Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f7dee5-a6dd-42a4-810d-dad783c6b0a3/1/OriTU3DoYuD-0-8Re_EErXXYdRI.mft
File: OriTU3DoYuD-0-8Re_EErXXYdRI.mft (raw, json)
Hash identifier: b35jnXXuzd5FWIvlvHJj8OpN7Y77QInPIFIOPubXsW8=
Subject key identifier: 04:A3:77:CD:FE:CB:A2:05:E9:19:D2:1D:8F:F5:0D:E9:D4:CF:86:57
Authority key identifier: 3A:B8:93:53:70:E8:62:E0:FE:D3:EF:11:7B:F1:04:AD:75:D8:75:12
Certificate issuer: /CN=3ab8935370e862e0fed3ef117bf104ad75d87512
Certificate serial: 0195B7B8691D17B698697D9BC11EBA78F605
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OriTU3DoYuD-0-8Re_EErXXYdRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f7dee5-a6dd-42a4-810d-dad783c6b0a3/1/OriTU3DoYuD-0-8Re_EErXXYdRI.mft
Manifest number: 63
Signing time: Fri 21 Mar 2025 08:01:10 +0000
Manifest this update: Fri 21 Mar 2025 08:01:10 +0000
Manifest next update: Sat 22 Mar 2025 08:01:10 +0000
Files and hashes: 1: OriTU3DoYuD-0-8Re_EErXXYdRI.crl (hash: 8ogJLrkacbtHsLm8ZvsWa43r1E4Q14G+QTtXHg6RaEw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b7:b8:69:1d:17:b6:98:69:7d:9b:c1:1e:ba:78:f6:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ab8935370e862e0fed3ef117bf104ad75d87512
Validity
Not Before: Mar 21 08:01:10 2025 GMT
Not After : Mar 22 08:01:10 2025 GMT
Subject: CN=04a377cdfecba205e919d21d8ff50de9d4cf8657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6c:01:85:c2:c5:0e:c6:1c:92:ae:d0:4a:bd:
12:76:c8:94:c2:6f:e1:ed:bf:28:8c:55:1b:56:ca:
f9:b0:9b:b5:c7:14:67:97:c4:94:cb:5b:16:bb:8a:
65:ea:09:f6:53:97:56:c0:49:a5:45:c5:4a:49:f1:
bf:99:f1:49:4e:00:65:91:79:16:73:b7:47:4d:f7:
34:49:4c:a6:e3:d6:39:41:7b:e9:e7:64:3a:91:8f:
2e:8f:59:b7:57:2e:b1:35:8b:a7:b5:aa:ec:6e:96:
9a:e1:2b:c5:ae:4f:ce:4f:a0:99:81:e5:74:33:43:
8d:45:17:8d:62:48:07:d8:a7:8b:fe:58:97:d8:03:
48:17:3a:80:1d:cd:be:cd:eb:ae:8a:eb:17:f2:28:
7d:f6:c7:6c:1c:3d:30:76:9d:f8:d6:1b:94:0c:29:
ad:1a:bd:40:5f:eb:9c:a7:8e:0d:70:0a:bb:2a:b6:
d9:40:a4:ac:58:ae:cf:53:bc:23:b1:2a:5b:f2:7b:
9b:58:3d:ad:47:fc:c5:1d:fc:cf:02:3b:ca:4a:db:
fc:17:dd:59:d9:dd:ae:c5:9c:10:6d:ce:53:e0:55:
b9:48:20:8d:46:1f:8c:ae:17:f2:7f:50:51:58:ab:
c1:2d:28:20:1a:b1:11:fe:fe:9f:10:82:27:ff:32:
bd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A3:77:CD:FE:CB:A2:05:E9:19:D2:1D:8F:F5:0D:E9:D4:CF:86:57
X509v3 Authority Key Identifier:
keyid:3A:B8:93:53:70:E8:62:E0:FE:D3:EF:11:7B:F1:04:AD:75:D8:75:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OriTU3DoYuD-0-8Re_EErXXYdRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f7dee5-a6dd-42a4-810d-dad783c6b0a3/1/OriTU3DoYuD-0-8Re_EErXXYdRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f7dee5-a6dd-42a4-810d-dad783c6b0a3/1/OriTU3DoYuD-0-8Re_EErXXYdRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:0e:b5:df:d7:c5:34:01:c3:15:a1:e0:a9:09:2f:83:81:73:
