Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft
File: Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft (raw, json)
Hash identifier: Q20wn0IsXPceuyBJjIKtOWP+/byCsDo8oB4QMmP624c=
Subject key identifier: E9:45:95:82:66:4A:1C:E2:FB:FD:91:4C:10:E7:55:38:7D:E3:BB:1A
Authority key identifier: 39:CD:1D:5B:B8:89:58:C6:9C:BD:DE:90:A9:E0:56:B4:8C:4F:AB:F8
Certificate issuer: /CN=39cd1d5bb88958c69cbdde90a9e056b48c4fabf8
Certificate serial: 0194BBCE32230E180B64F15E2819C664B0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oc0dW7iJWMacvd6QqeBWtIxPq_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: Oc0dW7iJWMacvd6QqeBWtIxPq_g.crl (hash: AqKzMNe322acpW2s7W6iFj+m2CFF0HDZ4ZqGvh3AUUQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:32:23:0e:18:0b:64:f1:5e:28:19:c6:64:b0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39cd1d5bb88958c69cbdde90a9e056b48c4fabf8
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=e9459582664a1ce2fbfd914c10e755387de3bb1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:99:f6:cf:ba:de:0e:c7:62:0c:9e:fd:2a:
d6:c6:15:e1:eb:08:f1:2f:99:0a:c8:ac:81:15:af:
f8:80:32:30:42:a0:7b:87:bb:04:d4:78:c8:d8:f7:
b0:52:0b:c9:97:fe:1b:7d:88:7b:05:58:24:0e:76:
50:f7:42:2c:61:f8:e5:bf:f9:61:fa:1e:65:91:a7:
32:07:2c:18:92:c6:9c:da:42:5b:29:a9:09:e8:e4:
93:11:7b:5e:a5:3e:6a:05:77:1c:9b:85:7d:8b:e7:
ac:86:6a:8e:88:f4:30:bd:35:fe:ec:9b:2f:c4:15:
97:2f:ba:5f:9b:95:65:8d:c1:1e:ac:8d:4f:8e:28:
dd:93:0e:bf:0a:7e:f5:61:41:bc:57:7a:f1:40:12:
3d:b0:9b:35:75:e0:44:5f:26:9d:15:54:97:08:02:
76:29:31:77:b7:29:ba:ab:89:67:eb:d8:d6:4b:9e:
6d:9e:c8:8e:80:9c:8b:1b:ba:2f:20:1a:7c:89:b2:
1d:8c:48:61:f6:5e:70:39:4d:e0:47:ab:ee:2c:77:
39:ef:6e:45:c6:9d:46:1b:91:c7:ea:ca:33:89:ae:
67:6a:e5:51:93:69:12:e0:81:6e:64:fb:58:71:60:
24:a7:0c:94:55:1b:46:83:e7:e8:6c:3a:78:b1:2b:
40:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:45:95:82:66:4A:1C:E2:FB:FD:91:4C:10:E7:55:38:7D:E3:BB:1A
X509v3 Authority Key Identifier:
keyid:39:CD:1D:5B:B8:89:58:C6:9C:BD:DE:90:A9:E0:56:B4:8C:4F:AB:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oc0dW7iJWMacvd6QqeBWtIxPq_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/57ac7f-f5c8-40ff-825c-46a85a28e749/1/Oc0dW7iJWMacvd6QqeBWtIxPq_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:49:24:43:1f:a4:67:85:eb:00:da:d4:ef:28:c8:98:87:0f:
88:66:33:f6:f3:91:54:7c:eb:5b:9f:ed:ed:3a:24:5f:69:51:
cf:30:1b:5c:18:4f:92:8a:e9:9b:19:83:fc:2d:6c:ba:f6:76:
6b:73:11:00:74:81:5c:61:01:f9:e9:45:2f:b9:4a:d5:98:ae:
ee:7d:86:40:cf:b8:87:11:6b:85:fc:bd:e4:19:a7:b0:db:b3:
f9:38:d9:74:aa:31:31:08:6c:ca:d9:6f:83:7d:3f:43:4e:c1:
a5:54:6c:98:50:8e:51:c5:87:69:1e:14:e1:d9:13:a9:bf:08:
55:6e:3f:70:e9:ef:3f:6b:63:6c:fb:3b:f1:7a:c5:55:47:c0:
81:74:5f:a0:d8:0d:10:6c:8e:e5:dc:e5:42:79:4d:48:52:a1:
31:89:dd:ba:76:c9:e3:62:94:e1:da:38:1c:39:0e:e4:90:db:
64:02:37:b6:6f:09:66:13:e5:75:78:68:5d:4f:96:17:9a:a9:
52:22:a6:ea:a7:c4:a4:ae:94:11:8d:c5:15:9b:8a:7e:1c:fe:
28:53:6b:c0:4e:63:f1:61:3e:1c:2e:59:13:28:6a:ff:8f:e5:
84:08:24:d6:69:fe:ba:80:02:10:f3:94:b3:02:90:ec:ce:b2:
4a:81:07:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjIjDhgLZPFeKBnGZLCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5Y2QxZDViYjg4OTU4YzY5Y2JkZGU5MGE5ZTA1NmI0OGM0
ZmFiZjgwHhcNMjUwMTMxMTAwMDQwWhcNMjUwMjAxMTAwMDQwWjAzMTEwLwYDVQQD
EyhlOTQ1OTU4MjY2NGExY2UyZmJmZDkxNGMxMGU3NTUzODdkZTNiYjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/mZ9s+63g7HYgye/SrWxhXh6wjx
L5kKyKyBFa/4gDIwQqB7h7sE1HjI2PewUgvJl/4bfYh7BVgkDnZQ90IsYfjlv/lh
+h5lkacyBywYksac2kJbKakJ6OSTEXtepT5qBXccm4V9i+eshmqOiPQwvTX+7Jsv
xBWXL7pfm5VljcEerI1Pjijdkw6/Cn71YUG8V3rxQBI9sJs1deBEXyadFVSXCAJ2
KTF3tym6q4ln69jWS55tnsiOgJyLG7ovIBp8ibIdjEhh9l5wOU3gR6vuLHc5725F
xp1GG5HH6sozia5nauVRk2kS4IFuZPtYcWAkpwyUVRtGg+fobDp4sStA0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlFlYJmShzi+/2RTBDnVTh947saMB8GA1UdIwQY
MBaAFDnNHVu4iVjGnL3ekKngVrSMT6v4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2MwZFc3aUpXTWFjdmQ2UXFlQld0SXhQcV9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81N2FjN2YtZjVjOC00MGZmLTgyNWMt
NDZhODVhMjhlNzQ5LzEvT2MwZFc3aUpXTWFjdmQ2UXFlQld0SXhQcV9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81N2FjN2YtZjVjOC00MGZmLTgyNWMtNDZhODVhMjhlNzQ5
LzEvT2MwZFc3aUpXTWFjdmQ2UXFlQld0SXhQcV9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU0kkQx+k
Z4XrANrU7yjImIcPiGYz9vORVHzrW5/t7TokX2lRzzAbXBhPkorpmxmD/C1suvZ2
a3MRAHSBXGEB+elFL7lK1Ziu7n2GQM+4hxFrhfy95BmnsNuz+TjZdKoxMQhsytlv
g30/Q07BpVRsmFCOUcWHaR4U4dkTqb8IVW4/cOnvP2tjbPs78XrFVUfAgXRfoNgN
EGyO5dzlQnlNSFKhMYndunbJ42KU4do4HDkO5JDbZAI3tm8JZhPldXhoXU+WF5qp
UiKm6qfEpK6UEY3FFZuKfhz+KFNrwE5j8WE+HC5ZEyhq/4/lhAgk1mn+uoACEPOU
swKQ7M6ySoEHkw==
-----END CERTIFICATE-----
Generated at Thu May 1 11:14:44 2025 by rpki-client