Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/d6c513-6634-4a13-a51e-6a5ad10c42dc/1/oSTU07DkSZUnHsa18coaXC0asb8.mft
File: oSTU07DkSZUnHsa18coaXC0asb8.mft (raw, json)
Hash identifier: ujlPBUAGIyIFcDrTydpTvAaFc1SXnEOLZrdoUIzAiKM=
Subject key identifier: 65:DC:0A:9C:A0:4C:2F:EC:94:E9:E8:2E:44:32:78:EA:BC:B6:55:56
Authority key identifier: A1:24:D4:D3:B0:E4:49:95:27:1E:C6:B5:F1:CA:1A:5C:2D:1A:B1:BF
Certificate issuer: /CN=a124d4d3b0e44995271ec6b5f1ca1a5c2d1ab1bf
Certificate serial: 019483CD88EB423EAF4CE862CF4B471E4104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oSTU07DkSZUnHsa18coaXC0asb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/d6c513-6634-4a13-a51e-6a5ad10c42dc/1/oSTU07DkSZUnHsa18coaXC0asb8.mft
Manifest number: 09F9
Signing time: Mon 20 Jan 2025 13:01:12 +0000
Manifest this update: Mon 20 Jan 2025 13:01:12 +0000
Manifest next update: Tue 21 Jan 2025 13:01:12 +0000
Files and hashes: 1: oSTU07DkSZUnHsa18coaXC0asb8.crl (hash: HFGQ1uIF0T0+Y9WF21en1Z70Ruv1BOB1hxzA9HzUAAI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:cd:88:eb:42:3e:af:4c:e8:62:cf:4b:47:1e:41:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a124d4d3b0e44995271ec6b5f1ca1a5c2d1ab1bf
Validity
Not Before: Jan 20 13:01:12 2025 GMT
Not After : Jan 21 13:01:12 2025 GMT
Subject: CN=65dc0a9ca04c2fec94e9e82e443278eabcb65556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:eb:6a:a0:80:78:d5:0f:76:4a:3c:de:70:66:
5c:6b:0a:3c:31:de:35:e2:6c:4c:3d:75:66:98:29:
f5:06:00:30:ea:dd:c8:3c:55:ad:9a:f0:f3:c3:67:
0a:86:9a:88:d6:54:0b:d7:aa:90:39:1c:33:0e:5c:
2e:ed:cb:ef:ab:bc:c2:b0:f3:17:bd:1f:93:37:b0:
bc:27:ca:74:f8:d2:c3:2e:85:02:61:79:9c:17:27:
0f:22:6d:60:ae:ec:e9:50:8f:5d:75:05:57:d0:3a:
58:44:37:29:02:01:8b:9a:94:24:12:c8:4b:21:a0:
be:8f:69:33:45:ef:d1:ed:31:2c:05:f8:8a:94:0d:
a9:58:07:df:c6:de:94:82:8d:4e:0a:c0:dc:dc:17:
71:a9:54:1f:cc:70:ff:7b:39:11:87:d1:b9:48:77:
ca:4a:4b:3c:ef:7f:39:5d:ab:95:5f:5d:e2:16:a1:
42:22:d2:34:07:d8:29:bc:c0:24:b1:bd:da:2d:e2:
bf:27:00:b1:c4:1f:3d:c4:36:0d:40:0b:58:10:e4:
18:86:e0:53:2e:cf:ac:30:43:72:40:b1:74:23:c8:
30:6f:6d:b1:72:f0:76:b8:76:04:58:1d:b9:d2:dd:
ae:d2:bc:b7:64:29:dd:2f:c3:1a:f9:1e:3c:74:fb:
68:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:DC:0A:9C:A0:4C:2F:EC:94:E9:E8:2E:44:32:78:EA:BC:B6:55:56
X509v3 Authority Key Identifier:
keyid:A1:24:D4:D3:B0:E4:49:95:27:1E:C6:B5:F1:CA:1A:5C:2D:1A:B1:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSTU07DkSZUnHsa18coaXC0asb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d6c513-6634-4a13-a51e-6a5ad10c42dc/1/oSTU07DkSZUnHsa18coaXC0asb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d6c513-6634-4a13-a51e-6a5ad10c42dc/1/oSTU07DkSZUnHsa18coaXC0asb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:69:fd:7a:aa:71:b3:0b:2a:74:9a:96:57:d8:35:69:37:73:
