Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
File: O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft (raw, json)
Hash identifier: Xhkrcs92VMD/g/dxH6oegBOmhCzSUZusMb7BQu3xIfc=
Subject key identifier: 6D:6E:11:78:88:BC:98:45:7C:14:F8:90:B2:F2:39:AE:00:1F:BA:B1
Authority key identifier: 3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
Certificate issuer: /CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Certificate serial: 0194BC732B7DF979BC2FAB2CF159C9BDE2E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:51 +0000
Manifest this update: Fri 31 Jan 2025 13:00:51 +0000
Manifest next update: Sat 01 Feb 2025 13:00:51 +0000
Files and hashes: 1: O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl (hash: 370uMgZ+v2zjA7EPpiixCMtor5sy2TBtQFXVDqkgtSU=)
2: jMpUEgHSZf2qOszwtc711nMPkbs.roa (hash: KVxroJGfZ6IooHrXhz1nFqpU1SJ2R+pcxgHHc+ctJ6Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:2b:7d:f9:79:bc:2f:ab:2c:f1:59:c9:bd:e2:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b94a1d881dd4beb2fd31b76fa0d5d585a9b238f
Validity
Not Before: Jan 31 13:00:51 2025 GMT
Not After : Feb 1 13:00:51 2025 GMT
Subject: CN=6d6e117888bc98457c14f890b2f239ae001fbab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:71:af:06:d7:66:14:1a:18:52:bf:e9:05:
43:a4:7c:b3:72:e7:97:c6:1e:a4:c8:8b:d6:a7:9a:
e3:4f:ed:41:85:e1:5f:6b:a4:81:c6:d3:ff:35:73:
26:f0:9e:73:12:a3:21:6f:93:90:d7:d6:c6:1d:a3:
bf:0c:a5:80:00:e4:52:aa:2f:61:da:2f:f5:e5:ea:
8e:9f:08:93:33:b9:8d:89:a0:df:1b:c5:31:5f:b4:
8f:15:85:87:66:bd:50:e0:ce:ff:12:dc:a8:7d:49:
78:87:f2:12:d0:ca:cc:7a:47:75:d1:dd:55:0a:76:
96:9f:e6:ea:a8:e9:ea:c5:b7:2a:e6:17:a0:8e:dc:
46:e3:7a:16:e7:06:1b:a7:61:e9:94:4c:0f:be:a6:
f2:84:4b:20:34:32:09:bb:19:fb:30:f7:30:43:b2:
da:05:ef:7d:7c:e3:bc:b6:40:0b:b6:99:78:e7:74:
46:66:e0:b5:1e:fb:fa:3f:58:e6:fe:9c:cf:28:ae:
4d:cd:7f:29:60:d9:67:ed:b1:72:7e:57:23:b7:45:
9d:47:d3:8f:be:cf:04:43:c7:86:f6:71:4f:22:73:
8c:fe:d5:95:84:69:01:0b:7e:22:17:48:2b:37:80:
66:f8:5d:2e:55:f7:80:ab:ad:c3:ee:85:23:5b:a1:
73:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6E:11:78:88:BC:98:45:7C:14:F8:90:B2:F2:39:AE:00:1F:BA:B1
X509v3 Authority Key Identifier:
keyid:3B:94:A1:D8:81:DD:4B:EB:2F:D3:1B:76:FA:0D:5D:58:5A:9B:23:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5Sh2IHdS-sv0xt2-g1dWFqbI48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7c6b2d-ac42-487e-9c19-1618776bdaae/1/O5Sh2IHdS-sv0xt2-g1dWFqbI48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:8c:18:17:01:40:b4:28:fe:a7:ff:d1:85:3c:cf:69:67:2b:
