Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File: 4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier: h/6QvFX+OSp3JOjSYSG0y62cIl0Ds2n9UhQB5JUR/DE=
Subject key identifier: 62:59:DC:91:31:51:DC:79:AD:B3:D5:72:14:CF:BB:C4:A7:F0:41:19
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 0194BC3BCF17103E875BF4718EE869BFD659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: fbgy3CgeMKqpTwS4a4kC9NFzQnVG2B1qywIGKJ+LlJw=)
2: BL-NDYgvhNS3ykN2bZ3XYSmCEZI.roa (hash: fBvbXWPI6WfZJHj+SHtFQme53z0G5Q3tNcbJRdIO7rA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cf:17:10:3e:87:5b:f4:71:8e:e8:69:bf:d6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=6259dc913151dc79adb3d57214cfbbc4a7f04119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2d:ec:bb:2f:bf:f2:a0:11:c1:1c:0a:f6:cb:
4b:36:ee:7a:40:ad:8a:f7:61:fa:c8:10:20:d7:06:
d3:c2:37:cc:96:fa:29:3a:a9:2a:a8:ad:55:24:e7:
64:e5:49:22:a4:1f:32:03:e0:04:80:3a:d5:0d:88:
e2:73:26:14:b9:a2:f8:c9:eb:d1:26:ee:2f:66:e3:
d2:8a:8e:08:d6:85:a1:fe:d7:35:42:fb:bc:ba:c1:
a0:9b:ae:40:e2:ab:9c:13:7b:db:f3:0f:b1:28:e6:
03:81:d3:83:fd:a0:aa:c7:37:26:2a:ee:e7:6c:54:
a0:aa:c9:4a:98:96:f6:95:15:ca:8d:8b:ca:01:1f:
a7:72:71:59:8e:29:a0:5a:b4:d8:5b:c4:8c:f7:f9:
61:91:1f:80:01:8d:7c:59:cf:cc:7e:fb:1f:bb:a7:
65:a4:6a:ae:a2:9d:df:68:90:ea:50:9e:d0:88:57:
1d:5a:90:12:a1:1c:ab:8b:5c:e3:b0:70:bd:89:62:
06:f6:fd:e2:85:40:b0:35:e2:35:06:d9:c1:7a:56:
d4:07:1d:1f:81:ef:3d:6c:ee:d8:6a:e2:93:9f:9f:
ca:c8:fc:a4:21:01:80:d1:d7:d4:b5:14:96:31:c1:
56:91:35:48:11:92:ef:a6:20:ff:3a:ee:98:f2:57:
ec:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:59:DC:91:31:51:DC:79:AD:B3:D5:72:14:CF:BB:C4:A7:F0:41:19
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:51:d8:f2:dd:07:cd:bf:dd:12:84:c8:15:09:6d:b9:c1:7f:
7b:2b:c0:97:90:f4:07:67:b8:a1:28:1a:85:83:85:fc:d9:9a:
0a:53:24:98:2e:d3:90:5f:d0:83:40:8f:cd:e4:c9:35:01:47:
41:9e:79:e6:77:c8:58:62:c1:2a:6e:44:24:04:62:3d:2c:67:
41:72:ad:d6:9f:71:83:c0:37:72:63:1b:af:95:36:ec:91:4a:
7c:ad:5c:30:ef:69:34:8f:94:25:f9:09:01:d5:11:fb:92:d5:
92:96:08:f3:2b:6a:74:8a:26:39:16:82:44:ea:98:91:c8:82:
76:5f:b7:9f:4a:47:aa:65:56:62:7f:f8:28:1f:35:77:bc:b1:
ea:6b:bb:0f:54:2f:af:2d:8a:31:2b:08:ab:7d:c9:db:06:76:
7f:83:67:33:77:e4:ad:47:ae:64:02:89:58:4e:b9:9f:47:88:
ab:d2:fc:4c:0c:eb:fe:db:40:29:62:ad:84:c8:eb:3a:a9:a2:
ee:5a:9f:db:36:22:8d:8d:a7:a1:12:61:f6:1b:cc:53:2a:36:
5b:a4:d7:fe:28:d8:56:d3:02:74:c9:f1:18:33:05:5c:71:8e:
dd:f7:fe:c4:d9:b8:f1:d5:bd:9b:19:6e:99:86:d1:e6:ec:82:
04:be:c8:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8O88XED6HW/Rxjuhpv9ZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZTkyYTc4OGE0MTA1N2QyNzc2NGYxNmYzYjFkMmEzZWY2
MzQ1ZDYwHhcNMjUwMTMxMTIwMDIzWhcNMjUwMjAxMTIwMDIzWjAzMTEwLwYDVQQD
Eyg2MjU5ZGM5MTMxNTFkYzc5YWRiM2Q1NzIxNGNmYmJjNGE3ZjA0MTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6y3suy+/8qARwRwK9stLNu56QK2K
92H6yBAg1wbTwjfMlvopOqkqqK1VJOdk5UkipB8yA+AEgDrVDYjicyYUuaL4yevR
Ju4vZuPSio4I1oWh/tc1Qvu8usGgm65A4qucE3vb8w+xKOYDgdOD/aCqxzcmKu7n
bFSgqslKmJb2lRXKjYvKAR+ncnFZjimgWrTYW8SM9/lhkR+AAY18Wc/Mfvsfu6dl
pGquop3faJDqUJ7QiFcdWpASoRyri1zjsHC9iWIG9v3ihUCwNeI1BtnBelbUBx0f
ge89bO7YauKTn5/KyPykIQGA0dfUtRSWMcFWkTVIEZLvpiD/Ou6Y8lfs8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJZ3JExUdx5rbPVchTPu8Sn8EEZMB8GA1UdIwQY
MBaAFODpKniKQQV9J3ZPFvOx0qPvY0XWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNE9rcWVJcEJCWDBuZGs4Vzg3SFNvLTlqUmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9kNDY0ODctNDNmZi00NWVlLTgyMjgt
YmE1OWZiMmM0NjEwLzEvNE9rcWVJcEJCWDBuZGs4Vzg3SFNvLTlqUmRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9kNDY0ODctNDNmZi00NWVlLTgyMjgtYmE1OWZiMmM0NjEw
LzEvNE9rcWVJcEJCWDBuZGs4Vzg3SFNvLTlqUmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVHY8t0H
zb/dEoTIFQltucF/eyvAl5D0B2e4oSgahYOF/NmaClMkmC7TkF/Qg0CPzeTJNQFH
QZ555nfIWGLBKm5EJARiPSxnQXKt1p9xg8A3cmMbr5U27JFKfK1cMO9pNI+UJfkJ
AdUR+5LVkpYI8ytqdIomORaCROqYkciCdl+3n0pHqmVWYn/4KB81d7yx6mu7D1Qv
ry2KMSsIq33J2wZ2f4NnM3fkrUeuZAKJWE65n0eIq9L8TAzr/ttAKWKthMjrOqmi
7lqf2zYijY2noRJh9hvMUyo2W6TX/ijYVtMCdMnxGDMFXHGO3ff+xNm48dW9mxlu
mYbR5uyCBL7IxQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:43:44 2025 by rpki-client