Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
File: OcUbkTH248JZr53Qrb9U9xokmO8.mft (raw, json)
Hash identifier: TVCLoQ7Sx7rHq+3dMDMKUfNii3ZJEsucsSD14dmQSR0=
Subject key identifier: D6:1C:6D:8F:E1:93:26:56:ED:23:5B:E1:5C:82:A3:2D:6A:9D:F2:41
Authority key identifier: 39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
Certificate issuer: /CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Certificate serial: 0194BCE05C3F533D1A2B043B11A2867456C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
Manifest number: 01EE
Signing time: Fri 31 Jan 2025 15:00:07 +0000
Manifest this update: Fri 31 Jan 2025 15:00:07 +0000
Manifest next update: Sat 01 Feb 2025 15:00:07 +0000
Files and hashes: 1: OcUbkTH248JZr53Qrb9U9xokmO8.crl (hash: ZwtC0y6VJLWgddtJJ3GkhTIQ5TQ5/5c6e42zHe9ta1M=)
2: b3OVVMtpKDJInQYqC6wfpj-rA1Y.roa (hash: Lyvza6TQ6bNKHI9xGfyJDbLi+A2Jo++Ry4SK3k6nPZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5c:3f:53:3d:1a:2b:04:3b:11:a2:86:74:56:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39c51b9131f6e3c259af9dd0adbf54f71a2498ef
Validity
Not Before: Jan 31 15:00:07 2025 GMT
Not After : Feb 1 15:00:07 2025 GMT
Subject: CN=d61c6d8fe1932656ed235be15c82a32d6a9df241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:0e:53:ff:39:69:bd:42:e6:8f:b8:de:e7:
37:c8:a8:8e:44:10:9e:32:a3:9b:d1:ca:92:7e:39:
1a:3c:96:cc:58:0e:8e:1c:1f:27:4f:a7:3c:c9:93:
7f:82:35:1f:fa:a4:00:32:c6:c1:33:78:cf:ea:44:
54:4d:59:48:e3:08:e9:46:03:00:b3:c5:a1:c2:1f:
18:b5:1d:b3:a9:92:9f:d4:f8:c5:17:c0:35:49:ff:
a9:a4:8f:5a:0e:d6:ac:c8:cf:4b:79:ba:3b:3f:6e:
0a:2f:49:98:ee:5d:0a:08:6c:2d:88:0f:8b:b7:62:
f7:c6:03:ca:2d:4b:fe:b1:57:fc:83:6d:29:ad:3f:
83:b6:46:07:7b:dc:c0:dd:c7:b5:6c:73:fc:64:a3:
54:f4:e1:11:e3:82:49:9d:92:9d:56:f0:a6:d3:25:
42:9d:18:b9:45:c1:21:a5:62:99:e0:31:6f:4a:63:
ca:93:b1:1a:7a:bf:3b:09:bc:a9:79:de:9a:36:09:
a7:21:81:49:b5:d3:f4:91:38:ac:50:bf:78:9b:ab:
34:7b:4d:2c:6f:32:cc:4c:78:05:6f:c2:f2:ff:82:
c3:cd:c4:76:ff:03:75:5b:5c:c8:4c:f4:fb:eb:1a:
37:64:07:be:ca:89:df:9d:93:aa:e9:16:5c:91:7c:
e2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1C:6D:8F:E1:93:26:56:ED:23:5B:E1:5C:82:A3:2D:6A:9D:F2:41
X509v3 Authority Key Identifier:
keyid:39:C5:1B:91:31:F6:E3:C2:59:AF:9D:D0:AD:BF:54:F7:1A:24:98:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OcUbkTH248JZr53Qrb9U9xokmO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/3a08c3-edb0-475d-b870-730c4d472a8a/1/OcUbkTH248JZr53Qrb9U9xokmO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:40:53:f7:ac:3f:cd:02:23:8c:44:45:a8:66:7c:b0:e5:ef:
