Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
File: oJD-k_R_g4ea4suDVIjNn31pm8A.mft (raw, json)
Hash identifier: A6CzNQI9qHqLeQPiifXC2rVRGb/55pQ+uxyaOAPdvOo=
Subject key identifier: D2:33:D9:8B:B1:F1:CC:12:8A:E2:73:99:53:3E:47:BC:F4:64:A1:F9
Authority key identifier: A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
Certificate issuer: /CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Certificate serial: 0194BBCE8226023733BD11ECFD7F903338B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: oJD-k_R_g4ea4suDVIjNn31pm8A.crl (hash: nIDtXQZsq9bSxgY7fBmzP/lF97bqlt+yhEzYGKWD0n0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:82:26:02:37:33:bd:11:ec:fd:7f:90:33:38:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a090fe93f47f83879ae2cb835488cd9f7d699bc0
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=d233d98bb1f1cc128ae27399533e47bcf464a1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7b:5d:1d:9e:36:f4:45:d0:6d:be:b4:22:4a:
c8:b9:7e:6d:56:9b:9e:f9:2e:29:5f:38:3a:2a:db:
76:d4:87:40:2b:02:c4:d9:4d:2b:f9:c5:2b:6e:9d:
af:c7:6c:bb:2e:1e:bf:af:d1:6f:f9:72:13:2d:be:
30:03:e8:98:08:53:ff:a0:b9:1c:cc:06:8c:ca:3b:
55:54:7b:81:2f:b2:b0:67:31:16:23:23:cf:50:f0:
c0:6c:d3:75:2b:35:a7:d5:8b:78:6f:3a:e9:39:cb:
f4:48:9f:4b:91:df:0c:1b:98:a2:d0:c2:b5:19:34:
c5:64:db:db:ca:3b:8c:59:d3:8b:b0:56:42:3a:ea:
56:e3:b4:7e:0a:47:1f:b2:60:3e:61:ab:59:da:0a:
a9:ce:18:df:96:2d:bc:af:54:23:3d:db:c3:b8:8e:
d3:f0:60:6e:14:ce:08:c8:c3:34:f7:41:5c:a9:3f:
58:68:f4:e6:d3:11:6f:05:e5:95:ef:ed:31:39:b0:
69:ef:f8:a4:8b:97:0f:96:de:fb:95:a1:29:25:9c:
1d:b9:3b:b2:a6:e5:58:9b:57:6e:e6:55:a3:7e:ee:
68:53:bb:62:6d:14:e2:a9:5f:7f:68:e1:71:08:5f:
da:2f:32:a2:da:36:43:5f:9f:a2:e4:2b:af:ed:58:
41:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:33:D9:8B:B1:F1:CC:12:8A:E2:73:99:53:3E:47:BC:F4:64:A1:F9
X509v3 Authority Key Identifier:
keyid:A0:90:FE:93:F4:7F:83:87:9A:E2:CB:83:54:88:CD:9F:7D:69:9B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJD-k_R_g4ea4suDVIjNn31pm8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abbcc9-f832-4b5b-bc22-25781e116782/1/oJD-k_R_g4ea4suDVIjNn31pm8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:78:cd:cd:52:64:7d:59:57:7a:0f:d4:64:f3:37:a4:f9:9f:
68:d1:ce:c5:ed:20:92:3f:ca:66:ae:1e:f3:84:d0:ce:0d:b3:
f6:3a:25:34:57:99:c0:76:09:fb:57:4e:83:d3:32:6a:e1:5c:
42:4f:30:24:13:50:2c:24:83:a4:33:55:7a:b8:d4:2a:c7:bd:
fb:07:74:35:8b:c0:2c:b8:fc:b3:2a:4b:d0:ee:3d:e3:b5:4d:
b4:0a:83:1f:18:97:2c:12:ef:c7:27:0d:25:55:54:ed:d9:59:
8c:7f:0d:66:49:91:e9:a5:bc:fb:d8:e9:7d:ff:57:8f:21:cc:
cd:cc:f6:1e:16:62:db:8f:97:a6:d7:03:7a:73:6b:f7:35:31:
56:4f:ac:95:87:03:67:ac:49:ee:33:7f:9c:e4:68:7f:e9:6b:
d8:7e:58:17:04:a6:0a:9e:91:40:c4:27:dd:e4:5b:9f:96:b8:
af:7f:70:c3:7c:d2:9a:24:a0:09:d3:0f:01:c8:14:b3:2b:d1:
4c:58:d6:bd:b3:96:92:96:5f:c1:bb:ac:3b:95:20:bd:e7:65:
53:75:2c:8d:8f:d9:31:a5:fe:a5:7e:17:0b:12:d9:ed:93:d4:
92:13:27:55:da:af:85:af:c2:d9:f1:e2:f8:95:bd:22:b6:c0:
1c:b6:8a:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zoImAjczvRHs/X+QMzi0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOTBmZTkzZjQ3ZjgzODc5YWUyY2I4MzU0ODhjZDlmN2Q2
OTliYzAwHhcNMjUwMTMxMTAwMTAwWhcNMjUwMjAxMTAwMTAwWjAzMTEwLwYDVQQD
EyhkMjMzZDk4YmIxZjFjYzEyOGFlMjczOTk1MzNlNDdiY2Y0NjRhMWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAontdHZ429EXQbb60IkrIuX5tVpue
+S4pXzg6Ktt21IdAKwLE2U0r+cUrbp2vx2y7Lh6/r9Fv+XITLb4wA+iYCFP/oLkc
zAaMyjtVVHuBL7KwZzEWIyPPUPDAbNN1KzWn1Yt4bzrpOcv0SJ9Lkd8MG5ii0MK1
GTTFZNvbyjuMWdOLsFZCOupW47R+CkcfsmA+YatZ2gqpzhjfli28r1QjPdvDuI7T
8GBuFM4IyMM090FcqT9YaPTm0xFvBeWV7+0xObBp7/iki5cPlt77laEpJZwduTuy
puVYm1du5lWjfu5oU7tibRTiqV9/aOFxCF/aLzKi2jZDX5+i5Cuv7VhB5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNIz2Yux8cwSiuJzmVM+R7z0ZKH5MB8GA1UdIwQY
MBaAFKCQ/pP0f4OHmuLLg1SIzZ99aZvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0pELWtfUl9nNGVhNHN1RFZJak5uMzFwbThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hYmJjYzktZjgzMi00YjViLWJjMjIt
MjU3ODFlMTE2NzgyLzEvb0pELWtfUl9nNGVhNHN1RFZJak5uMzFwbThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9hYmJjYzktZjgzMi00YjViLWJjMjItMjU3ODFlMTE2Nzgy
LzEvb0pELWtfUl9nNGVhNHN1RFZJak5uMzFwbThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQXjNzVJk
fVlXeg/UZPM3pPmfaNHOxe0gkj/KZq4e84TQzg2z9jolNFeZwHYJ+1dOg9MyauFc
Qk8wJBNQLCSDpDNVerjUKse9+wd0NYvALLj8sypL0O4947VNtAqDHxiXLBLvxycN
JVVU7dlZjH8NZkmR6aW8+9jpff9XjyHMzcz2HhZi24+XptcDenNr9zUxVk+slYcD
Z6xJ7jN/nORof+lr2H5YFwSmCp6RQMQn3eRbn5a4r39ww3zSmiSgCdMPAcgUsyvR
TFjWvbOWkpZfwbusO5UgvedlU3UsjY/ZMaX+pX4XCxLZ7ZPUkhMnVdqvha/C2fHi
+JW9IrbAHLaKkQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:56 2025 by rpki-client