Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
File: OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft (raw, json)
Hash identifier: IxoA5n7hVk3Prcbr/fwyzuEMGu3NQI8ixEfKVIePLRg=
Subject key identifier: 6C:A5:01:4E:C9:B7:AB:DF:6B:1E:A6:F4:6A:3E:9C:BA:81:AF:03:74
Authority key identifier: 38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
Certificate issuer: /CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Certificate serial: 0194BCAA1E3B3180A5D3A1B9D4844DA8E8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
Manifest number: 0A67
Signing time: Fri 31 Jan 2025 14:00:52 +0000
Manifest this update: Fri 31 Jan 2025 14:00:52 +0000
Manifest next update: Sat 01 Feb 2025 14:00:52 +0000
Files and hashes: 1: OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl (hash: kBBzobNGUL18qd8TgeLzcQ8ow9bfJ819VQDNSUGducw=)
2: akjM-xe6r7wN8q85qvVsiC6HFoc.roa (hash: DJGYhYAc1tW0r6f5bvOKTaPIoda2gTETmwDHHbAC3Yc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1e:3b:31:80:a5:d3:a1:b9:d4:84:4d:a8:e8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38ead5deb53500f2548ae1812c087e32a47fc8b4
Validity
Not Before: Jan 31 14:00:52 2025 GMT
Not After : Feb 1 14:00:52 2025 GMT
Subject: CN=6ca5014ec9b7abdf6b1ea6f46a3e9cba81af0374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:03:25:5c:e4:89:f7:ad:fc:86:2c:59:9f:da:
16:fc:60:59:1a:07:05:f0:3d:d5:3d:b2:a0:e2:38:
4a:47:72:e5:8a:4b:c6:d4:78:8c:27:21:8c:8d:39:
ef:fc:3f:a5:6a:b4:ae:87:94:2c:54:eb:61:ab:2f:
f3:d9:b3:a7:67:20:41:8a:9b:69:82:32:23:75:14:
a1:59:44:3b:5a:65:1d:c1:ee:0e:5a:83:a2:d6:4b:
c3:d9:45:b7:db:32:ef:85:52:ee:b6:17:25:20:53:
51:cf:5d:f9:9f:3b:44:02:65:e0:cf:d2:7a:3a:da:
17:16:3a:c0:84:7d:f4:85:fa:9b:66:2f:9c:e0:a0:
8f:a6:d1:a1:c6:48:ff:4f:a8:0b:c2:4b:2a:9f:c7:
82:b3:fe:93:94:29:d3:3f:2e:1c:1a:fe:1b:c4:96:
af:75:ef:f7:f1:89:37:91:9c:25:92:30:2a:b7:42:
2a:63:76:7c:39:d9:9c:e6:85:60:7d:73:ab:ce:68:
b6:04:d1:ac:dc:3e:f1:06:fd:c7:ba:55:20:d7:73:
8c:fe:c2:23:11:8b:6f:a4:8d:dc:a2:6d:8b:64:e5:
4c:b2:22:dd:03:b5:99:d8:66:9c:c7:20:af:c4:48:
09:4f:5f:9c:47:a3:4c:a1:70:bd:08:32:a5:c6:09:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A5:01:4E:C9:B7:AB:DF:6B:1E:A6:F4:6A:3E:9C:BA:81:AF:03:74
X509v3 Authority Key Identifier:
keyid:38:EA:D5:DE:B5:35:00:F2:54:8A:E1:81:2C:08:7E:32:A4:7F:C8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OOrV3rU1APJUiuGBLAh-MqR_yLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3516a1-fd9d-4e29-add3-d446f1f83ae9/1/OOrV3rU1APJUiuGBLAh-MqR_yLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:03:a7:fc:31:2d:00:18:29:2c:50:28:ee:d0:5c:83:10:4d:
61:19:11:83:02:bd:c4:bc:5f:26:5f:46:f2:b6:0e:2b:d6:73:
3d:0b:66:3d:d3:f2:a4:0c:bb:9d:be:1b:db:06:30:93:f4:bd:
6a:f2:d6:66:26:70:b3:5c:47:bb:6a:30:d8:be:72:f4:b9:6b:
28:55:f2:d1:ca:a2:93:2e:22:57:e9:ab:0e:11:7a:ee:fd:1f:
b6:61:bf:41:3b:b5:c2:7a:03:b6:5f:1d:7f:0e:5b:93:03:bc:
17:61:a6:ea:32:33:ed:0b:ab:84:8a:66:92:8a:c0:2c:b9:3f:
9e:39:c1:e0:25:4a:5b:bc:23:71:1d:de:d3:5d:52:21:47:5b:
94:c7:d7:9d:c5:c3:92:a5:f3:61:51:e2:c9:83:2d:a3:c9:9e:
b4:93:70:bd:35:f0:bf:ff:73:47:d7:7e:ba:85:81:1c:4d:d3:
5b:ea:d5:51:aa:f1:4a:4d:7c:c4:05:4b:c5:9b:ea:7a:65:ff:
de:59:69:42:36:2a:23:56:4e:35:ab:28:fd:67:0c:b2:a5:cd:
a7:6b:53:91:a0:02:58:94:f2:94:fd:e6:cd:97:01:31:00:ae:
22:db:1d:0d:bc:7a:11:aa:51:15:80:3e:2b:05:6c:e5:c7:4f:
4b:de:7e:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qh47MYCl06G51IRNqOjJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZWFkNWRlYjUzNTAwZjI1NDhhZTE4MTJjMDg3ZTMyYTQ3
ZmM4YjQwHhcNMjUwMTMxMTQwMDUyWhcNMjUwMjAxMTQwMDUyWjAzMTEwLwYDVQQD
Eyg2Y2E1MDE0ZWM5YjdhYmRmNmIxZWE2ZjQ2YTNlOWNiYTgxYWYwMzc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAMlXOSJ9638hixZn9oW/GBZGgcF
8D3VPbKg4jhKR3LlikvG1HiMJyGMjTnv/D+larSuh5QsVOthqy/z2bOnZyBBiptp
gjIjdRShWUQ7WmUdwe4OWoOi1kvD2UW32zLvhVLuthclIFNRz135nztEAmXgz9J6
OtoXFjrAhH30hfqbZi+c4KCPptGhxkj/T6gLwksqn8eCs/6TlCnTPy4cGv4bxJav
de/38Yk3kZwlkjAqt0IqY3Z8Odmc5oVgfXOrzmi2BNGs3D7xBv3HulUg13OM/sIj
EYtvpI3com2LZOVMsiLdA7WZ2GacxyCvxEgJT1+cR6NMoXC9CDKlxgk0AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGylAU7Jt6vfax6m9Go+nLqBrwN0MB8GA1UdIwQY
MBaAFDjq1d61NQDyVIrhgSwIfjKkf8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT09yVjNyVTFBUEpVaXVHQkxBaC1NcVJfeUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zNTE2YTEtZmQ5ZC00ZTI5LWFkZDMt
ZDQ0NmYxZjgzYWU5LzEvT09yVjNyVTFBUEpVaXVHQkxBaC1NcVJfeUxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8zNTE2YTEtZmQ5ZC00ZTI5LWFkZDMtZDQ0NmYxZjgzYWU5
LzEvT09yVjNyVTFBUEpVaXVHQkxBaC1NcVJfeUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzwOn/DEt
ABgpLFAo7tBcgxBNYRkRgwK9xLxfJl9G8rYOK9ZzPQtmPdPypAy7nb4b2wYwk/S9
avLWZiZws1xHu2ow2L5y9LlrKFXy0cqiky4iV+mrDhF67v0ftmG/QTu1wnoDtl8d
fw5bkwO8F2Gm6jIz7QurhIpmkorALLk/njnB4CVKW7wjcR3e011SIUdblMfXncXD
kqXzYVHiyYMto8metJNwvTXwv/9zR9d+uoWBHE3TW+rVUarxSk18xAVLxZvqemX/
3llpQjYqI1ZONaso/WcMsqXNp2tTkaACWJTylP3mzZcBMQCuItsdDbx6EapRFYA+
KwVs5cdPS95+Ng==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:19 2025 by rpki-client