Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
File: oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft (raw, json)
Hash identifier: dcsa3Oan3EyhhWX2O0/nLu8IWRRcIdE8hC2+ZMUQUx0=
Subject key identifier: B8:9F:D8:CF:9D:B8:29:65:81:88:F1:55:C7:15:77:10:B0:09:67:8C
Authority key identifier: A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58
Certificate issuer: /CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58
Certificate serial: 0194BD17E41D21E6CA05F730FD163C71A7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: RW4un6mRBfPzHloV5RnOReMxV4M.roa (hash: 6KtCB53EZaTt4rkvk3WW5xLU60zG4n/pYxl9BtxsfPs=)
2: oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl (hash: TLp/KrVMt73AttJsMnDHtk40mmYxhdphgbLMHtDUYz0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e4:1d:21:e6:ca:05:f7:30:fd:16:3c:71:a7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0c8cda814e777d9fe154b92e9959ce120b0ad58
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=b89fd8cf9db829658188f155c7157710b009678c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:69:7f:aa:13:58:db:c1:7e:eb:83:02:cc:95:
86:48:09:a2:84:89:a1:c4:77:36:e8:c1:93:35:21:
9b:a7:88:a5:e2:e0:c5:14:dc:f2:a6:0c:99:5f:22:
d3:1d:a2:d1:a4:f2:b5:44:7d:dc:02:98:5a:32:21:
15:7c:56:82:2e:20:c7:d1:db:6a:a1:64:1a:33:45:
ab:44:5a:42:23:09:ad:3a:e2:fd:c5:6f:9c:bd:6f:
f8:b8:8a:2e:7c:c3:27:70:11:6c:58:f7:dd:27:34:
da:99:3a:e7:6a:69:00:5d:07:76:04:e9:b0:29:9b:
10:0b:68:4f:d6:a7:f2:72:3c:16:20:fd:54:1f:dd:
3d:2e:ce:8e:d4:aa:92:f2:0b:47:0e:20:89:62:53:
23:1f:13:25:ce:be:83:d5:cd:a1:0a:3f:00:1f:51:
71:4b:3e:8f:b8:3e:14:17:04:9e:3d:cf:bb:55:fe:
b4:1b:11:58:54:49:3c:8c:0c:8a:92:08:de:6d:b3:
3c:3b:3b:af:a5:89:c1:63:a6:6e:70:70:88:4b:fe:
b7:bb:71:cb:3f:80:bb:ae:18:b4:b0:f5:ab:ad:6d:
87:7c:b9:19:31:00:29:2f:8b:9e:db:11:b9:60:75:
57:25:44:a9:2c:3d:26:a4:5e:c6:af:7f:88:a5:94:
c4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9F:D8:CF:9D:B8:29:65:81:88:F1:55:C7:15:77:10:B0:09:67:8C
X509v3 Authority Key Identifier:
keyid:A0:C8:CD:A8:14:E7:77:D9:FE:15:4B:92:E9:95:9C:E1:20:B0:AD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/oMjNqBTnd9n-FUuS6ZWc4SCwrVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ca:71:46:13:24:82:9e:bb:4e:1c:ed:be:39:e3:73:44:01:
42:4d:9d:09:9d:e2:b1:34:9f:f8:12:97:40:cc:ee:b9:ed:c0:
70:d1:11:99:12:be:a2:70:7e:5a:39:47:16:ca:34:c3:77:f1:
cd:21:36:4a:79:b5:a1:1e:e7:f9:2a:e3:8e:2d:a0:f6:50:0d:
8a:c8:1b:09:f5:51:63:c7:bf:d6:ca:ba:87:67:52:94:56:2b:
d5:13:cf:b5:d5:7b:d6:30:f4:05:71:44:6a:5d:05:2c:a4:e2:
de:fa:bc:b2:00:07:ea:bb:77:d9:7b:9e:f2:bb:22:ef:1e:c0:
80:2e:f2:0c:a9:da:c2:fb:14:6e:e1:60:e2:7c:02:b6:d8:94:
e7:08:2a:31:a0:69:80:e8:56:91:ee:9c:f3:90:7a:9a:c2:b3:
01:c4:f9:77:e1:01:42:f6:35:ea:2f:60:c7:1e:c8:7d:3d:d3:
2a:60:0d:46:94:31:08:37:44:be:e9:74:a7:0f:3e:4e:7a:fb:
3d:21:61:bd:5c:49:a8:34:2b:9b:d9:bb:df:57:d1:79:26:77:
2a:be:6b:c0:31:76:62:f8:50:71:67:93:df:d4:f8:26:c6:25:
f8:40:6e:cb:10:d6:01:6b:dd:ba:97:95:3b:ec:2b:13:36:e6:
3d:71:c3:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F+QdIebKBfcw/RY8cafhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYzhjZGE4MTRlNzc3ZDlmZTE1NGI5MmU5OTU5Y2UxMjBi
MGFkNTgwHhcNMjUwMTMxMTYwMDQ3WhcNMjUwMjAxMTYwMDQ3WjAzMTEwLwYDVQQD
EyhiODlmZDhjZjlkYjgyOTY1ODE4OGYxNTVjNzE1NzcxMGIwMDk2NzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGl/qhNY28F+64MCzJWGSAmihImh
xHc26MGTNSGbp4il4uDFFNzypgyZXyLTHaLRpPK1RH3cAphaMiEVfFaCLiDH0dtq
oWQaM0WrRFpCIwmtOuL9xW+cvW/4uIoufMMncBFsWPfdJzTamTrnamkAXQd2BOmw
KZsQC2hP1qfycjwWIP1UH909Ls6O1KqS8gtHDiCJYlMjHxMlzr6D1c2hCj8AH1Fx
Sz6PuD4UFwSePc+7Vf60GxFYVEk8jAyKkgjebbM8OzuvpYnBY6ZucHCIS/63u3HL
P4C7rhi0sPWrrW2HfLkZMQApL4ue2xG5YHVXJUSpLD0mpF7Gr3+IpZTEDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLif2M+duCllgYjxVccVdxCwCWeMMB8GA1UdIwQY
MBaAFKDIzagU53fZ/hVLkumVnOEgsK1YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb01qTnFCVG5kOW4tRlV1UzZaV2M0U0N3clZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hYTI3MGEtYzA4OS00Nzc4LTkzNDMt
YjczNjJlZGJkOGFjLzEvb01qTnFCVG5kOW4tRlV1UzZaV2M0U0N3clZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hYTI3MGEtYzA4OS00Nzc4LTkzNDMtYjczNjJlZGJkOGFj
LzEvb01qTnFCVG5kOW4tRlV1UzZaV2M0U0N3clZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8pxRhMk
gp67Thztvjnjc0QBQk2dCZ3isTSf+BKXQMzuue3AcNERmRK+onB+WjlHFso0w3fx
zSE2Snm1oR7n+Srjji2g9lANisgbCfVRY8e/1sq6h2dSlFYr1RPPtdV71jD0BXFE
al0FLKTi3vq8sgAH6rt32Xue8rsi7x7AgC7yDKnawvsUbuFg4nwCttiU5wgqMaBp
gOhWke6c85B6msKzAcT5d+EBQvY16i9gxx7IfT3TKmANRpQxCDdEvul0pw8+Tnr7
PSFhvVxJqDQrm9m731fReSZ3Kr5rwDF2YvhQcWeT39T4JsYl+EBuyxDWAWvdupeV
O+wrEzbmPXHDLg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:51 2025 by rpki-client