Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
File: oK89hVH73Tti9P_f1ZytQWHkRx4.mft (raw, json)
Hash identifier: Cv5wT18b0jf6t74tB2b5cD94/MV8XuCi2rYqtSKEGY4=
Subject key identifier: 53:0D:E0:F3:8F:59:C7:36:56:7D:A8:85:7A:E0:97:A4:82:3D:B8:F7
Authority key identifier: A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
Certificate issuer: /CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Certificate serial: 0194BC3C086B978DD3513D8D83BF026EDDCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
Manifest number: 0BB1
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: Fa0oKJS-5OytgjD9FfEKRTyYbH4.roa (hash: uvEwc2Oby4x64qeSjPHNoFr0vjSUe2G9BJiy9VMRAr0=)
2: oK89hVH73Tti9P_f1ZytQWHkRx4.crl (hash: QQmbXN/oRM3duQhDZR3gzfb/gmhwSHnmCvwnm20Db+0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:08:6b:97:8d:d3:51:3d:8d:83:bf:02:6e:dd:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=530de0f38f59c736567da8857ae097a4823db8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:c1:c7:cf:70:df:81:12:73:ac:74:2b:0a:
d4:50:6b:2a:f3:04:84:46:2f:2e:7c:0b:34:1c:3e:
91:6d:90:4b:99:92:4a:04:03:aa:39:79:eb:10:4a:
cb:9a:2d:9d:3a:55:ee:4a:9e:0c:1d:78:29:7b:da:
a1:f0:29:81:dd:45:fb:38:7c:ef:1a:4a:0d:73:ca:
6b:18:05:b5:e7:23:7b:9f:4e:01:c3:cd:37:7d:0b:
86:7b:b1:4b:8d:dc:ed:ef:1b:29:3a:00:37:bd:40:
6f:66:d6:74:aa:59:61:9f:49:b4:26:38:17:4d:06:
b1:92:5a:6a:66:73:88:f4:4b:e0:b3:5b:f7:76:41:
e1:06:1b:7b:d1:b3:e0:e1:18:e8:df:e9:a3:7f:0c:
65:18:79:53:87:76:31:99:66:8d:98:9e:63:04:ae:
07:6f:90:77:64:87:7f:5c:44:5f:bd:35:12:b2:0d:
c8:70:f5:0f:de:c5:3d:aa:95:01:f1:ce:3d:71:b9:
58:50:49:7a:b6:ab:01:76:f7:9f:f4:58:e9:76:1d:
81:a3:d3:01:e3:b2:a9:f3:c0:b0:65:b6:f0:b6:02:
4f:dd:b1:90:f3:87:c0:ba:b5:69:8a:e7:31:5d:5e:
2f:d5:b5:2f:d3:17:33:2e:23:a5:da:0f:03:c6:8e:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:0D:E0:F3:8F:59:C7:36:56:7D:A8:85:7A:E0:97:A4:82:3D:B8:F7
X509v3 Authority Key Identifier:
keyid:A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:13:30:e4:d5:21:4a:ac:10:37:9f:84:8f:62:e7:42:fb:7e:
bd:5d:d2:ff:da:45:fa:86:ba:3e:7b:01:e4:0b:f9:cc:e0:ab:
0e:f9:65:63:17:f1:63:3e:9e:78:36:4b:0c:8d:27:ad:d0:4a:
9e:23:70:7c:5c:51:c1:e7:c7:c0:f6:85:5e:7b:97:e3:dd:04:
18:87:4c:f7:8e:83:a5:91:90:51:fd:1d:fc:65:d4:99:4c:8b:
a6:d5:44:06:b5:0b:52:b6:4d:91:c5:75:97:59:a6:d5:9c:5b:
3e:c4:80:76:22:3c:84:60:9f:61:eb:e4:d4:0c:35:db:f7:11:
37:2b:5f:86:52:e7:75:64:32:ca:6a:8f:ea:6d:9c:46:b9:00:
9f:96:f6:90:08:78:6b:fd:2b:59:b6:5f:4a:24:00:a4:d7:63:
be:90:71:bd:7b:ba:73:62:dc:28:b0:84:a7:60:ff:8c:08:a1:
0b:eb:bd:72:7f:a3:44:47:fc:e5:2c:06:c0:e8:53:a4:17:86:
0e:c7:05:35:b1:41:ca:26:06:aa:b0:41:90:e7:cd:8a:dd:f7:
4b:87:30:c2:06:bb:94:38:b7:d2:8a:f9:ef:b1:25:6c:a5:72:
b0:59:33:a3:d3:a2:49:e3:15:26:f1:a1:47:38:2b:22:50:fa:
99:4c:6b:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAhrl43TUT2Ng78Cbt3PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYWYzZDg1NTFmYmRkM2I2MmY0ZmZkZmQ1OWNhZDQxNjFl
NDQ3MWUwHhcNMjUwMTMxMTIwMDM4WhcNMjUwMjAxMTIwMDM4WjAzMTEwLwYDVQQD
Eyg1MzBkZTBmMzhmNTljNzM2NTY3ZGE4ODU3YWUwOTdhNDgyM2RiOGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSXBx89w34ESc6x0KwrUUGsq8wSE
Ri8ufAs0HD6RbZBLmZJKBAOqOXnrEErLmi2dOlXuSp4MHXgpe9qh8CmB3UX7OHzv
GkoNc8prGAW15yN7n04Bw803fQuGe7FLjdzt7xspOgA3vUBvZtZ0qllhn0m0JjgX
TQaxklpqZnOI9Evgs1v3dkHhBht70bPg4Rjo3+mjfwxlGHlTh3YxmWaNmJ5jBK4H
b5B3ZId/XERfvTUSsg3IcPUP3sU9qpUB8c49cblYUEl6tqsBdvef9Fjpdh2Bo9MB
47Kp88CwZbbwtgJP3bGQ84fAurVpiucxXV4v1bUv0xczLiOl2g8Dxo5FowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFMN4POPWcc2Vn2ohXrgl6SCPbj3MB8GA1UdIwQY
MBaAFKCvPYVR+907YvT/39WcrUFh5EceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0s4OWhWSDczVHRpOVBfZjFaeXRRV0hrUng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jNTY2YzctM2NhYy00NWE5LTgyYTEt
MDRiMDkwNTc1MjJmLzEvb0s4OWhWSDczVHRpOVBfZjFaeXRRV0hrUng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9jNTY2YzctM2NhYy00NWE5LTgyYTEtMDRiMDkwNTc1MjJm
LzEvb0s4OWhWSDczVHRpOVBfZjFaeXRRV0hrUng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxMw5NUh
SqwQN5+Ej2LnQvt+vV3S/9pF+oa6PnsB5Av5zOCrDvllYxfxYz6eeDZLDI0nrdBK
niNwfFxRwefHwPaFXnuX490EGIdM946DpZGQUf0d/GXUmUyLptVEBrULUrZNkcV1
l1mm1ZxbPsSAdiI8hGCfYevk1Aw12/cRNytfhlLndWQyymqP6m2cRrkAn5b2kAh4
a/0rWbZfSiQApNdjvpBxvXu6c2LcKLCEp2D/jAihC+u9cn+jREf85SwGwOhTpBeG
DscFNbFByiYGqrBBkOfNit33S4cwwga7lDi30or577ElbKVysFkzo9OiSeMVJvGh
RzgrIlD6mUxrFA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:47 2025 by rpki-client