Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
File: o7R_qStyxJ6grFNx3jU7HicdxdA.mft (raw, json)
Hash identifier: nsqGOP0TkFssTeEBAnNW/k1+TjZYOtuAXt4ZPzoC7RE=
Subject key identifier: 93:C6:6A:19:F7:F3:35:0D:B6:4C:7A:B3:93:94:23:42:A0:DB:8E:4E
Authority key identifier: A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
Certificate issuer: /CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Certificate serial: 0194BD1751BE1DCF0B8742BD77266A07194E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
Manifest number: 0BBA
Signing time: Fri 31 Jan 2025 16:00:09 +0000
Manifest this update: Fri 31 Jan 2025 16:00:09 +0000
Manifest next update: Sat 01 Feb 2025 16:00:09 +0000
Files and hashes: 1: WIaOxFihvMngyRoJ51mATU-OelM.roa (hash: yYmLv2domUt4Svy4VBfcVVdHWZ/TicTJ4cMQnZnE8zs=)
2: o7R_qStyxJ6grFNx3jU7HicdxdA.crl (hash: xq8MexLjCf6iMgB6tvkDjgla9OaAsAT6JiTf+Y7q/Gg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:51:be:1d:cf:0b:87:42:bd:77:26:6a:07:19:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b47fa92b72c49ea0ac5371de353b1e271dc5d0
Validity
Not Before: Jan 31 16:00:09 2025 GMT
Not After : Feb 1 16:00:09 2025 GMT
Subject: CN=93c66a19f7f3350db64c7ab393942342a0db8e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:56:4e:59:f7:66:14:e1:52:ab:21:66:e9:db:
59:0d:6c:87:3a:d8:01:43:87:7a:32:23:c7:4f:83:
5b:a7:76:02:16:3c:e8:2e:26:48:4f:0b:3e:d9:a8:
48:67:6c:25:be:d5:86:85:d7:ef:b1:a2:3b:6d:6a:
87:bb:06:d1:8d:ce:43:62:be:6a:61:7b:87:c8:f1:
3a:be:67:f9:a6:58:74:30:aa:48:f8:d5:01:3f:0b:
41:bd:14:88:ec:4f:c3:97:ec:9f:a2:c6:98:f4:83:
0e:af:70:0b:1f:09:ee:5a:57:d2:9b:ca:bf:93:3b:
f5:62:ff:7e:4d:ce:a8:9f:92:bc:7f:69:9c:78:d1:
8f:02:88:1e:7c:02:cc:10:9c:60:2b:b3:d3:73:62:
2f:3f:0a:b0:19:5b:20:5b:b4:c5:54:90:55:4b:8c:
16:97:94:af:7e:98:9b:ee:15:07:a0:71:ee:14:a1:
0c:21:64:ac:ff:e1:4f:6d:78:4f:63:71:fd:e0:ca:
66:15:62:c6:e3:18:88:74:ea:c5:99:39:59:d5:33:
80:45:ae:cc:41:51:48:2d:c8:42:9a:c1:bb:3c:86:
82:de:14:24:da:ef:a1:12:e4:da:85:d7:b0:52:77:
af:62:ac:ef:2b:14:e8:01:5f:a2:af:1f:cb:01:5b:
cf:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C6:6A:19:F7:F3:35:0D:B6:4C:7A:B3:93:94:23:42:A0:DB:8E:4E
X509v3 Authority Key Identifier:
keyid:A3:B4:7F:A9:2B:72:C4:9E:A0:AC:53:71:DE:35:3B:1E:27:1D:C5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7R_qStyxJ6grFNx3jU7HicdxdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a948f3-67d9-4f35-9e0d-bc6d1b3f86b9/1/o7R_qStyxJ6grFNx3jU7HicdxdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8b:fd:31:83:ad:c0:11:4b:87:fd:e5:62:72:1f:44:8b:cf:
