Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5704f7-7e49-4701-9ea5-6a806c88f852/1/OuEFRh8GXOSxt7YPYU4-K__j__M.mft
File: OuEFRh8GXOSxt7YPYU4-K__j__M.mft (raw, json)
Hash identifier: r6bDEBMtOWoXv116+1/Omrz8qtVAHLQAO+w+J8ui7DU=
Subject key identifier: B3:51:92:52:95:49:56:BA:15:49:BE:A3:90:67:E0:41:F1:7B:3E:74
Authority key identifier: 3A:E1:05:46:1F:06:5C:E4:B1:B7:B6:0F:61:4E:3E:2B:FF:E3:FF:F3
Certificate issuer: /CN=3ae105461f065ce4b1b7b60f614e3e2bffe3fff3
Certificate serial: 0194D2FB18702BD1113FA6468745EB171EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuEFRh8GXOSxt7YPYU4-K__j__M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5704f7-7e49-4701-9ea5-6a806c88f852/1/OuEFRh8GXOSxt7YPYU4-K__j__M.mft
Manifest number: 0BB7
Signing time: Tue 04 Feb 2025 22:00:58 +0000
Manifest this update: Tue 04 Feb 2025 22:00:58 +0000
Manifest next update: Wed 05 Feb 2025 22:00:58 +0000
Files and hashes: 1: OuEFRh8GXOSxt7YPYU4-K__j__M.crl (hash: 8POs9H7lwTVJ3kgJNO3Xk5sp8BVk/+h+wlugGVBUuKo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d2:fb:18:70:2b:d1:11:3f:a6:46:87:45:eb:17:1e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae105461f065ce4b1b7b60f614e3e2bffe3fff3
Validity
Not Before: Feb 4 22:00:58 2025 GMT
Not After : Feb 5 22:00:58 2025 GMT
Subject: CN=b3519252954956ba1549bea39067e041f17b3e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:57:2f:53:88:52:54:a1:f3:d0:d1:20:d0:
a5:c0:55:24:2d:cb:a4:9d:70:a1:ca:ac:8e:e9:3d:
b0:25:db:fa:2d:50:6f:41:54:96:7c:c0:c1:c0:d1:
5c:c8:65:02:23:41:0a:2a:c4:f1:0f:47:41:a2:af:
9b:e6:61:86:20:e1:6f:01:cc:52:91:a0:58:8d:c6:
91:30:f4:89:e9:fc:ee:3c:07:6a:47:7f:44:2e:2e:
8d:5c:27:5f:82:4b:6b:2e:31:c0:4c:02:0f:b2:92:
06:9e:7f:23:b5:be:cc:04:57:d4:44:1b:fe:50:10:
37:e0:ec:fa:ab:3d:a1:d3:c3:ac:5f:63:88:2a:84:
97:8e:ca:39:7f:b8:b6:db:64:6a:7b:23:52:b5:2a:
71:96:8c:ce:d3:e8:af:d0:b6:05:29:6b:85:75:3e:
2a:6a:f3:81:8e:3c:0d:cf:6b:36:77:1c:56:c2:62:
ca:b8:b6:33:8c:40:a4:d7:ab:1b:25:fa:80:10:a8:
fc:28:47:f4:72:dd:90:14:48:65:c2:08:5d:24:3c:
32:04:e7:4c:c9:f3:a8:83:da:0a:47:4e:18:48:84:
12:aa:c3:7b:8b:73:25:93:8c:dd:18:a5:76:cc:3f:
d6:30:e5:25:f5:51:2b:08:22:ce:2f:19:78:8f:44:
88:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:51:92:52:95:49:56:BA:15:49:BE:A3:90:67:E0:41:F1:7B:3E:74
X509v3 Authority Key Identifier:
keyid:3A:E1:05:46:1F:06:5C:E4:B1:B7:B6:0F:61:4E:3E:2B:FF:E3:FF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuEFRh8GXOSxt7YPYU4-K__j__M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5704f7-7e49-4701-9ea5-6a806c88f852/1/OuEFRh8GXOSxt7YPYU4-K__j__M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5704f7-7e49-4701-9ea5-6a806c88f852/1/OuEFRh8GXOSxt7YPYU4-K__j__M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:82:6a:50:7b:32:bc:34:e6:22:f1:86:91:3b:2e:33:06:7b:
