Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/d7d296-16b5-491d-958f-0f387a081db0/1/1OT0Avd6nWii_00VRYokoD3NB8c.mft
File: 1OT0Avd6nWii_00VRYokoD3NB8c.mft (raw, json)
Hash identifier: FvC09F4KOKoYFPqQx0uRI9OjuutnZJzxdA1gwMfWmPg=
Subject key identifier: 16:C0:0B:B1:E3:B9:CC:FE:BD:9A:84:7A:F5:46:BD:B9:D0:F7:80:70
Authority key identifier: D4:E4:F4:02:F7:7A:9D:68:A2:FF:4D:15:45:8A:24:A0:3D:CD:07:C7
Certificate issuer: /CN=d4e4f402f77a9d68a2ff4d15458a24a03dcd07c7
Certificate serial: 01940E6D7513A35A91073AD46E207BC3E9FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OT0Avd6nWii_00VRYokoD3NB8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/d7d296-16b5-491d-958f-0f387a081db0/1/1OT0Avd6nWii_00VRYokoD3NB8c.mft
Manifest number: 13CF
Signing time: Sat 28 Dec 2024 18:00:41 +0000
Manifest this update: Sat 28 Dec 2024 18:00:41 +0000
Manifest next update: Sun 29 Dec 2024 18:00:41 +0000
Files and hashes: 1: 1OT0Avd6nWii_00VRYokoD3NB8c.crl (hash: xcx4P6q+OyYLxKf3onkMUeq664TsVrL9PDW/qdTiSz8=)
2: BhOVPrkz9toZLp5QKMIq_QNipqY.roa (hash: 3zoy6+8GSjKPgYvI7u9JbFY3lHT7krvKwJlTbvx30bE=)
3: WPGyrWoC235yzU45vyz-bc6W1AQ.roa (hash: XehBAyjvCR8siiSvlhE/rO89Jr0BX5XW2XDv42Nv08E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0e:6d:75:13:a3:5a:91:07:3a:d4:6e:20:7b:c3:e9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e4f402f77a9d68a2ff4d15458a24a03dcd07c7
Validity
Not Before: Dec 28 18:00:41 2024 GMT
Not After : Dec 29 18:00:41 2024 GMT
Subject: CN=16c00bb1e3b9ccfebd9a847af546bdb9d0f78070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:e6:7a:d6:59:c9:09:9b:1c:71:c6:a0:b0:
c7:d1:fc:a2:88:d4:63:18:eb:4f:20:06:02:a9:44:
a2:c4:30:53:c0:70:d3:ec:e5:4a:2f:4a:b0:90:c4:
8c:db:93:2c:41:28:ff:f4:01:4b:47:26:9e:63:f6:
8e:1d:22:e7:f5:91:64:e5:11:90:8a:e7:2c:91:ea:
0a:02:6e:0b:fd:f1:b5:34:d0:a4:b3:ef:4a:c5:0e:
96:7f:1d:a9:67:4f:f5:36:3a:67:ad:98:7c:5c:26:
42:d4:cc:8a:7e:2e:12:b8:d5:7d:ab:1e:f3:c2:59:
55:7c:d1:e4:2c:79:c6:0e:84:0e:f0:47:45:84:a0:
32:c4:26:e7:3b:6c:3e:42:cb:90:2d:a7:84:0f:76:
7c:b3:cb:53:ed:fc:da:8a:98:ce:4d:84:3d:04:42:
9f:48:4f:a6:94:08:fe:9c:84:fc:a1:b7:08:69:13:
e9:26:71:20:91:5c:e7:6e:7e:e1:a2:61:30:9b:4c:
1d:88:9a:c3:1e:b1:f7:b6:36:5f:22:c2:c2:77:cb:
5d:aa:be:28:6f:96:e3:47:57:a7:e3:a9:56:d6:3d:
22:d3:94:b6:77:1c:4b:6f:b6:bf:e8:7e:2d:ad:c0:
b6:fe:5c:6e:70:ea:fc:03:67:5d:2e:ce:32:02:8c:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C0:0B:B1:E3:B9:CC:FE:BD:9A:84:7A:F5:46:BD:B9:D0:F7:80:70
X509v3 Authority Key Identifier:
