4fr7A2L1gAMB8GA1UdIwQY
MBaAFDk3taUVa1xy/8D5wLcQS7GI28u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTkt
ZGQxNDJhMTMzNWYwLzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTktZGQxNDJhMTMzNWYw
LzEvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgg8Z8u2W
JShM9uve2VnZr3aPEP1osp64/47mnQalft13kRffQtJ5s09fZ/BaCWXbOz3H6m2B
diVFKPH2ZfGmx0c/2U/Bii/ssH0RG0PPYpPfOEt0QB35iVv/5jDZ5hY0QYUjg0U9
lZx+zj0AaS+f8M05i+gvRQZHVFlzqQbeuzNvCldqzfkqDLmuvBPln/9Ov09VrK7K
kPmUA8m8+vM6Wiv801nHsBfyRWmjY8hx5WDwTDQC0eTtKA+zS6vaIQ+lupt2mgoZ
dgSWnE6e1A3oklvJuw7cug/J70neMiXBms5g+kV0c9yfMBJqtk1RABronGV2W4nB
b+aJiFEcdcZ6Hw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:02 2025 by rpki-client