e5:3d:57:3b:cb:11:7c:a8:13:af:87:dc:f4:91:b3:4b:eb:11:
63:a6:20:b3:8b:de:ad:4f:bc:a3:72:db:fb:e1:d9:b4:03:c3:
75:fa:cc:fb:a3:1a:63:22:a4:23:b0:03:a9:f8:83:3d:71:27:
27:06:e7:42:e0:da:b7:93:05:97:11:b2:7e:c7:ba:9b:96:e8:
60:55:58:a8:06:df:fa:76:34:6d:3d:9b:46:59:3a:dd:54:6c:
52:22:2c:f4:d3:5a:9c:0a:8f:62:ee:83:d6:aa:a3:fb:0c:25:
90:44:e4:9d:88:7a:b9:b0:74:05:99:84:98:98:53:a7:21:7f:
b1:c9:0e:78:d9:f4:3a:03:9d:f7:6d:87:1f:3b:ca:ce:87:38:
a3:e1:37:66:0a:68:98:46:97:11:6b:90:67:ab:fe:65:47:c3:
46:43:7a:a1:df:02:11:e7:fa:a2:a4:de:cd:85:b3:8b:9e:00:
b5:ea:00:b1:b4:86:23:bd:41:7c:b3:90:42:c0:47:27:a9:4e:
94:d2:64:8e:b5:f5:2b:f6:ee:1f:01:56:91:bc:7d:2b:37:03:
47:d9:83:37:76:28:5f:10:65:2e:ef:00:b9:c9:6e:d1:47:f2:
c9:32:8b:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTS+xhwK9ERP6ZGh0XrFx7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZTEwNTQ2MWYwNjVjZTRiMWI3YjYwZjYxNGUzZTJiZmZl
M2ZmZjMwHhcNMjUwMjA0MjIwMDU4WhcNMjUwMjA1MjIwMDU4WjAzMTEwLwYDVQQD
EyhiMzUxOTI1Mjk1NDk1NmJhMTU0OWJlYTM5MDY3ZTA0MWYxN2IzZTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPdXL1OIUlSh89DRINClwFUkLcuk
nXChyqyO6T2wJdv6LVBvQVSWfMDBwNFcyGUCI0EKKsTxD0dBoq+b5mGGIOFvAcxS
kaBYjcaRMPSJ6fzuPAdqR39ELi6NXCdfgktrLjHATAIPspIGnn8jtb7MBFfURBv+
UBA34Oz6qz2h08OsX2OIKoSXjso5f7i222RqeyNStSpxlozO0+iv0LYFKWuFdT4q
avOBjjwNz2s2dxxWwmLKuLYzjECk16sbJfqAEKj8KEf0ct2QFEhlwghdJDwyBOdM
yfOog9oKR04YSIQSqsN7i3Mlk4zdGKV2zD/WMOUl9VErCCLOLxl4j0SIMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLNRklKVSVa6FUm+o5Bn4EHxez50MB8GA1UdIwQY
MBaAFDrhBUYfBlzksbe2D2FOPiv/4//zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3VFRlJoOEdYT1N4dDdZUFlVNC1LX19qX19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81NzA0ZjctN2U0OS00NzAxLTllYTUt
NmE4MDZjODhmODUyLzEvT3VFRlJoOEdYT1N4dDdZUFlVNC1LX19qX19NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81NzA0ZjctN2U0OS00NzAxLTllYTUtNmE4MDZjODhmODUy
LzEvT3VFRlJoOEdYT1N4dDdZUFlVNC1LX19qX19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4JqUHsy
vDTmIvGGkTsuMwZ75T1XO8sRfKgTr4fc9JGzS+sRY6Ygs4verU+8o3Lb++HZtAPD
dfrM+6MaYyKkI7ADqfiDPXEnJwbnQuDat5MFlxGyfse6m5boYFVYqAbf+nY0bT2b
Rlk63VRsUiIs9NNanAqPYu6D1qqj+wwlkETknYh6ubB0BZmEmJhTpyF/sckOeNn0
OgOd922HHzvKzoc4o+E3ZgpomEaXEWuQZ6v+ZUfDRkN6od8CEef6oqTezYWzi54A
teoAsbSGI71BfLOQQsBHJ6lOlNJkjrX1K/buHwFWkbx9KzcDR9mDN3YoXxBlLu8A
uclu0UfyyTKLBA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:26:27 2025 by rpki-client