keyid:D4:E4:F4:02:F7:7A:9D:68:A2:FF:4D:15:45:8A:24:A0:3D:CD:07:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OT0Avd6nWii_00VRYokoD3NB8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d7d296-16b5-491d-958f-0f387a081db0/1/1OT0Avd6nWii_00VRYokoD3NB8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/d7d296-16b5-491d-958f-0f387a081db0/1/1OT0Avd6nWii_00VRYokoD3NB8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:69:b9:75:11:40:24:9c:3f:70:3b:ad:d1:84:d0:46:92:78:
11:94:d2:8d:ac:c4:2c:40:ec:80:3b:41:d8:ff:da:0c:67:35:
99:6b:5a:9e:e6:61:f0:3a:f6:f0:c3:0e:28:54:57:6e:3a:bd:
86:5a:03:96:0e:f9:46:61:36:07:fc:74:52:a2:5c:33:26:4e:
9f:fb:8e:35:f3:3e:19:70:54:74:c6:82:57:63:5b:fb:11:a8:
8e:53:43:05:4f:0a:7b:6d:5e:a1:01:0d:ff:e4:07:44:57:3f:
3f:b0:b8:ae:84:2d:e5:a7:1a:93:2b:82:f0:fa:43:0a:d6:ad:
4f:a6:d1:4b:05:57:93:73:3b:86:bf:31:92:21:2b:28:e8:fa:
6e:ad:f3:e9:d1:fc:d7:9b:a0:49:23:b2:70:4e:75:02:24:73:
0f:f9:39:f8:38:6a:9b:a7:9a:a7:40:1c:78:c8:d7:49:cf:1f:
c8:d6:ea:5d:0d:4f:e1:2f:d4:91:1a:30:f7:fe:b2:5f:8d:10:
c1:94:4e:73:90:d5:23:09:ec:3b:32:d4:da:91:46:56:81:36:
6b:96:61:7f:6a:33:05:3f:e6:0c:f1:dd:c1:35:ff:2f:89:68:
82:c6:58:2a:6d:f7:8e:1c:87:2d:fa:f0:a7:d2:4f:68:30:f6:
12:21:ee:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZQObXUTo1qRBzrUbiB7w+n6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZTRmNDAyZjc3YTlkNjhhMmZmNGQxNTQ1OGEyNGEwM2Rj
ZDA3YzcwHhcNMjQxMjI4MTgwMDQxWhcNMjQxMjI5MTgwMDQxWjAzMTEwLwYDVQQD
EygxNmMwMGJiMWUzYjljY2ZlYmQ5YTg0N2FmNTQ2YmRiOWQwZjc4MDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2vmetZZyQmbHHHGoLDH0fyiiNRj
GOtPIAYCqUSixDBTwHDT7OVKL0qwkMSM25MsQSj/9AFLRyaeY/aOHSLn9ZFk5RGQ
iucskeoKAm4L/fG1NNCks+9KxQ6Wfx2pZ0/1NjpnrZh8XCZC1MyKfi4SuNV9qx7z
wllVfNHkLHnGDoQO8EdFhKAyxCbnO2w+QsuQLaeED3Z8s8tT7fzaipjOTYQ9BEKf
SE+mlAj+nIT8obcIaRPpJnEgkVznbn7homEwm0wdiJrDHrH3tjZfIsLCd8tdqr4o
b5bjR1en46lW1j0i05S2dxxLb7a/6H4trcC2/lxucOr8A2ddLs4yAowEmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbAC7Hjucz+vZqEevVGvbnQ94BwMB8GA1UdIwQY
MBaAFNTk9AL3ep1oov9NFUWKJKA9zQfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU9UMEF2ZDZuV2lpXzAwVlJZb2tvRDNOQjhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kN2QyOTYtMTZiNS00OTFkLTk1OGYt
MGYzODdhMDgxZGIwLzEvMU9UMEF2ZDZuV2lpXzAwVlJZb2tvRDNOQjhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9kN2QyOTYtMTZiNS00OTFkLTk1OGYtMGYzODdhMDgxZGIw
LzEvMU9UMEF2ZDZuV2lpXzAwVlJZb2tvRDNOQjhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVGm5dRFA
JJw/cDut0YTQRpJ4EZTSjazELEDsgDtB2P/aDGc1mWtanuZh8Dr28MMOKFRXbjq9
hloDlg75RmE2B/x0UqJcMyZOn/uONfM+GXBUdMaCV2Nb+xGojlNDBU8Ke21eoQEN
/+QHRFc/P7C4roQt5acakyuC8PpDCtatT6bRSwVXk3M7hr8xkiErKOj6bq3z6dH8
15ugSSOycE51AiRzD/k5+Dhqm6eap0AceMjXSc8fyNbqXQ1P4S/UkRow9/6yX40Q
wZROc5DVIwnsOzLU2pFGVoE2a5Zhf2ozBT/mDPHdwTX/L4logsZYKm33jhyHLfrw
p9JPaDD2EiHuVg==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:32:44 2025 by rpki-client