Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
File: om1GISmD2nHzGuV-WcOeCbM5ygI.mft (raw, json)
Hash identifier: 1NwZ5sluPSRbON7B0aAeOPLlJclVvI5Yw8Nzs3YMw50=
Subject key identifier: D9:82:79:29:EF:7C:ED:05:2D:E3:81:93:93:B0:7E:F3:C4:ED:34:A4
Authority key identifier: A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
Certificate issuer: /CN=a26d46212983da71f31ae57e59c39e09b339ca02
Certificate serial: 0194BD4E9B68214A09EE05E562E165043657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
Manifest number: 0AF6
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: SV1PBkOmZ6MIfKK9aCw6UnMTAMA.roa (hash: IF9hTJNwg+C6sOiJxM0wjia7V2gTMUUf+M1j+KMX6Hk=)
2: om1GISmD2nHzGuV-WcOeCbM5ygI.crl (hash: KdTDM6dQIsdLx7sprfXgDz9HaioFePPzsBxxYWOLF9c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9b:68:21:4a:09:ee:05:e5:62:e1:65:04:36:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a26d46212983da71f31ae57e59c39e09b339ca02
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=d9827929ef7ced052de3819393b07ef3c4ed34a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:1c:f4:ff:32:b3:20:f9:0c:25:0d:1b:25:
25:31:2e:9b:dc:39:be:3c:d5:70:97:04:5f:d5:3d:
c7:62:03:56:29:af:9f:07:99:1a:90:a1:f6:04:a8:
02:cb:98:4e:5f:a8:d1:6b:66:e4:84:ff:b5:a6:60:
cb:eb:bd:14:19:31:41:10:f3:ff:3a:b8:10:27:77:
37:4d:ac:0b:35:c4:21:46:d7:b8:a1:a1:59:3f:28:
28:ae:75:59:e1:8b:e1:1b:13:91:15:91:6d:26:e7:
84:ce:47:48:e6:9a:57:32:69:74:ff:eb:6e:d4:a0:
71:55:a2:c5:5e:c0:71:19:3d:d1:f1:1d:fd:12:ee:
b4:a4:ef:bb:c8:86:09:af:99:89:f9:a5:a2:bb:99:
03:75:6e:20:33:ac:06:88:f9:e7:3a:49:31:2c:66:
00:69:45:06:0f:02:e7:7e:3a:c4:a1:4a:2d:7e:bb:
92:72:16:d5:62:ab:82:15:47:67:a2:c4:aa:6d:65:
21:f6:c6:23:e1:3d:c8:ce:88:3e:77:d8:ad:b1:55:
f3:da:70:8e:e7:60:36:77:98:70:a1:82:8f:fe:a8:
9d:37:cc:67:03:6f:63:e5:63:71:ed:75:02:0a:d5:
a8:7e:b5:9b:e7:5b:d7:da:b2:5a:21:47:56:d2:fd:
a4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:82:79:29:EF:7C:ED:05:2D:E3:81:93:93:B0:7E:F3:C4:ED:34:A4
X509v3 Authority Key Identifier:
keyid:A2:6D:46:21:29:83:DA:71:F3:1A:E5:7E:59:C3:9E:09:B3:39:CA:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/om1GISmD2nHzGuV-WcOeCbM5ygI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b51d0f-3df9-491d-af90-bf2c7a3908da/1/om1GISmD2nHzGuV-WcOeCbM5ygI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:c5:bc:f7:81:26:af:bd:f3:bd:7c:9b:fc:5c:c6:95:d2:67:
64:77:70:7b:11:49:5f:3a:8e:73:4b:89:51:ce:ab:8b:b5:5c:
cc:4d:16:7b:82:ed:52:3f:f5:77:9f:ed:61:43:72:fd:09:e7:
da:db:18:21:f9:45:b0:9f:da:a9:ac:7e:cc:d3:86:24:ba:8b:
57:15:1e:2f:38:96:28:04:1d:0a:4b:67:85:7d:1b:ac:2f:81:
eb:de:5c:8c:b7:87:c9:43:5f:26:ab:60:3f:a9:a1:21:a3:aa:
a3:ca:1f:37:06:84:2e:fe:17:a9:e2:54:8e:c4:d7:0d:0b:fb:
74:b1:c4:9e:71:b8:3a:e3:97:4b:52:eb:8e:39:f7:24:cd:c2:
48:f5:11:9a:2c:28:f4:1f:4e:cd:02:23:c3:34:27:89:ae:6e:
87:42:9f:2d:f3:8d:f6:79:ee:f6:cf:2f:f8:05:10:b2:8b:a1:
b8:ba:ec:e5:5c:6f:82:a8:94:d0:ee:05:db:15:6b:5c:1c:39:
06:e1:81:03:3d:b2:2a:a4:28:89:95:43:6f:c0:07:fb:31:70:
80:12:c2:e8:ce:5f:bf:fd:c8:4c:ee:cf:56:01:c6:5c:35:d2:
67:5e:3a:5e:87:53:a7:ef:e5:1b:92:13:0c:a0:fe:11:b1:09:
f6:ad:c1:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TptoIUoJ7gXlYuFlBDZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNmQ0NjIxMjk4M2RhNzFmMzFhZTU3ZTU5YzM5ZTA5YjMz
OWNhMDIwHhcNMjUwMTMxMTcwMDMyWhcNMjUwMjAxMTcwMDMyWjAzMTEwLwYDVQQD
EyhkOTgyNzkyOWVmN2NlZDA1MmRlMzgxOTM5M2IwN2VmM2M0ZWQzNGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi0c9P8ysyD5DCUNGyUlMS6b3Dm+
PNVwlwRf1T3HYgNWKa+fB5kakKH2BKgCy5hOX6jRa2bkhP+1pmDL670UGTFBEPP/
OrgQJ3c3TawLNcQhRte4oaFZPygornVZ4YvhGxORFZFtJueEzkdI5ppXMml0/+tu
1KBxVaLFXsBxGT3R8R39Eu60pO+7yIYJr5mJ+aWiu5kDdW4gM6wGiPnnOkkxLGYA
aUUGDwLnfjrEoUotfruSchbVYquCFUdnosSqbWUh9sYj4T3Izog+d9itsVXz2nCO
52A2d5hwoYKP/qidN8xnA29j5WNx7XUCCtWofrWb51vX2rJaIUdW0v2kOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNmCeSnvfO0FLeOBk5OwfvPE7TSkMB8GA1UdIwQY
MBaAFKJtRiEpg9px8xrlflnDngmzOcoCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAt
YmYyYzdhMzkwOGRhLzEvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9iNTFkMGYtM2RmOS00OTFkLWFmOTAtYmYyYzdhMzkwOGRh
LzEvb20xR0lTbUQybkh6R3VWLVdjT2VDYk01eWdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAisW894Em
r73zvXyb/FzGldJnZHdwexFJXzqOc0uJUc6ri7VczE0We4LtUj/1d5/tYUNy/Qnn
2tsYIflFsJ/aqax+zNOGJLqLVxUeLziWKAQdCktnhX0brC+B695cjLeHyUNfJqtg
P6mhIaOqo8ofNwaELv4XqeJUjsTXDQv7dLHEnnG4OuOXS1Lrjjn3JM3CSPURmiwo
9B9OzQIjwzQnia5uh0KfLfON9nnu9s8v+AUQsouhuLrs5VxvgqiU0O4F2xVrXBw5
BuGBAz2yKqQoiZVDb8AH+zFwgBLC6M5fv/3ITO7PVgHGXDXSZ146XodTp+/lG5IT
DKD+EbEJ9q3BqA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 06:46:12 2025 by rpki-client