a9:66:3b:44:60:e2:15:ea:63:20:da:36:a2:35:96:d7:5a:c9:
d3:c2:f8:55:20:a4:aa:cb:21:e3:8a:d7:c9:61:20:b8:e5:04:
c6:25:f1:bd:76:51:b0:40:f1:74:40:f7:8f:05:69:a2:70:c7:
c2:98:cd:7a:b8:a8:34:00:43:6f:1a:1e:7f:d4:b1:a0:b9:79:
4a:85:d5:c6:9f:c6:ac:65:27:9f:2e:c5:f8:ed:e2:ba:73:9b:
36:9f:17:3d:17:c6:ad:2f:dd:c7:16:9c:98:23:e4:74:e6:41:
ba:4e:03:5e:fa:03:a7:50:ae:da:ec:9f:fa:45:4b:62:c0:76:
46:6a:cf:43:5b:66:22:0b:c9:30:f5:16:f0:31:57:61:b8:b0:
f1:2e:cd:12:e6:41:56:42:1f:93:f8:99:42:86:e3:fb:39:67:
f1:03:5a:b3:02:b2:ce:c7:63:89:ec:e0:67:9a:e3:d6:2c:31:
91:fc:3d:7f:1a:db:f6:40:00:a0:d9:6f:a5:76:57:b1:92:d3:
6e:4d:1a:1a:18:81:91:d4:6d:3d:61:23:b6:8a:0d:04:5b:ea:
4c:4a:17:64:42:9d:25:66:7b:dc:75:2c:25:37:ab:94:3d:6f:
30:88:80:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cyt9+Xm8L6ss8VnJveLpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOTRhMWQ4ODFkZDRiZWIyZmQzMWI3NmZhMGQ1ZDU4NWE5
YjIzOGYwHhcNMjUwMTMxMTMwMDUxWhcNMjUwMjAxMTMwMDUxWjAzMTEwLwYDVQQD
Eyg2ZDZlMTE3ODg4YmM5ODQ1N2MxNGY4OTBiMmYyMzlhZTAwMWZiYWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCNxrwbXZhQaGFK/6QVDpHyzcueX
xh6kyIvWp5rjT+1BheFfa6SBxtP/NXMm8J5zEqMhb5OQ19bGHaO/DKWAAORSqi9h
2i/15eqOnwiTM7mNiaDfG8UxX7SPFYWHZr1Q4M7/EtyofUl4h/IS0MrMekd10d1V
CnaWn+bqqOnqxbcq5hegjtxG43oW5wYbp2HplEwPvqbyhEsgNDIJuxn7MPcwQ7La
Be99fOO8tkALtpl453RGZuC1Hvv6P1jm/pzPKK5NzX8pYNln7bFyflcjt0WdR9OP
vs8EQ8eG9nFPInOM/tWVhGkBC34iF0grN4Bm+F0uVfeAq63D7oUjW6FzfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1uEXiIvJhFfBT4kLLyOa4AH7qxMB8GA1UdIwQY
MBaAFDuUodiB3UvrL9MbdvoNXVhamyOPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTkt
MTYxODc3NmJkYWFlLzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS83YzZiMmQtYWM0Mi00ODdlLTljMTktMTYxODc3NmJkYWFl
LzEvTzVTaDJJSGRTLXN2MHh0Mi1nMWRXRnFiSTQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIwYFwFA
tCj+p//RhTzPaWcrqWY7RGDiFepjINo2ojWW11rJ08L4VSCkqssh44rXyWEguOUE
xiXxvXZRsEDxdED3jwVponDHwpjNerioNABDbxoef9SxoLl5SoXVxp/GrGUnny7F
+O3iunObNp8XPRfGrS/dxxacmCPkdOZBuk4DXvoDp1Cu2uyf+kVLYsB2RmrPQ1tm
IgvJMPUW8DFXYbiw8S7NEuZBVkIfk/iZQobj+zln8QNaswKyzsdjiezgZ5rj1iwx
kfw9fxrb9kAAoNlvpXZXsZLTbk0aGhiBkdRtPWEjtooNBFvqTEoXZEKdJWZ73HUs
JTerlD1vMIiAqw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:23 2025 by rpki-client