5d:7f:7f:3c:61:2d:4b:5a:62:24:7b:86:8d:59:8b:71:4f:2c:
bd:94:26:bb:c1:e0:84:a5:20:f7:10:4e:00:17:39:4d:e3:09:
1f:76:fb:1c:46:1b:82:33:ce:64:76:83:48:80:cb:18:20:0c:
74:3d:3d:8f:55:94:51:c1:e0:ac:af:b0:94:b0:ca:2b:08:77:
c1:03:08:8f:f5:1f:1c:87:74:1a:46:aa:6b:21:53:15:94:04:
84:5e:84:b3:20:67:9e:74:12:98:75:7d:65:df:77:d0:18:99:
ef:05:0f:a1:9b:e4:b1:a9:80:b3:cc:57:cc:ea:25:b9:7b:e7:
fa:01:d9:07:86:88:b0:cd:bd:23:b9:c7:71:97:12:46:d3:56:
82:72:a0:10:08:b7:1f:54:65:44:b6:e4:3a:67:3f:cc:fe:25:
4a:3f:f2:de:b1:bd:c3:45:4b:88:e3:54:23:5d:ae:1b:27:4f:
e8:7d:ff:f8:0e:f5:45:41:91:17:8a:13:c2:3e:8c:e9:01:8f:
ce:07:dc:43:14:54:bb:59:7c:93:61:64:5c:9d:3f:6f:78:c8:
91:2b:a3:48:5f:ec:99:4c:a6:78:d6:76:e1:94:a2:88:71:aa:
67:8a:f3:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Fw/Uz0aKwQ7EaKGdFbFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YzUxYjkxMzFmNmUzYzI1OWFmOWRkMGFkYmY1NGY3MWEy
NDk4ZWYwHhcNMjUwMTMxMTUwMDA3WhcNMjUwMjAxMTUwMDA3WjAzMTEwLwYDVQQD
EyhkNjFjNmQ4ZmUxOTMyNjU2ZWQyMzViZTE1YzgyYTMyZDZhOWRmMjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyEOU/85ab1C5o+43uc3yKiORBCe
MqOb0cqSfjkaPJbMWA6OHB8nT6c8yZN/gjUf+qQAMsbBM3jP6kRUTVlI4wjpRgMA
s8Whwh8YtR2zqZKf1PjFF8A1Sf+ppI9aDtasyM9Lebo7P24KL0mY7l0KCGwtiA+L
t2L3xgPKLUv+sVf8g20prT+DtkYHe9zA3ce1bHP8ZKNU9OER44JJnZKdVvCm0yVC
nRi5RcEhpWKZ4DFvSmPKk7Eaer87Cbyped6aNgmnIYFJtdP0kTisUL94m6s0e00s
bzLMTHgFb8Ly/4LDzcR2/wN1W1zITPT76xo3ZAe+yonfnZOq6RZckXzi2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNYcbY/hkyZW7SNb4VyCoy1qnfJBMB8GA1UdIwQY
MBaAFDnFG5Ex9uPCWa+d0K2/VPcaJJjvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAt
NzMwYzRkNDcyYThhLzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8zYTA4YzMtZWRiMC00NzVkLWI4NzAtNzMwYzRkNDcyYThh
LzEvT2NVYmtUSDI0OEpacjUzUXJiOVU5eG9rbU84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUBT96w/
zQIjjERFqGZ8sOXvXX9/PGEtS1piJHuGjVmLcU8svZQmu8HghKUg9xBOABc5TeMJ
H3b7HEYbgjPOZHaDSIDLGCAMdD09j1WUUcHgrK+wlLDKKwh3wQMIj/UfHId0Gkaq
ayFTFZQEhF6EsyBnnnQSmHV9Zd930BiZ7wUPoZvksamAs8xXzOoluXvn+gHZB4aI
sM29I7nHcZcSRtNWgnKgEAi3H1RlRLbkOmc/zP4lSj/y3rG9w0VLiONUI12uGydP
6H3/+A71RUGRF4oTwj6M6QGPzgfcQxRUu1l8k2FkXJ0/b3jIkSujSF/smUymeNZ2
4ZSiiHGqZ4rzpQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:59:20 2025 by rpki-client