Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/03160f-1f57-4d02-86e7-78d09b48be06/1/O2QqDnSsPSb98b9msXeMNIiEtXc.mft
File: O2QqDnSsPSb98b9msXeMNIiEtXc.mft (raw, json)
Hash identifier: 8dhb7soNAac/AZ8pie+mYUvGG4ND9oaPPaH0JppPWhY=
Subject key identifier: 17:AA:1C:FA:69:6E:53:BB:A7:A8:B1:64:68:EF:6D:7C:9D:EE:C5:A3
Authority key identifier: 3B:64:2A:0E:74:AC:3D:26:FD:F1:BF:66:B1:77:8C:34:88:84:B5:77
Certificate issuer: /CN=3b642a0e74ac3d26fdf1bf66b1778c348884b577
Certificate serial: 016F1B7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2QqDnSsPSb98b9msXeMNIiEtXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/03160f-1f57-4d02-86e7-78d09b48be06/1/O2QqDnSsPSb98b9msXeMNIiEtXc.mft
Manifest number: 01DB
Signing time: Wed 09 Feb 2022 08:16:34 +0000
Manifest this update: Wed 09 Feb 2022 08:16:34 +0000
Manifest next update: Thu 10 Feb 2022 08:16:34 +0000
Files and hashes: 1: GRgTWLUWhElPgzejA186MjYgaWw.roa (hash: c7XcovcHvLz3So7L6h1WHDYf+sk21OPyBmYraA//f7w=)
2: O2QqDnSsPSb98b9msXeMNIiEtXc.crl (hash: K2CKYNiew/zetf/cpCQ0KW68GakU76LLAkcKw1Fwi1s=)
3: gTHQPEKv4J-U2HqA9Q5ay8d3KzA.roa (hash: BY1ixiB0orHpe392dFHdifMXTiy1og1gdBNnFCUt4Us=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24058751 (0x16f1b7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b642a0e74ac3d26fdf1bf66b1778c348884b577
Validity
Not Before: Feb 9 08:16:34 2022 GMT
Not After : Feb 10 08:16:34 2022 GMT
Subject: CN=17aa1cfa696e53bba7a8b16468ef6d7c9deec5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c8:3f:24:86:5f:d4:1d:2d:09:da:e6:c3:53:
4a:35:e5:94:1a:74:f4:cd:a6:5d:34:1e:c7:72:cc:
62:09:f2:dc:b1:74:86:1c:f8:94:31:28:2a:84:df:
f7:5d:84:98:0d:53:58:22:14:97:59:88:25:63:38:
5a:7c:58:3b:fe:08:e2:7d:68:69:dc:0f:b0:59:a8:
4f:2c:5b:02:8c:96:ca:70:47:d5:91:90:6a:7a:36:
f8:cf:bf:fc:2c:1c:39:fc:37:31:cf:9e:e2:99:bf:
8a:48:84:55:f7:c1:97:06:2d:ed:17:19:4f:f6:2b:
e8:d7:31:f2:1f:d1:c3:b1:9e:5e:76:67:2f:8f:04:
9b:98:62:29:2e:47:44:50:ae:7d:30:9f:f2:f1:79:
e3:10:f6:82:9a:48:d0:1e:58:52:f0:95:ab:69:ea:
f2:a6:f2:f6:dc:51:93:68:ae:f2:8f:d8:39:0d:03:
5a:d7:23:38:79:d9:58:b5:0b:29:f4:6e:60:05:62:
1f:27:b6:e4:23:8c:32:fd:75:5e:13:2f:97:9a:df:
a8:da:46:33:3f:24:7c:59:b0:7f:4a:fa:20:5f:cb:
d0:1c:93:53:07:31:d8:f7:0f:d6:3b:01:36:39:c3:
f8:4b:b6:ea:63:92:c5:f4:2c:6c:59:c7:50:34:a4:
fc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AA:1C:FA:69:6E:53:BB:A7:A8:B1:64:68:EF:6D:7C:9D:EE:C5:A3
X509v3 Authority Key Identifier:
