Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
File: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft (raw, json)
Hash identifier: 5ESjGM7SdW1nsYr/Mf8OMGidUeyk8PYP6BmYLxDgkjw=
Subject key identifier: 27:D9:9C:8E:BA:CC:F9:CD:B5:F6:FA:18:EC:0F:AE:80:3F:D0:6A:55
Authority key identifier: D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
Certificate issuer: /CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Certificate serial: 0194BD8543C4FEB786668E0A557E86890266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
Manifest number: 0CAD
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: 0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl (hash: FMHR7W06xghXGwPUMe9s8bCIID+keKkns5V574W9BrI=)
2: tWrNNpvQLnIYXShcXDmxPXzlROA.roa (hash: rl7K0aTuna5/yne12oTJUAQ6OhB1j3YlRj4Y9PjqK84=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:43:c4:fe:b7:86:66:8e:0a:55:7e:86:89:02:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bf176af8dba30fef325365ef3404812ce2d84a
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=27d99c8ebaccf9cdb5f6fa18ec0fae803fd06a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:2d:47:d3:6f:b4:8d:1a:01:fa:07:26:d8:
03:9a:bd:0e:cf:cf:b7:ca:72:0e:f9:6c:45:6f:0c:
4a:e9:ad:3c:d4:4d:5a:42:f5:0d:69:e9:77:59:67:
55:c9:0e:87:c7:fe:3a:cd:c8:fb:34:4c:c8:59:a6:
2b:48:b8:5e:4f:78:3b:07:77:2b:4c:f5:bb:c0:04:
40:6c:b0:20:d0:2e:70:9d:3a:70:ee:f1:7d:e8:67:
82:8d:60:bd:58:3b:80:76:d4:f3:fb:68:ef:4c:3c:
3c:b4:cc:e4:6f:1a:79:cd:f5:b8:bb:2f:3f:a3:a6:
45:10:53:20:af:2d:76:fb:e2:3d:d5:bf:8f:d8:c7:
8e:dc:35:29:48:d4:05:06:c8:eb:28:ad:07:88:36:
9d:ae:f8:a9:81:76:e7:86:95:3e:63:d8:6f:fc:7e:
24:f3:f0:b6:d9:b9:89:f2:36:e8:a4:ee:2a:bb:ab:
b7:6d:73:f1:0d:06:b1:ea:85:e6:8e:89:7f:3e:6e:
00:05:4a:a2:c9:0e:8a:f4:70:ea:72:41:31:b3:a5:
59:69:49:c4:fb:32:c8:09:df:7a:b4:87:70:c3:db:
83:eb:96:b0:9e:7b:94:17:5d:08:2a:f9:6b:73:bc:
5e:9a:c9:cc:7c:3c:ce:72:21:6b:cc:a6:6c:cd:db:
f1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D9:9C:8E:BA:CC:F9:CD:B5:F6:FA:18:EC:0F:AE:80:3F:D0:6A:55
X509v3 Authority Key Identifier:
keyid:D1:BF:17:6A:F8:DB:A3:0F:EF:32:53:65:EF:34:04:81:2C:E2:D8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b8Xavjbow_vMlNl7zQEgSzi2Eo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/abcd8e-b04b-48e8-8dac-fd559242d471/1/0b8Xavjbow_vMlNl7zQEgSzi2Eo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:74:c5:34:74:1a:5f:4a:ce:6c:22:70:f3:74:f8:ae:3f:b6:
53:2c:06:91:1a:73:79:eb:ad:a9:fd:1b:03:0b:9d:75:c5:1a:
bf:ed:ee:9d:12:5d:4b:1c:73:56:62:b6:70:17:ed:f6:ab:64:
8c:e9:03:10:a5:95:4d:07:01:05:65:2b:5a:96:67:85:fb:eb:
b0:32:48:a4:2b:7c:ba:5b:38:54:83:f0:39:2e:1a:cd:23:84:
95:2e:4c:bd:7e:aa:6b:74:c2:3f:77:37:a3:ac:6e:40:a2:13:
b3:35:e2:89:2c:bb:27:e8:08:ac:f6:44:74:bd:8c:26:82:6a:
d6:a1:49:8a:03:dc:68:e1:dd:0d:cd:89:d3:27:b0:ca:08:da:
28:26:75:a3:22:be:09:ca:ab:f3:5e:1d:0b:0e:b1:5a:a9:59:
50:b5:40:3a:0e:e0:34:c6:a7:6a:96:12:9b:85:c8:d9:c0:60:
84:aa:58:cd:46:dc:17:38:50:a1:c6:e4:2e:60:f6:f1:a9:c6:
4e:c2:f4:a6:0a:2f:73:91:91:2c:ce:2a:99:8b:89:18:c7:06:
bc:3f:59:ef:88:4b:48:18:8b:f2:56:e1:45:1d:c3:ea:4e:07:
c6:20:75:cd:ab:b5:42:6a:93:21:82:6a:e2:48:15:ed:a0:7c:
ad:17:ee:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUPE/reGZo4KVX6GiQJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYmYxNzZhZjhkYmEzMGZlZjMyNTM2NWVmMzQwNDgxMmNl
MmQ4NGEwHhcNMjUwMTMxMTgwMDE0WhcNMjUwMjAxMTgwMDE0WjAzMTEwLwYDVQQD
EygyN2Q5OWM4ZWJhY2NmOWNkYjVmNmZhMThlYzBmYWU4MDNmZDA2YTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxowtR9NvtI0aAfoHJtgDmr0Oz8+3
ynIO+WxFbwxK6a081E1aQvUNael3WWdVyQ6Hx/46zcj7NEzIWaYrSLheT3g7B3cr
TPW7wARAbLAg0C5wnTpw7vF96GeCjWC9WDuAdtTz+2jvTDw8tMzkbxp5zfW4uy8/
o6ZFEFMgry12++I91b+P2MeO3DUpSNQFBsjrKK0HiDadrvipgXbnhpU+Y9hv/H4k
8/C22bmJ8jbopO4qu6u3bXPxDQax6oXmjol/Pm4ABUqiyQ6K9HDqckExs6VZaUnE
+zLICd96tIdww9uD65awnnuUF10IKvlrc7xemsnMfDzOciFrzKZszdvxwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfZnI66zPnNtfb6GOwProA/0GpVMB8GA1UdIwQY
MBaAFNG/F2r426MP7zJTZe80BIEs4thKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGI4WGF2amJvd192TWxObDd6UUVnU3ppMkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hYmNkOGUtYjA0Yi00OGU4LThkYWMt
ZmQ1NTkyNDJkNDcxLzEvMGI4WGF2amJvd192TWxObDd6UUVnU3ppMkVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9hYmNkOGUtYjA0Yi00OGU4LThkYWMtZmQ1NTkyNDJkNDcx
LzEvMGI4WGF2amJvd192TWxObDd6UUVnU3ppMkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMnTFNHQa
X0rObCJw83T4rj+2UywGkRpzeeutqf0bAwuddcUav+3unRJdSxxzVmK2cBft9qtk
jOkDEKWVTQcBBWUrWpZnhfvrsDJIpCt8uls4VIPwOS4azSOElS5MvX6qa3TCP3c3
o6xuQKITszXiiSy7J+gIrPZEdL2MJoJq1qFJigPcaOHdDc2J0yewygjaKCZ1oyK+
Ccqr814dCw6xWqlZULVAOg7gNManapYSm4XI2cBghKpYzUbcFzhQocbkLmD28anG
TsL0pgovc5GRLM4qmYuJGMcGvD9Z74hLSBiL8lbhRR3D6k4HxiB1zau1QmqTIYJq
4kgV7aB8rRfuBw==
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:15 2025 by rpki-client