ae:66:47:60:13:21:86:42:bc:5e:eb:2e:d6:3c:51:47:b5:e1:
35:5e:7b:8e:d5:e5:0d:51:b5:3b:e4:40:a6:64:40:34:c6:d9:
9e:9c:02:53:22:39:0e:77:d7:a5:f3:47:d1:96:be:cd:1f:bf:
21:cc:aa:d7:4c:a3:bd:e4:1d:4c:6b:eb:d2:82:ac:32:8e:67:
f0:92:e2:6e:10:8c:00:a7:bb:2e:ed:c2:94:a2:97:6e:ac:e4:
03:b6:ba:21:37:ce:57:71:a3:30:09:a1:f5:20:0e:4d:04:35:
04:8b:50:e1:a3:11:97:d7:f8:e9:12:b9:6a:6d:cb:a2:ff:bd:
4e:18:11:1c:1d:04:df:7b:16:5b:b6:cf:e3:e1:30:d3:48:64:
0d:83:a4:14:64:a5:51:29:1f:8c:11:dc:04:66:3d:e4:22:8d:
de:11:d7:8c:01:63:0f:56:45:f8:51:cc:e1:52:d4:4c:b7:8c:
24:e8:fd:40:d0:cd:65:a6:37:27:38:b9:04:ba:e5:ce:e9:2f:
50:1a:87:e0:a5:74:dc:1b:f6:cc:2b:f6:67:fb:cc:dc:18:54:
8c:f4:22:35:6d:f6:a0:08:d3:b1:e1:c4:a7:48:1f:70:64:33:
f4:28:bc:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZW3uGkdF7aYaX2bwR66ePYFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYjg5MzUzNzBlODYyZTBmZWQzZWYxMTdiZjEwNGFkNzVk
ODc1MTIwHhcNMjUwMzIxMDgwMTEwWhcNMjUwMzIyMDgwMTEwWjAzMTEwLwYDVQQD
EygwNGEzNzdjZGZlY2JhMjA1ZTkxOWQyMWQ4ZmY1MGRlOWQ0Y2Y4NjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2wBhcLFDsYckq7QSr0SdsiUwm/h
7b8ojFUbVsr5sJu1xxRnl8SUy1sWu4pl6gn2U5dWwEmlRcVKSfG/mfFJTgBlkXkW
c7dHTfc0SUym49Y5QXvp52Q6kY8uj1m3Vy6xNYuntarsbpaa4SvFrk/OT6CZgeV0
M0ONRReNYkgH2KeL/liX2ANIFzqAHc2+zeuuiusX8ih99sdsHD0wdp341huUDCmt
Gr1AX+ucp44NcAq7KrbZQKSsWK7PU7wjsSpb8nubWD2tR/zFHfzPAjvKStv8F91Z
2d2uxZwQbc5T4FW5SCCNRh+Mrhfyf1BRWKvBLSggGrER/v6fEIIn/zK9xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASjd83+y6IF6RnSHY/1DenUz4ZXMB8GA1UdIwQY
MBaAFDq4k1Nw6GLg/tPvEXvxBK112HUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3JpVFUzRG9ZdUQtMC04UmVfRUVyWFhZZFJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mN2RlZTUtYTZkZC00MmE0LTgxMGQt
ZGFkNzgzYzZiMGEzLzEvT3JpVFUzRG9ZdUQtMC04UmVfRUVyWFhZZFJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mN2RlZTUtYTZkZC00MmE0LTgxMGQtZGFkNzgzYzZiMGEz
LzEvT3JpVFUzRG9ZdUQtMC04UmVfRUVyWFhZZFJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQQ6139fF
NAHDFaHgqQkvg4FzrmZHYBMhhkK8Xusu1jxRR7XhNV57jtXlDVG1O+RApmRANMbZ
npwCUyI5DnfXpfNH0Za+zR+/Icyq10yjveQdTGvr0oKsMo5n8JLibhCMAKe7Lu3C
lKKXbqzkA7a6ITfOV3GjMAmh9SAOTQQ1BItQ4aMRl9f46RK5am3Lov+9ThgRHB0E
33sWW7bP4+Ew00hkDYOkFGSlUSkfjBHcBGY95CKN3hHXjAFjD1ZF+FHM4VLUTLeM
JOj9QNDNZaY3Jzi5BLrlzukvUBqH4KV03Bv2zCv2Z/vM3BhUjPQiNW32oAjTseHE
p0gfcGQz9Ci8FA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 14:05:28 2025 by rpki-client