46:e2:a5:f3:59:75:52:c1:4a:24:53:89:29:f8:5f:75:31:5c:
ea:51:e8:df:dd:ce:0d:84:e3:20:04:5c:73:37:77:cb:89:d4:
a6:5f:04:31:c2:ef:26:90:19:f4:29:57:33:86:f5:be:0f:03:
84:3d:a1:39:9b:e1:e0:e2:50:e0:68:4a:c6:fa:80:47:bc:6c:
ad:b5:38:e3:39:5c:30:b4:09:16:2a:ce:2b:d6:b7:68:bf:2e:
19:e6:a0:57:96:f8:84:e3:e4:a0:15:98:13:d9:fb:d0:bc:cb:
2f:8e:35:5c:fa:4f:4a:3c:c7:02:e2:94:14:8d:43:a0:d5:b2:
84:a6:54:0e:25:46:ff:e5:9f:94:be:02:19:65:79:5b:e8:78:
e4:a4:99:26:03:72:45:26:20:9e:b7:f1:95:ea:05:20:a4:bd:
92:23:2b:a2:a9:c5:f6:8a:7e:55:ba:83:ed:28:2c:43:32:08:
f3:1d:be:75:e2:2b:d3:f3:fc:32:6a:e7:aa:6b:ab:65:e4:32:
ad:0f:ce:83:1d:08:c6:30:58:81:4c:83:72:05:15:c9:86:57:
ad:27:e7:a8:9a:d8:0c:6a:ab:bb:6a:a0:70:52:49:01:18:48:
bd:21:9d:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSDzYjrQj6vTOhiz0tHHkEEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMjRkNGQzYjBlNDQ5OTUyNzFlYzZiNWYxY2ExYTVjMmQx
YWIxYmYwHhcNMjUwMTIwMTMwMTEyWhcNMjUwMTIxMTMwMTEyWjAzMTEwLwYDVQQD
Eyg2NWRjMGE5Y2EwNGMyZmVjOTRlOWU4MmU0NDMyNzhlYWJjYjY1NTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlutqoIB41Q92SjzecGZcawo8Md41
4mxMPXVmmCn1BgAw6t3IPFWtmvDzw2cKhpqI1lQL16qQORwzDlwu7cvvq7zCsPMX
vR+TN7C8J8p0+NLDLoUCYXmcFycPIm1gruzpUI9ddQVX0DpYRDcpAgGLmpQkEshL
IaC+j2kzRe/R7TEsBfiKlA2pWAffxt6Ugo1OCsDc3BdxqVQfzHD/ezkRh9G5SHfK
Sks87385XauVX13iFqFCItI0B9gpvMAksb3aLeK/JwCxxB89xDYNQAtYEOQYhuBT
Ls+sMENyQLF0I8gwb22xcvB2uHYEWB250t2u0ry3ZCndL8Ma+R48dPtoQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXcCpygTC/slOnoLkQyeOq8tlVWMB8GA1UdIwQY
MBaAFKEk1NOw5EmVJx7GtfHKGlwtGrG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1NUVTA3RGtTWlVuSHNhMThjb2FYQzBhc2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9kNmM1MTMtNjYzNC00YTEzLWE1MWUt
NmE1YWQxMGM0MmRjLzEvb1NUVTA3RGtTWlVuSHNhMThjb2FYQzBhc2I4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9kNmM1MTMtNjYzNC00YTEzLWE1MWUtNmE1YWQxMGM0MmRj
LzEvb1NUVTA3RGtTWlVuSHNhMThjb2FYQzBhc2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWn9eqpx
swsqdJqWV9g1aTdzRuKl81l1UsFKJFOJKfhfdTFc6lHo393ODYTjIARcczd3y4nU
pl8EMcLvJpAZ9ClXM4b1vg8DhD2hOZvh4OJQ4GhKxvqAR7xsrbU44zlcMLQJFirO
K9a3aL8uGeagV5b4hOPkoBWYE9n70LzLL441XPpPSjzHAuKUFI1DoNWyhKZUDiVG
/+WflL4CGWV5W+h45KSZJgNyRSYgnrfxleoFIKS9kiMroqnF9op+VbqD7SgsQzII
8x2+deIr0/P8MmrnqmurZeQyrQ/Ogx0IxjBYgUyDcgUVyYZXrSfnqJrYDGqru2qg
cFJJARhIvSGdYw==
-----END CERTIFICATE-----
Generated at Tue Jan 21 17:37:04 2025 by rpki-client on console.sobornost.net