Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
File: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft (raw, json)
Hash identifier: lkxo08/utVXEaOF7yulm50k8MvIUxTQ8ALvtHzHUr4w=
Subject key identifier: A3:21:BB:9A:38:07:2E:BC:91:C6:8E:8A:77:99:DC:06:96:8D:00:E2
Authority key identifier: 38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
Certificate issuer: /CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Certificate serial: 0194BD17A9720A98B14195929DC5EF4C1F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
Manifest number: 77
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl (hash: ajtWndJqgFDxzo3FS9ivu+SgfxHLE14fFEm0pI3VeR0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a9:72:0a:98:b1:41:95:92:9d:c5:ef:4c:1f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bc794c5fbaac632a7ffb43db14f739cd53b2c4
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=a321bb9a38072ebc91c68e8a7799dc06968d00e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:87:73:01:6c:ac:9a:36:a7:a3:83:e9:5c:ec:
86:d7:00:13:05:f1:c9:f3:30:b0:91:53:63:e0:38:
d0:f9:dd:7e:ba:9b:01:fd:77:a1:3a:01:0e:09:35:
db:8c:82:8d:90:97:95:15:5e:5d:3c:5a:56:cc:9a:
66:04:aa:70:56:bf:f0:9d:5e:13:52:04:2c:88:e6:
d8:49:cb:b4:87:4a:1d:fc:b9:c1:7a:af:1e:c9:30:
d3:5c:89:cd:78:20:85:00:9b:7a:d0:19:a7:bb:08:
d2:47:a0:a5:bf:f1:17:18:ce:53:49:58:8b:f5:e4:
d3:61:2e:9c:81:e0:bb:28:c2:df:b6:28:d4:65:cf:
34:b1:d4:6b:e2:c7:65:58:01:e5:1f:b4:45:60:cf:
d3:9d:cd:1e:a8:b5:65:7b:11:bb:b8:65:55:33:fe:
c2:8b:82:14:18:e4:18:8c:b8:a2:73:e2:7a:e6:f7:
01:15:87:a4:6e:fe:4e:6c:a6:39:6a:23:2c:c2:51:
a6:6a:af:f6:57:d8:33:3d:71:8e:3e:28:3e:04:7d:
76:79:ea:a7:4f:ce:e2:18:c6:fe:6d:cd:ae:5d:ef:
90:72:58:5b:cb:5d:73:e8:39:66:d8:f5:19:f0:c2:
c9:3d:d1:48:42:bc:38:f2:d0:d6:2d:b2:33:7b:1a:
b0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:21:BB:9A:38:07:2E:BC:91:C6:8E:8A:77:99:DC:06:96:8D:00:E2
X509v3 Authority Key Identifier:
keyid:38:BC:79:4C:5F:BA:AC:63:2A:7F:FB:43:DB:14:F7:39:CD:53:B2:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/1a3d98-c14f-4d06-a466-d985394e3c10/1/OLx5TF-6rGMqf_tD2xT3Oc1TssQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:91:3e:09:d3:e5:0c:42:bc:00:d3:64:29:75:3a:ca:a8:cf:
3c:75:c5:e7:bd:47:a0:3b:8d:8e:4e:53:b8:bb:9d:cd:75:79:
9d:4d:84:b7:21:dc:ab:e6:d0:ef:c1:c2:65:ec:de:f8:9b:10:
fa:79:5e:f9:5b:e0:6e:88:16:75:69:b9:c9:4c:c6:88:05:11:
92:e4:76:0f:25:60:05:34:44:cc:4d:a8:c4:e0:3d:17:f7:0c:
24:93:f3:0d:b2:d8:08:ba:b8:e7:c3:46:88:2c:9d:f3:90:60:
a3:71:a8:e5:41:8a:a4:ee:15:8b:40:9a:3e:29:0b:18:b5:29:
69:6f:49:d0:22:21:b7:00:f2:ac:17:ad:82:40:ff:39:89:2f:
a3:01:ed:94:80:cf:85:bf:0b:b7:d3:93:ae:c7:de:db:d6:ab:
ce:a2:80:f0:39:69:f2:7f:94:41:3e:bb:b3:1d:90:35:7e:4e:
0d:ea:a3:40:3e:26:cf:87:09:3f:31:0d:ca:04:f7:37:43:fc:
76:f4:2f:0d:44:5e:8b:da:be:0e:85:89:ec:25:42:96:2e:a2:
75:b4:01:a5:e5:cf:37:62:cb:be:0a:88:a0:c9:ae:82:81:11:
18:44:f0:b0:be:10:a4:90:0e:4b:94:f9:4f:c8:d6:08:74:9e:
75:32:d3:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6lyCpixQZWSncXvTB8MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4YmM3OTRjNWZiYWFjNjMyYTdmZmI0M2RiMTRmNzM5Y2Q1
M2IyYzQwHhcNMjUwMTMxMTYwMDMxWhcNMjUwMjAxMTYwMDMxWjAzMTEwLwYDVQQD
EyhhMzIxYmI5YTM4MDcyZWJjOTFjNjhlOGE3Nzk5ZGMwNjk2OGQwMGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YdzAWysmjano4PpXOyG1wATBfHJ
8zCwkVNj4DjQ+d1+upsB/XehOgEOCTXbjIKNkJeVFV5dPFpWzJpmBKpwVr/wnV4T
UgQsiObYScu0h0od/LnBeq8eyTDTXInNeCCFAJt60BmnuwjSR6Clv/EXGM5TSViL
9eTTYS6cgeC7KMLftijUZc80sdRr4sdlWAHlH7RFYM/Tnc0eqLVlexG7uGVVM/7C
i4IUGOQYjLiic+J65vcBFYekbv5ObKY5aiMswlGmaq/2V9gzPXGOPig+BH12eeqn
T87iGMb+bc2uXe+Qclhby11z6Dlm2PUZ8MLJPdFIQrw48tDWLbIzexqwjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKMhu5o4By68kcaOineZ3AaWjQDiMB8GA1UdIwQY
MBaAFDi8eUxfuqxjKn/7Q9sU9znNU7LEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0x4NVRGLTZyR01xZl90RDJ4VDNPYzFUc3NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xYTNkOTgtYzE0Zi00ZDA2LWE0NjYt
ZDk4NTM5NGUzYzEwLzEvT0x4NVRGLTZyR01xZl90RDJ4VDNPYzFUc3NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xYTNkOTgtYzE0Zi00ZDA2LWE0NjYtZDk4NTM5NGUzYzEw
LzEvT0x4NVRGLTZyR01xZl90RDJ4VDNPYzFUc3NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJpE+CdPl
DEK8ANNkKXU6yqjPPHXF571HoDuNjk5TuLudzXV5nU2EtyHcq+bQ78HCZeze+JsQ
+nle+VvgbogWdWm5yUzGiAURkuR2DyVgBTREzE2oxOA9F/cMJJPzDbLYCLq458NG
iCyd85Bgo3Go5UGKpO4Vi0CaPikLGLUpaW9J0CIhtwDyrBetgkD/OYkvowHtlIDP
hb8Lt9OTrsfe29arzqKA8Dlp8n+UQT67sx2QNX5ODeqjQD4mz4cJPzENygT3N0P8
dvQvDURei9q+DoWJ7CVCli6idbQBpeXPN2LLvgqIoMmugoERGETwsL4QpJAOS5T5
T8jWCHSedTLTzQ==
-----END CERTIFICATE-----
Generated at Thu May 1 06:14:20 2025 by rpki-client