Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/d6c513-6634-4a13-a51e-6a5ad10c42dc/1/oSTU07DkSZUnHsa18coaXC0asb8.mft
File: oSTU07DkSZUnHsa18coaXC0asb8.mft (raw, json)
Hash identifier: 0wjrWQWzdvQfYZTsTAl4aCY+u51/R0uWhaVLhK97K7s=
Subject key identifier: 53:EE:3A:30:B8:90:61:0E:3E:05:D7:2C:B4:6C:FC:DA:9D:26:8F:9C
Authority key identifier: A1:24:D4:D3:B0:E4:49:95:27:1E:C6:B5:F1:CA:1A:5C:2D:1A:B1:BF
Certificate issuer: /CN=a124d4d3b0e44995271ec6b5f1ca1a5c2d1ab1bf
Certificate serial: 019487A9A074B0A28B548968C28F975DD0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTU07DkSZUnHsa18coaXC0asb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/d6c513-6634-4a13-a51e-6a5ad10c42dc/1/oSTU07DkSZUnHsa18coaXC0asb8.mft
Manifest number: 09FB
Signing time: Tue 21 Jan 2025 07:00:28 +0000
Manifest this update: Tue 21 Jan 2025 07:00:28 +0000
Manifest next update: Wed 22 Jan 2025 07:00:28 +0000
Files and hashes: 1: oSTU07DkSZUnHsa18coaXC0asb8.crl (hash: jAwYK82b420LkoUE9ijoyjxIMW21+6LxgsN7z7t0IE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:87:a9:a0:74:b0:a2:8b:54:89:68:c2:8f:97:5d:d0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a124d4d3b0e44995271ec6b5f1ca1a5c2d1ab1bf
Validity
Not Before: Jan 21 07:00:28 2025 GMT
Not After : Jan 22 07:00:28 2025 GMT
Subject: CN=53ee3a30b890610e3e05d72cb46cfcda9d268f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d6:9f:f5:ae:d0:6c:03:8a:df:d2:c3:b3:77:
b3:93:d0:22:69:20:23:91:cd:3c:ac:6e:0c:8b:4a:
00:f7:64:e9:24:75:28:07:a0:80:0d:0f:16:df:f2:
84:07:82:52:80:1f:41:b8:a9:7a:12:fb:93:ec:ed:
36:a2:56:b5:b1:1a:79:99:9a:38:b8:9c:b7:17:d0:
fb:90:2a:34:67:02:d9:8e:e4:81:54:64:a2:ba:e1:
2d:78:00:89:d8:7d:2a:1a:11:06:67:14:82:22:ab:
da:d8:72:4c:41:ed:91:71:91:c4:69:53:0f:15:66:
d5:50:59:ad:c5:c1:aa:2b:45:3a:6d:19:b5:cc:ea:
0c:a7:72:36:51:0c:d2:ea:d8:26:fc:f1:19:95:eb:
c0:cb:d9:0c:1d:fb:40:c8:88:63:40:1a:26:6d:5d:
79:87:35:26:7e:d8:c7:57:93:57:ac:ea:39:62:41:
fc:50:dd:c2:c1:05:9a:9b:7e:7a:cc:b2:dc:67:01:
80:2f:32:27:b4:3d:36:1c:90:22:71:d5:21:3a:06:
9e:c7:a0:e9:0b:42:da:d4:2c:1f:d6:68:d1:80:f0:
d2:6f:92:45:fb:26:9d:8d:62:9c:fa:ad:ba:a1:6d:
2b:3b:6b:34:2f:6c:55:78:17:fa:17:68:bb:5a:b9:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EE:3A:30:B8:90:61:0E:3E:05:D7:2C:B4:6C:FC:DA:9D:26:8F:9C
X509v3 Authority Key Identifier:
keyid:A1:24:D4:D3:B0:E4:49:95:27:1E:C6:B5:F1:CA:1A:5C:2D:1A:B1:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTU07DkSZUnHsa18coaXC0asb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d6c513-6634-4a13-a51e-6a5ad10c42dc/1/oSTU07DkSZUnHsa18coaXC0asb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d6c513-6634-4a13-a51e-6a5ad10c42dc/1/oSTU07DkSZUnHsa18coaXC0asb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:25:24:45:d2:6c:25:fc:66:64:91:3b:aa:3b:91:62:51:9d:
e2:bf:6c:6c:21:57:6e:15:f3:43:18:e7:55:e3:d4:d7:ce:fe:
64:2e:b1:74:02:be:49:9d:78:53:fc:aa:72:b8:61:14:65:33:
34:94:40:9f:d3:e9:08:a6:85:c0:9a:df:0f:56:09:4d:88:0e:
56:b7:59:88:16:12:e0:e3:06:dd:76:29:cd:77:99:d8:70:a4:
b6:16:4e:0b:9b:8f:d8:de:31:1a:84:ba:77:ff:55:38:bd:91:
3a:b7:20:e8:80:d3:38:48:4d:0c:c6:94:00:d9:c5:04:59:8b:
c6:03:00:77:69:30:f3:31:7f:a3:a7:7d:53:07:de:f8:0c:51:
d5:59:bc:dc:6a:07:38:78:9d:df:62:39:0a:a4:74:06:19:96:
78:9f:65:b8:a5:5a:10:6f:88:1b:df:83:f9:b5:57:34:df:3c:
c6:55:5f:49:8d:15:a1:fd:b7:5a:a4:3f:45:67:ee:80:fa:59:
1a:e9:a8:cf:ac:e5:7b:83:49:7c:49:bf:43:73:3b:31:7e:4e:
2d:7a:03:a3:e7:47:58:f1:f6:12:76:42:b4:57:ae:87:cf:8e:
79:48:f3:ff:a9:5b:5b:ae:97:4e:94:35:b7:ce:51:9c:c0:c6:
56:93:8f:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSHqaB0sKKLVIlowo+XXdDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMjRkNGQzYjBlNDQ5OTUyNzFlYzZiNWYxY2ExYTVjMmQx
YWIxYmYwHhcNMjUwMTIxMDcwMDI4WhcNMjUwMTIyMDcwMDI4WjAzMTEwLwYDVQQD
Eyg1M2VlM2EzMGI4OTA2MTBlM2UwNWQ3MmNiNDZjZmNkYTlkMjY4ZjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2taf9a7QbAOK39LDs3ezk9AiaSAj
kc08rG4Mi0oA92TpJHUoB6CADQ8W3/KEB4JSgB9BuKl6EvuT7O02ola1sRp5mZo4
uJy3F9D7kCo0ZwLZjuSBVGSiuuEteACJ2H0qGhEGZxSCIqva2HJMQe2RcZHEaVMP
FWbVUFmtxcGqK0U6bRm1zOoMp3I2UQzS6tgm/PEZlevAy9kMHftAyIhjQBombV15
hzUmftjHV5NXrOo5YkH8UN3CwQWam356zLLcZwGALzIntD02HJAicdUhOgaex6Dp
C0La1Cwf1mjRgPDSb5JF+yadjWKc+q26oW0rO2s0L2xVeBf6F2i7Wrl7CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFPuOjC4kGEOPgXXLLRs/NqdJo+cMB8GA1UdIwQY
MBaAFKEk1NOw5EmVJx7GtfHKGlwtGrG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1NUVTA3RGtTWlVuSHNhMThjb2FYQzBhc2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9kNmM1MTMtNjYzNC00YTEzLWE1MWUt
NmE1YWQxMGM0MmRjLzEvb1NUVTA3RGtTWlVuSHNhMThjb2FYQzBhc2I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9kNmM1MTMtNjYzNC00YTEzLWE1MWUtNmE1YWQxMGM0MmRj
LzEvb1NUVTA3RGtTWlVuSHNhMThjb2FYQzBhc2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyUkRdJs
JfxmZJE7qjuRYlGd4r9sbCFXbhXzQxjnVePU187+ZC6xdAK+SZ14U/yqcrhhFGUz
NJRAn9PpCKaFwJrfD1YJTYgOVrdZiBYS4OMG3XYpzXeZ2HCkthZOC5uP2N4xGoS6
d/9VOL2ROrcg6IDTOEhNDMaUANnFBFmLxgMAd2kw8zF/o6d9Uwfe+AxR1Vm83GoH
OHid32I5CqR0BhmWeJ9luKVaEG+IG9+D+bVXNN88xlVfSY0Vof23WqQ/RWfugPpZ
Gumoz6zle4NJfEm/Q3M7MX5OLXoDo+dHWPH2EnZCtFeuh8+OeUjz/6lbW66XTpQ1
t85RnMDGVpOP9w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:30 2025 by rpki-client