Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
File: OQGfnAqym0Lg2xLprIezJ7_FWvk.mft (raw, json)
Hash identifier: LWEOxQzntzJaBzG1lTD8sXgglT0ZoBKhN6+EBt8odnM=
Subject key identifier: 95:4A:9C:34:55:24:C4:C7:87:02:1C:D3:C5:73:9A:47:F6:3B:57:C4
Authority key identifier: 39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
Certificate issuer: /CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Certificate serial: 0194BBCEFE9E4A2F51BEB017E85A6EC97FB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: OQGfnAqym0Lg2xLprIezJ7_FWvk.crl (hash: 4khWou8a19/FZb/d9lAO6z+zW79JWSUBkdmMgjQq96c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:fe:9e:4a:2f:51:be:b0:17:e8:5a:6e:c9:7f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39019f9c0ab29b42e0db12e9ac87b327bfc55af9
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=954a9c345524c4c787021cd3c5739a47f63b57c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:72:41:38:1e:34:32:56:0a:1b:9b:05:8e:
59:20:e5:72:72:b5:45:d9:72:af:d9:c9:72:ba:32:
5c:e9:bb:5f:d0:1e:d5:fb:c8:0c:91:a1:be:23:de:
61:21:09:e6:64:49:3b:3d:a4:74:b1:48:a7:7e:7f:
90:12:62:bc:a1:d0:1c:f0:91:29:d4:2a:d7:ee:80:
74:ae:a0:2c:34:d6:87:85:27:3f:44:6f:e4:1b:18:
cd:e7:01:11:3c:63:a6:9e:a4:ce:80:d3:37:06:f2:
12:e6:62:84:e3:6c:6a:5c:a9:fc:63:0b:c0:4e:35:
b3:70:5e:00:db:64:d5:67:2a:73:04:1a:5c:cb:e5:
e2:ee:8e:06:90:3d:8c:fa:46:f4:c4:e2:2c:55:60:
58:17:97:58:79:27:ef:bf:1f:e5:c5:58:30:53:6e:
f9:d8:ab:25:71:e4:e6:a5:bf:92:59:69:f7:ea:f6:
ce:a5:ed:e8:fd:d0:6d:69:ef:44:99:07:f2:bb:43:
49:19:0f:0b:e9:f6:87:83:db:4f:b8:77:cd:12:93:
d8:a6:6a:e2:d8:27:b9:37:cd:69:ea:3a:01:ee:3e:
0e:ac:68:b4:aa:0f:76:bc:e7:a3:5d:71:78:eb:09:
d7:5b:6c:ea:a7:98:8b:39:cf:c6:61:d9:17:86:cf:
0b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4A:9C:34:55:24:C4:C7:87:02:1C:D3:C5:73:9A:47:F6:3B:57:C4
X509v3 Authority Key Identifier:
keyid:39:01:9F:9C:0A:B2:9B:42:E0:DB:12:E9:AC:87:B3:27:BF:C5:5A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQGfnAqym0Lg2xLprIezJ7_FWvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/430c81-ee4b-4e88-a36f-788f5a58044f/1/OQGfnAqym0Lg2xLprIezJ7_FWvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:95:df:e6:6f:b3:14:15:00:95:4f:30:fa:0b:f5:74:9e:e6:
d9:2a:7e:aa:7f:3b:26:d9:10:cc:9b:12:3c:ed:ff:21:7f:8a:
22:f3:be:8f:ee:20:0d:29:3f:07:ad:97:26:d4:14:38:fe:21:
02:82:90:57:8f:e8:aa:16:9b:9a:6d:cf:d8:9d:b8:02:3e:d0:
9b:06:95:b4:f5:9e:e8:0a:e0:cb:b1:84:72:1c:c0:cc:bc:97:
a6:a0:ac:86:75:45:26:be:8e:5e:46:bd:56:3a:74:db:49:74:
79:44:c5:ed:af:ce:be:b1:59:45:0f:12:06:fe:9a:db:88:7d:
f2:d5:cb:22:40:fe:8c:76:27:34:1b:f5:8f:9a:c3:b6:ef:2a:
bb:d5:ab:d4:18:98:c8:43:7e:af:02:fc:48:6b:10:3b:14:56:
71:4a:1a:cf:6f:d7:e0:e5:4f:08:85:ce:b6:ff:a3:56:d1:c4:
9b:1f:0f:d1:df:54:ba:c6:d7:16:fc:d7:78:2d:52:84:71:c2:
29:e4:a6:27:18:5a:a4:19:b4:91:4f:1d:73:0d:22:4a:ac:39:
fd:26:d2:78:5e:68:9e:a6:84:6f:6f:ea:e0:06:f3:9e:a6:58:
4e:52:82:33:61:fc:23:08:3a:f7:71:0a:88:6b:0f:87:84:dc:
bb:4a:6a:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zv6eSi9RvrAX6FpuyX+zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MDE5ZjljMGFiMjliNDJlMGRiMTJlOWFjODdiMzI3YmZj
NTVhZjkwHhcNMjUwMTMxMTAwMTMyWhcNMjUwMjAxMTAwMTMyWjAzMTEwLwYDVQQD
Eyg5NTRhOWMzNDU1MjRjNGM3ODcwMjFjZDNjNTczOWE0N2Y2M2I1N2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhRyQTgeNDJWChubBY5ZIOVycrVF
2XKv2clyujJc6btf0B7V+8gMkaG+I95hIQnmZEk7PaR0sUinfn+QEmK8odAc8JEp
1CrX7oB0rqAsNNaHhSc/RG/kGxjN5wERPGOmnqTOgNM3BvIS5mKE42xqXKn8YwvA
TjWzcF4A22TVZypzBBpcy+Xi7o4GkD2M+kb0xOIsVWBYF5dYeSfvvx/lxVgwU275
2KslceTmpb+SWWn36vbOpe3o/dBtae9EmQfyu0NJGQ8L6faHg9tPuHfNEpPYpmri
2Ce5N81p6joB7j4OrGi0qg92vOejXXF46wnXW2zqp5iLOc/GYdkXhs8LJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVKnDRVJMTHhwIc08Vzmkf2O1fEMB8GA1UdIwQY
MBaAFDkBn5wKsptC4NsS6ayHsye/xVr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80MzBjODEtZWU0Yi00ZTg4LWEzNmYt
Nzg4ZjVhNTgwNDRmLzEvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi80MzBjODEtZWU0Yi00ZTg4LWEzNmYtNzg4ZjVhNTgwNDRm
LzEvT1FHZm5BcXltMExnMnhMcHJJZXpKN19GV3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT5Xf5m+z
FBUAlU8w+gv1dJ7m2Sp+qn87JtkQzJsSPO3/IX+KIvO+j+4gDSk/B62XJtQUOP4h
AoKQV4/oqhabmm3P2J24Aj7QmwaVtPWe6Argy7GEchzAzLyXpqCshnVFJr6OXka9
Vjp020l0eUTF7a/OvrFZRQ8SBv6a24h98tXLIkD+jHYnNBv1j5rDtu8qu9Wr1BiY
yEN+rwL8SGsQOxRWcUoaz2/X4OVPCIXOtv+jVtHEmx8P0d9UusbXFvzXeC1ShHHC
KeSmJxhapBm0kU8dcw0iSqw5/SbSeF5onqaEb2/q4AbznqZYTlKCM2H8Iwg693EK
iGsPh4Tcu0pq+g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:32 2025 by rpki-client