3f:f7:3e:39:9e:59:75:5f:4a:01:41:04:e5:65:d9:50:c2:84:
50:a8:aa:35:ba:91:57:89:1a:19:2c:07:94:d7:39:1d:0b:24:
5d:f9:dd:21:8b:fa:6f:75:d0:d9:b8:57:e2:10:99:e9:9d:24:
47:62:d5:ba:31:05:72:f9:fd:a2:f5:b1:91:7e:7a:ed:ef:95:
28:43:fb:c1:c6:aa:ae:32:d0:4a:a6:57:65:be:5b:4e:82:eb:
c7:f2:ed:53:ca:16:b9:97:65:ef:aa:bc:da:f9:f6:d3:f0:64:
d0:e5:22:b1:99:97:ed:08:c9:51:78:33:28:44:82:da:2e:1f:
30:47:6d:65:92:3c:f5:4f:cc:b9:e7:6e:39:4b:4d:91:46:b0:
6f:23:51:0d:ba:51:50:6c:1e:f1:67:2e:4a:f8:74:fe:01:26:
17:5e:41:fd:23:0f:c2:3a:67:5d:b4:f6:51:73:6e:d5:df:39:
2e:9e:bb:02:d1:90:d9:65:ce:36:01:dc:0c:75:93:11:91:0d:
0c:d2:56:a4:85:26:d6:bb:a5:2f:4e:02:49:be:10:30:b6:b5:
f3:de:07:b4:eb:f3:66:5b:2b:bd:00:66:c5:64:5b:03:82:8e:
c4:5a:3c:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F1G+Hc8Lh0K9dyZqBxlOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYjQ3ZmE5MmI3MmM0OWVhMGFjNTM3MWRlMzUzYjFlMjcx
ZGM1ZDAwHhcNMjUwMTMxMTYwMDA5WhcNMjUwMjAxMTYwMDA5WjAzMTEwLwYDVQQD
Eyg5M2M2NmExOWY3ZjMzNTBkYjY0YzdhYjM5Mzk0MjM0MmEwZGI4ZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lZOWfdmFOFSqyFm6dtZDWyHOtgB
Q4d6MiPHT4Nbp3YCFjzoLiZITws+2ahIZ2wlvtWGhdfvsaI7bWqHuwbRjc5DYr5q
YXuHyPE6vmf5plh0MKpI+NUBPwtBvRSI7E/Dl+yfosaY9IMOr3ALHwnuWlfSm8q/
kzv1Yv9+Tc6on5K8f2mceNGPAogefALMEJxgK7PTc2IvPwqwGVsgW7TFVJBVS4wW
l5Svfpib7hUHoHHuFKEMIWSs/+FPbXhPY3H94MpmFWLG4xiIdOrFmTlZ1TOARa7M
QVFILchCmsG7PIaC3hQk2u+hEuTahdewUnevYqzvKxToAV+irx/LAVvPOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPGahn38zUNtkx6s5OUI0Kg245OMB8GA1UdIwQY
MBaAFKO0f6krcsSeoKxTcd41Ox4nHcXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzdSX3FTdHl4SjZnckZOeDNqVTdIaWNkeGRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hOTQ4ZjMtNjdkOS00ZjM1LTllMGQt
YmM2ZDFiM2Y4NmI5LzEvbzdSX3FTdHl4SjZnckZOeDNqVTdIaWNkeGRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9hOTQ4ZjMtNjdkOS00ZjM1LTllMGQtYmM2ZDFiM2Y4NmI5
LzEvbzdSX3FTdHl4SjZnckZOeDNqVTdIaWNkeGRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARov9MYOt
wBFLh/3lYnIfRIvPP/c+OZ5ZdV9KAUEE5WXZUMKEUKiqNbqRV4kaGSwHlNc5HQsk
XfndIYv6b3XQ2bhX4hCZ6Z0kR2LVujEFcvn9ovWxkX567e+VKEP7wcaqrjLQSqZX
Zb5bToLrx/LtU8oWuZdl76q82vn20/Bk0OUisZmX7QjJUXgzKESC2i4fMEdtZZI8
9U/MueduOUtNkUawbyNRDbpRUGwe8WcuSvh0/gEmF15B/SMPwjpnXbT2UXNu1d85
Lp67AtGQ2WXONgHcDHWTEZENDNJWpIUm1rulL04CSb4QMLa1894HtOvzZlsrvQBm
xWRbA4KOxFo8YQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:07 2025 by rpki-client