Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
File: oYRAnlwYO7zDFTX0x-7keCzWe-M.mft (raw, json)
Hash identifier: ur6pjIrI8yvjSXiPij44vQwAoxbA0g1VfX61ZyKOwsc=
Subject key identifier: 80:1E:6E:FA:B4:70:A2:D9:72:82:8E:6B:5C:0A:93:21:35:5B:BB:F5
Authority key identifier: A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
Certificate issuer: /CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Certificate serial: 01962E98C6A07D0E93340AE54D73570697CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
Manifest number: 1112
Signing time: Sun 13 Apr 2025 10:01:26 +0000
Manifest this update: Sun 13 Apr 2025 10:01:26 +0000
Manifest next update: Mon 14 Apr 2025 10:01:26 +0000
Files and hashes: 1: PHcuyK5Isl-tObyHXesNd9QiRP0.roa (hash: rHdHpG4qGbN9ifhvJU1UvmMnc7kX+7rc9pla/vN3kgc=)
2: oYRAnlwYO7zDFTX0x-7keCzWe-M.crl (hash: kP9yWGtb3S/0VnnchrpzYmRhSi4JbcyOQRFfzKEoK+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:98:c6:a0:7d:0e:93:34:0a:e5:4d:73:57:06:97:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a184409e5c183bbcc31535f4c7eee4782cd67be3
Validity
Not Before: Apr 13 10:01:26 2025 GMT
Not After : Apr 14 10:01:26 2025 GMT
Subject: CN=801e6efab470a2d972828e6b5c0a9321355bbbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:3f:b9:ba:3b:f1:64:04:80:f0:c0:25:0a:
18:da:c0:48:a3:2e:fb:a0:21:21:3f:68:74:87:ae:
9d:e1:b6:62:c5:37:3e:ca:f0:a5:47:c0:40:7f:fd:
8b:23:75:02:a9:23:64:c7:6a:a5:50:a8:1e:8a:04:
74:56:67:15:fd:5f:a6:2a:45:c4:fc:59:62:db:c3:
e2:0c:61:44:5c:6e:9b:6f:fd:73:e8:d1:55:b7:36:
9f:a2:95:48:a2:4b:84:3b:f9:0a:d9:a5:81:78:7f:
72:0b:f5:5a:17:5b:96:bb:5d:d2:39:18:4e:b1:16:
ff:41:f6:cc:2a:75:26:cd:38:a1:06:c1:27:5b:c7:
d6:cf:48:17:16:00:d7:e3:8a:6e:d2:5c:bf:6d:22:
37:3e:50:c4:4f:97:92:aa:ae:e0:ee:8d:9e:d6:2b:
c9:fc:12:d5:f6:3a:61:69:cc:07:4b:9b:9a:20:53:
71:2d:87:9b:59:1b:15:8b:49:d1:91:55:a0:87:bf:
5c:89:af:5c:55:b7:b4:bc:99:5d:53:ae:2a:d9:63:
f8:00:f1:f2:9b:8a:5b:f8:2e:0f:6a:f0:ed:f7:ab:
22:b4:37:34:bd:a7:7e:d7:82:f9:eb:45:4d:02:c3:
61:2f:57:58:90:63:6a:5e:b1:58:45:7b:38:cc:8d:
31:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:1E:6E:FA:B4:70:A2:D9:72:82:8E:6B:5C:0A:93:21:35:5B:BB:F5
X509v3 Authority Key Identifier:
keyid:A1:84:40:9E:5C:18:3B:BC:C3:15:35:F4:C7:EE:E4:78:2C:D6:7B:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYRAnlwYO7zDFTX0x-7keCzWe-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e9694-c285-4ccf-943b-c2b7cff0661c/1/oYRAnlwYO7zDFTX0x-7keCzWe-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:3a:1e:2b:c7:c7:87:e4:e5:16:02:28:f0:c1:11:57:5c:f6:
ac:6f:87:2f:0c:d8:eb:f0:1c:6a:7b:39:4d:56:4d:f0:0d:e3:
f1:60:3d:0f:60:35:fb:f7:da:66:7e:0f:6a:38:34:f3:e3:df:
ba:1a:50:4b:cf:47:da:02:ef:be:0a:9b:3f:2e:86:e9:97:14:
5b:06:db:ec:3d:c8:46:45:7f:ad:24:e7:43:ec:56:21:0c:2a:
69:4d:fa:f5:f1:64:dd:83:dd:e7:41:2f:96:a5:ca:bf:ce:73:
87:2b:60:66:cd:8e:b1:05:eb:0e:43:4e:d2:2c:af:74:f8:6f:
99:88:42:1e:61:7a:dd:49:b1:48:fa:e6:3f:6b:40:45:83:4c:
e7:f1:61:81:4b:e0:d6:bb:b1:85:ea:26:c0:c1:6d:f2:67:a4:
ac:eb:3e:1f:a7:6e:e4:2b:e9:05:14:21:1e:58:85:1d:01:fe:
b0:db:de:2b:ac:78:e6:70:9e:ac:ba:eb:c0:a7:17:03:cd:fe:
1a:6d:ef:8b:50:39:31:c2:f6:6a:32:12:89:39:44:f4:82:81:
93:3b:58:e9:91:eb:c2:45:48:0f:52:b2:da:d8:f7:d2:cd:2f:
4c:51:70:94:5e:fa:c5:1f:4e:f2:2f:0c:2f:3d:51:59:63:0b:
a2:e2:79:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumMagfQ6TNArlTXNXBpfKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExODQ0MDllNWMxODNiYmNjMzE1MzVmNGM3ZWVlNDc4MmNk
NjdiZTMwHhcNMjUwNDEzMTAwMTI2WhcNMjUwNDE0MTAwMTI2WjAzMTEwLwYDVQQD
Eyg4MDFlNmVmYWI0NzBhMmQ5NzI4MjhlNmI1YzBhOTMyMTM1NWJiYmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWw/ubo78WQEgPDAJQoY2sBIoy77
oCEhP2h0h66d4bZixTc+yvClR8BAf/2LI3UCqSNkx2qlUKgeigR0VmcV/V+mKkXE
/Fli28PiDGFEXG6bb/1z6NFVtzafopVIokuEO/kK2aWBeH9yC/VaF1uWu13SORhO
sRb/QfbMKnUmzTihBsEnW8fWz0gXFgDX44pu0ly/bSI3PlDET5eSqq7g7o2e1ivJ
/BLV9jphacwHS5uaIFNxLYebWRsVi0nRkVWgh79cia9cVbe0vJldU64q2WP4APHy
m4pb+C4PavDt96sitDc0vad+14L560VNAsNhL1dYkGNqXrFYRXs4zI0xIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAebvq0cKLZcoKOa1wKkyE1W7v1MB8GA1UdIwQY
MBaAFKGEQJ5cGDu8wxU19Mfu5Hgs1nvjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZTk2OTQtYzI4NS00Y2NmLTk0M2It
YzJiN2NmZjA2NjFjLzEvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8xZTk2OTQtYzI4NS00Y2NmLTk0M2ItYzJiN2NmZjA2NjFj
LzEvb1lSQW5sd1lPN3pERlRYMHgtN2tlQ3pXZS1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxjoeK8fH
h+TlFgIo8MERV1z2rG+HLwzY6/Acans5TVZN8A3j8WA9D2A1+/faZn4Pajg08+Pf
uhpQS89H2gLvvgqbPy6G6ZcUWwbb7D3IRkV/rSTnQ+xWIQwqaU369fFk3YPd50Ev
lqXKv85zhytgZs2OsQXrDkNO0iyvdPhvmYhCHmF63UmxSPrmP2tARYNM5/FhgUvg
1ruxheomwMFt8mekrOs+H6du5CvpBRQhHliFHQH+sNveK6x45nCerLrrwKcXA83+
Gm3vi1A5McL2ajISiTlE9IKBkztY6ZHrwkVID1Ky2tj30s0vTFFwlF76xR9O8i8M
Lz1RWWMLouJ5ew==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:49 2025 by rpki-client on console.sobornost.net