keyid:3B:64:2A:0E:74:AC:3D:26:FD:F1:BF:66:B1:77:8C:34:88:84:B5:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2QqDnSsPSb98b9msXeMNIiEtXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/03160f-1f57-4d02-86e7-78d09b48be06/1/O2QqDnSsPSb98b9msXeMNIiEtXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/03160f-1f57-4d02-86e7-78d09b48be06/1/O2QqDnSsPSb98b9msXeMNIiEtXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:89:2c:a3:bd:04:a5:b1:3f:56:2d:10:d3:5c:79:4e:48:43:
fc:b0:dc:89:e7:13:82:cf:b9:a2:f5:3d:1f:15:07:9c:42:4a:
0a:a5:09:3b:37:52:e7:46:7c:c7:ed:12:98:4c:29:03:39:6a:
2d:c0:5a:89:5a:be:f4:f4:06:17:cf:ba:fe:47:b2:67:6e:d8:
e4:17:ea:ac:2b:3c:ee:92:c5:d8:54:bf:0c:77:7a:e8:17:e4:
94:9b:4e:79:78:26:83:07:25:0f:36:0d:3c:bf:bb:19:3a:2e:
52:bf:e9:eb:9c:3c:03:f0:20:01:d7:e4:73:4f:4f:2d:9b:7d:
50:72:3f:5f:6e:ae:6f:b6:ce:c8:27:f3:0f:d6:eb:f4:71:00:
db:e6:fd:45:06:cb:7f:6b:4f:ea:74:a1:66:cb:5b:f2:21:4b:
ba:08:4e:c5:5c:00:d4:da:ee:d4:cc:70:e2:24:df:c3:fb:b2:
e8:5b:e2:8d:3a:bd:08:8c:78:13:d6:51:56:e3:13:55:ba:d2:
c4:e0:67:f3:52:39:c2:69:ef:96:05:7e:0a:d9:ff:7e:a9:59:
aa:57:cb:ba:79:e5:e4:2f:cd:52:97:72:e7:87:49:80:ce:27:
29:18:aa:09:72:76:22:08:25:dd:ba:d7:bf:a1:6c:5e:cc:d4:
99:22:8b:21
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEAW8bfzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
YjY0MmEwZTc0YWMzZDI2ZmRmMWJmNjZiMTc3OGMzNDg4ODRiNTc3MB4XDTIyMDIw
OTA4MTYzNFoXDTIyMDIxMDA4MTYzNFowMzExMC8GA1UEAxMoMTdhYTFjZmE2OTZl
NTNiYmE3YThiMTY0NjhlZjZkN2M5ZGVlYzVhMzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAJ3IPySGX9QdLQna5sNTSjXllBp09M2mXTQex3LMYgny3LF0
hhz4lDEoKoTf912EmA1TWCIUl1mIJWM4WnxYO/4I4n1oadwPsFmoTyxbAoyWynBH
1ZGQano2+M+//CwcOfw3Mc+e4pm/ikiEVffBlwYt7RcZT/Yr6Ncx8h/Rw7GeXnZn
L48Em5hiKS5HRFCufTCf8vF54xD2gppI0B5YUvCVq2nq8qby9txRk2iu8o/YOQ0D
WtcjOHnZWLULKfRuYAViHye25COMMv11XhMvl5rfqNpGMz8kfFmwf0r6IF/L0ByT
Uwcx2PcP1jsBNjnD+Eu26mOSxfQsbFnHUDSk/L0CAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBQXqhz6aW5Tu6eosWRo7218ne7FozAfBgNVHSMEGDAWgBQ7ZCoOdKw9Jv3x
v2axd4w0iIS1dzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L08yUXFEblNzUFNiOThiOW1zWGVNTklpRXRYYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvODgvMDMxNjBmLTFmNTctNGQwMi04NmU3LTc4ZDA5YjQ4YmUwNi8x
L08yUXFEblNzUFNiOThiOW1zWGVNTklpRXRYYy5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODgv
MDMxNjBmLTFmNTctNGQwMi04NmU3LTc4ZDA5YjQ4YmUwNi8xL08yUXFEblNzUFNi
OThiOW1zWGVNTklpRXRYYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAD+JLKO9BKWxP1YtENNceU5IQ/yw
3InnE4LPuaL1PR8VB5xCSgqlCTs3UudGfMftEphMKQM5ai3AWolavvT0BhfPuv5H
smdu2OQX6qwrPO6SxdhUvwx3eugX5JSbTnl4JoMHJQ82DTy/uxk6LlK/6eucPAPw
IAHX5HNPTy2bfVByP19urm+2zsgn8w/W6/RxANvm/UUGy39rT+p0oWbLW/IhS7oI
TsVcANTa7tTMcOIk38P7suhb4o06vQiMeBPWUVbjE1W60sTgZ/NSOcJp75YFfgrZ
/36pWapXy7p55eQvzVKXcueHSYDOJykYqglydiIIJd2617+hbF7M1JkiiyE=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:26 2025 by rpki-client