Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File: pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier: mTo9aMp1tD+rgR07jcuTNcXDsUiFbWysaHOptzC6B4c=
Subject key identifier: 67:2D:0C:52:B7:66:BA:11:4D:E3:F1:7F:3B:7F:BC:CF:4B:E6:59:E5
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer: /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial: 0194BCE0C2B4F0C2B432B9FDE8DC977FF055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number: 081B
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: J_w-klg8Fz7usxtg6f6kBplmW2Q.roa (hash: wSUiP/GQT3afkhYb4zAVk2weNrXx80BBBUvY2crSbB8=)
2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: uA7qexTYXengHY6X4ypJ9qLfEWN8NNMoxE4LMqrj7go=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c2:b4:f0:c2:b4:32:b9:fd:e8:dc:97:7f:f0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=672d0c52b766ba114de3f17f3b7fbccf4be659e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e4:dd:15:df:10:e0:0f:40:84:a6:33:54:0a:
71:cb:9b:47:e1:e7:6d:20:c7:f7:cb:1e:48:24:7c:
9a:67:42:c5:7b:4f:cb:46:83:50:6c:d8:bc:f2:52:
bb:38:16:16:2c:b2:8f:6b:4e:c5:22:1f:5b:96:ff:
4e:09:5f:3b:e6:a6:76:47:04:3e:f9:f9:de:7e:73:
a1:e6:86:d1:fd:ba:9b:c4:35:9e:a5:c7:0c:7a:8b:
cd:29:6f:2e:22:f2:5f:a0:0c:0f:bd:5b:23:0a:83:
d9:28:90:e4:8e:6c:4b:60:95:82:e8:b5:5f:36:8f:
a1:dd:e7:dd:fe:19:e2:f1:3e:87:2d:66:bc:82:ee:
f7:fc:ce:51:13:da:62:b7:39:aa:98:bf:5f:c9:db:
72:2c:40:00:1b:b8:07:ee:a0:16:69:fb:2c:1f:0b:
5f:f3:eb:92:8b:b4:39:54:6c:ae:d2:ba:46:f2:e1:
7e:f9:e5:a2:91:29:51:13:e8:2d:f2:9f:72:1c:ae:
46:a3:25:1c:4b:f8:86:03:e3:a2:92:14:10:ef:72:
4b:7d:c6:ca:67:b7:43:ac:77:7e:b0:a1:d5:a6:38:
10:31:57:5f:5b:43:c5:b7:57:1d:86:be:a8:d8:be:
ed:7a:fd:97:a1:cc:88:87:62:c3:20:12:c5:39:1a:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2D:0C:52:B7:66:BA:11:4D:E3:F1:7F:3B:7F:BC:CF:4B:E6:59:E5
X509v3 Authority Key Identifier:
keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0c:69:92:36:8a:3b:d1:a8:6b:ce:f3:67:fb:1e:6c:c1:e2:
c9:d4:7e:cd:1b:b5:b7:27:10:d9:5d:fe:94:5b:cd:51:34:a6:
36:00:39:97:0f:10:00:53:c7:ee:08:c9:ae:78:b5:fc:b3:c4:
ee:9e:06:40:6a:7c:e9:24:b5:d5:e7:b7:d6:57:69:8e:3f:35:
d3:8b:5a:39:96:61:82:aa:2b:c3:71:6c:9c:d5:0b:e7:bf:13:
3d:06:cd:4c:6e:e9:d1:8c:64:f1:b1:4b:8a:f8:1c:e6:ad:ae:
b3:22:b8:8e:85:ab:92:85:72:1b:2b:64:1f:fe:e9:6c:07:e0:
70:2a:80:54:dc:3b:06:5f:8b:8d:1b:17:f5:99:58:9b:93:23:
71:b6:ee:8f:58:bc:ca:dc:82:66:82:5b:87:f3:27:21:71:8b:
25:89:ad:5f:a5:87:b4:67:b3:40:f5:60:39:da:e2:23:ba:7c:
46:59:89:4b:bd:0d:ef:48:05:dc:65:9e:50:64:e8:0a:54:19:
3f:8b:3a:37:34:73:3a:78:4e:1e:ab:54:83:36:ed:1e:4d:16:
f3:7f:e7:01:08:22:84:8b:93:37:e0:96:15:24:73:bf:3d:5b:
64:3a:04:9d:ba:5d:e6:8c:c3:53:39:0a:2d:04:44:b7:12:98:
ad:be:91:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84MK08MK0Mrn96NyXf/BVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZWI5ZWI1NTQ3YzdmNWYxYWFmYzBhZGExNDA4MDU0MTk2
MTg3MjYwHhcNMjUwMTMxMTUwMDM0WhcNMjUwMjAxMTUwMDM0WjAzMTEwLwYDVQQD
Eyg2NzJkMGM1MmI3NjZiYTExNGRlM2YxN2YzYjdmYmNjZjRiZTY1OWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuTdFd8Q4A9AhKYzVApxy5tH4edt
IMf3yx5IJHyaZ0LFe0/LRoNQbNi88lK7OBYWLLKPa07FIh9blv9OCV875qZ2RwQ+
+fnefnOh5obR/bqbxDWepccMeovNKW8uIvJfoAwPvVsjCoPZKJDkjmxLYJWC6LVf
No+h3efd/hni8T6HLWa8gu73/M5RE9pitzmqmL9fydtyLEAAG7gH7qAWafssHwtf
8+uSi7Q5VGyu0rpG8uF++eWikSlRE+gt8p9yHK5GoyUcS/iGA+OikhQQ73JLfcbK
Z7dDrHd+sKHVpjgQMVdfW0PFt1cdhr6o2L7tev2XocyIh2LDIBLFORoqkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGctDFK3ZroRTePxfzt/vM9L5lnlMB8GA1UdIwQY
MBaAFKTrnrVUfH9fGq/AraFAgFQZYYcmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE91ZXRWUjhmMThhcjhDdG9VQ0FWQmxoaHlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80Y2Q3MmQtZDhhNS00NmNlLTg2NzQt
MGQyMjIzMmMzNGEwLzEvcE91ZXRWUjhmMThhcjhDdG9VQ0FWQmxoaHlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi80Y2Q3MmQtZDhhNS00NmNlLTg2NzQtMGQyMjIzMmMzNGEw
LzEvcE91ZXRWUjhmMThhcjhDdG9VQ0FWQmxoaHlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgxpkjaK
O9Goa87zZ/sebMHiydR+zRu1tycQ2V3+lFvNUTSmNgA5lw8QAFPH7gjJrni1/LPE
7p4GQGp86SS11ee31ldpjj8104taOZZhgqorw3FsnNUL578TPQbNTG7p0Yxk8bFL
ivgc5q2usyK4joWrkoVyGytkH/7pbAfgcCqAVNw7Bl+LjRsX9ZlYm5Mjcbbuj1i8
ytyCZoJbh/MnIXGLJYmtX6WHtGezQPVgOdriI7p8RlmJS70N70gF3GWeUGToClQZ
P4s6NzRzOnhOHqtUgzbtHk0W83/nAQgihIuTN+CWFSRzvz1bZDoEnbpd5ozDUzkK
LQREtxKYrb6R+w==
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:48:56 2025 by rpki-client