Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/okUQJcYzmmEXEe_8LPg-PXnybug.mft
File: okUQJcYzmmEXEe_8LPg-PXnybug.mft (raw, json)
Hash identifier: FfyxKjQMzDGrobdHOQRuKFUXdwkjRC4gX6lX/YbvKLM=
Subject key identifier: 9B:B4:22:D1:6E:51:E4:58:C5:5B:BE:E7:C2:80:F7:ED:A5:AC:56:0B
Authority key identifier: A2:45:10:25:C6:33:9A:61:17:11:EF:FC:2C:F8:3E:3D:79:F2:6E:E8
Certificate issuer: /CN=a2451025c6339a611711effc2cf83e3d79f26ee8
Certificate serial: 0194A6909A7080B863956EC52269799E49C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/okUQJcYzmmEXEe_8LPg-PXnybug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/okUQJcYzmmEXEe_8LPg-PXnybug.mft
Manifest number: 83
Signing time: Mon 27 Jan 2025 07:01:22 +0000
Manifest this update: Mon 27 Jan 2025 07:01:22 +0000
Manifest next update: Tue 28 Jan 2025 07:01:22 +0000
Files and hashes: 1: okUQJcYzmmEXEe_8LPg-PXnybug.crl (hash: 0cqZ0x1+lOM4t1E7PKKvw1AM9+EVfBmiqXCseqX9tnQ=)
2: plCCiJv7EwuYY3WvPYFXgu2S4y4.roa (hash: 90RDlYth3mMRrS/YOLuJ1e0IS2bMcBg9b0jfa1Xa54o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a6:90:9a:70:80:b8:63:95:6e:c5:22:69:79:9e:49:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2451025c6339a611711effc2cf83e3d79f26ee8
Validity
Not Before: Jan 27 07:01:22 2025 GMT
Not After : Jan 28 07:01:22 2025 GMT
Subject: CN=9bb422d16e51e458c55bbee7c280f7eda5ac560b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d4:44:5e:51:00:eb:7b:fb:3b:88:d1:6d:df:
5a:3a:56:4d:5a:cf:88:43:41:88:25:2c:19:8f:e4:
5c:c4:95:4b:0f:30:24:2d:46:33:9d:11:3a:0b:b3:
fb:01:3b:2f:08:02:ce:27:e1:77:6a:20:c2:02:4f:
26:b4:9c:e2:a4:a7:4f:40:63:5b:5a:7c:55:0a:4e:
45:5f:ba:f1:f2:8f:9c:6e:59:4b:1c:a3:7b:fc:38:
85:c5:3a:91:9c:d6:45:be:7c:46:69:74:b1:62:32:
33:3c:ea:a8:2c:7a:91:56:4a:18:a9:0e:74:e7:a4:
22:86:a3:ef:d6:b4:e7:8c:e4:0b:98:c7:aa:f8:9d:
92:7c:62:bb:ac:43:ca:e0:bd:a9:5b:a6:f4:a9:73:
09:40:6c:d1:a4:8c:0f:45:59:89:a4:ec:3c:94:2b:
88:32:7b:e3:7c:c8:33:60:fd:c4:58:94:18:93:20:
e1:a1:ae:6c:16:de:d6:9c:cb:9c:f1:d2:85:15:47:
ec:95:7a:12:81:ed:d8:68:d9:c5:b7:0b:30:46:96:
37:4d:f9:d2:dd:5f:62:92:2b:07:cd:1a:de:1b:db:
54:41:2e:5a:b5:08:70:ca:38:05:0a:4c:b4:74:a4:
78:f4:28:68:8a:8d:c3:6a:6a:de:53:93:3c:6e:82:
e9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B4:22:D1:6E:51:E4:58:C5:5B:BE:E7:C2:80:F7:ED:A5:AC:56:0B
X509v3 Authority Key Identifier:
keyid:A2:45:10:25:C6:33:9A:61:17:11:EF:FC:2C:F8:3E:3D:79:F2:6E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/okUQJcYzmmEXEe_8LPg-PXnybug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/okUQJcYzmmEXEe_8LPg-PXnybug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9eed0f-3793-42fa-9536-513895468dd7/1/okUQJcYzmmEXEe_8LPg-PXnybug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b2:44:b6:e8:6e:01:5e:7e:c1:53:59:ec:a9:5c:45:2c:e5:
6e:ed:9d:43:55:6f:7c:d9:80:a3:ef:d2:29:5e:a0:31:3d:60:
df:0f:96:e6:e1:ba:cc:f4:1d:6e:89:5a:cd:00:07:15:a2:61:
a8:93:cb:32:10:25:7e:10:2e:13:fd:18:ce:84:b4:28:d8:f2:
14:ea:28:5c:ac:43:e9:e7:5f:9a:54:bd:1b:57:72:9a:10:7f:
a7:9c:50:a8:32:95:12:69:70:eb:92:04:01:83:44:f3:73:43:
5c:fe:b2:02:38:c7:18:8d:de:cb:3c:fb:91:0a:7e:d3:c5:80:
c7:09:a9:98:91:60:79:b2:07:c1:4e:09:52:e8:00:9c:a3:01:
c1:7b:e7:4c:83:25:fd:fe:ac:70:7f:76:76:7e:a5:95:fd:81:
72:b6:eb:b3:44:30:d0:44:e0:da:05:67:e5:43:41:ca:4f:22:
1e:3c:f0:1c:51:1b:10:7d:00:7e:60:81:e6:51:1d:00:a9:2b:
6a:56:cd:e8:15:80:6f:b8:42:c1:76:28:a9:b5:0d:6c:6f:21:
16:ee:a7:04:f3:a9:ce:11:4f:16:ff:ee:41:13:4e:14:53:50:
e9:0c:d6:3d:30:b9:5a:65:be:d5:c4:25:d7:75:65:e6:48:3b:
49:19:4e:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSmkJpwgLhjlW7FIml5nknDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNDUxMDI1YzYzMzlhNjExNzExZWZmYzJjZjgzZTNkNzlm
MjZlZTgwHhcNMjUwMTI3MDcwMTIyWhcNMjUwMTI4MDcwMTIyWjAzMTEwLwYDVQQD
Eyg5YmI0MjJkMTZlNTFlNDU4YzU1YmJlZTdjMjgwZjdlZGE1YWM1NjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9REXlEA63v7O4jRbd9aOlZNWs+I
Q0GIJSwZj+RcxJVLDzAkLUYznRE6C7P7ATsvCALOJ+F3aiDCAk8mtJzipKdPQGNb
WnxVCk5FX7rx8o+cbllLHKN7/DiFxTqRnNZFvnxGaXSxYjIzPOqoLHqRVkoYqQ50
56QihqPv1rTnjOQLmMeq+J2SfGK7rEPK4L2pW6b0qXMJQGzRpIwPRVmJpOw8lCuI
MnvjfMgzYP3EWJQYkyDhoa5sFt7WnMuc8dKFFUfslXoSge3YaNnFtwswRpY3TfnS
3V9ikisHzRreG9tUQS5atQhwyjgFCky0dKR49Choio3DamreU5M8boLpnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJu0ItFuUeRYxVu+58KA9+2lrFYLMB8GA1UdIwQY
MBaAFKJFECXGM5phFxHv/Cz4Pj158m7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2tVUUpjWXptbUVYRWVfOExQZy1QWG55YnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZWVkMGYtMzc5My00MmZhLTk1MzYt
NTEzODk1NDY4ZGQ3LzEvb2tVUUpjWXptbUVYRWVfOExQZy1QWG55YnVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85ZWVkMGYtMzc5My00MmZhLTk1MzYtNTEzODk1NDY4ZGQ3
LzEvb2tVUUpjWXptbUVYRWVfOExQZy1QWG55YnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP7JEtuhu
AV5+wVNZ7KlcRSzlbu2dQ1VvfNmAo+/SKV6gMT1g3w+W5uG6zPQdbolazQAHFaJh
qJPLMhAlfhAuE/0YzoS0KNjyFOooXKxD6edfmlS9G1dymhB/p5xQqDKVEmlw65IE
AYNE83NDXP6yAjjHGI3eyzz7kQp+08WAxwmpmJFgebIHwU4JUugAnKMBwXvnTIMl
/f6scH92dn6llf2Bcrbrs0Qw0ETg2gVn5UNByk8iHjzwHFEbEH0AfmCB5lEdAKkr
albN6BWAb7hCwXYoqbUNbG8hFu6nBPOpzhFPFv/uQRNOFFNQ6QzWPTC5WmW+1cQl
13Vl5kg7SRlOaQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 03:15:57 2025 by rpki-client