Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
File: U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft (raw, json)
Hash identifier: 0fyiHtyaw323E20AaIEiSJ4DuEn7JiBS6qAuGjtQjNw=
Subject key identifier: 31:67:88:11:73:63:86:4D:38:0E:C8:E9:52:32:1C:9E:AA:43:A4:6A
Authority key identifier: 53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
Certificate issuer: /CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Certificate serial: 0194BBCEBEBF5D43BD87472CC632A8E58DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:16 +0000
Manifest this update: Fri 31 Jan 2025 10:01:16 +0000
Manifest next update: Sat 01 Feb 2025 10:01:16 +0000
Files and hashes: 1: CMb4sSALz-KpBLSc_havR1--Rcg.roa (hash: tSEX+cRvKAqr6srk3pPXDdRAbuuNHsu00QGpp8uCSYw=)
2: Lf-7J_CEiQS4b7WeR5Eaw4iyRLQ.roa (hash: 99fN5956ngv/TFkL8FxEzwLHD53MuB+d8ra8OJh/4dM=)
3: U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl (hash: X5xdqQAm6KuO5Q/ZRmKzBU9jtCLQAEW59GyA63cZz/Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:be:bf:5d:43:bd:87:47:2c:c6:32:a8:e5:8d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53f39d2f20e2d9b4f96cbd1337ea32da518d8ec8
Validity
Not Before: Jan 31 10:01:16 2025 GMT
Not After : Feb 1 10:01:16 2025 GMT
Subject: CN=316788117363864d380ec8e952321c9eaa43a46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:78:9b:b2:73:cc:57:07:77:81:ef:ee:6c:86:
82:37:ec:cb:c2:71:37:a9:06:67:20:fe:1d:83:70:
2b:b6:35:af:be:28:6b:42:2c:ec:72:5b:0c:9c:42:
fc:e5:43:d1:ce:cf:f7:fc:19:95:42:56:4f:3e:b2:
47:47:32:68:52:8d:63:cd:17:63:3c:b6:a8:0e:1b:
02:b1:30:c7:75:54:d5:b5:29:00:1c:0a:07:a2:8b:
b3:53:60:59:86:63:8e:cf:08:0c:72:da:2b:01:7c:
45:fa:b3:43:cd:d0:7c:dd:00:5e:fb:24:3c:5e:fd:
94:f8:2f:58:7d:3d:18:19:a5:71:96:82:0b:d9:6e:
a2:44:56:1d:f1:1e:c8:8b:7a:a9:cf:0f:61:a7:61:
03:77:4f:e1:90:56:61:68:f7:7e:07:38:6c:e1:36:
fd:39:69:b7:73:52:5a:2a:d5:a0:a6:aa:92:d5:f8:
37:34:31:61:3b:4b:ae:f4:0b:d8:27:fe:66:11:78:
68:f1:92:5f:58:d0:6c:b3:56:b0:35:c8:72:45:8b:
29:66:e3:ba:f4:fc:ef:c8:5b:5b:0e:7a:83:30:f4:
75:b6:2e:12:6e:33:f4:1a:3c:c7:89:0c:fb:2c:8e:
96:74:ff:b8:f1:eb:41:6b:cf:3d:ad:7e:73:39:79:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:67:88:11:73:63:86:4D:38:0E:C8:E9:52:32:1C:9E:AA:43:A4:6A
X509v3 Authority Key Identifier:
keyid:53:F3:9D:2F:20:E2:D9:B4:F9:6C:BD:13:37:EA:32:DA:51:8D:8E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_OdLyDi2bT5bL0TN-oy2lGNjsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1d8fca-b462-4313-a523-e411b43dc68a/1/U_OdLyDi2bT5bL0TN-oy2lGNjsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8f:f3:e8:ae:a7:d6:4f:c1:29:98:98:a4:8b:40:da:5e:ea:
81:9f:47:1b:87:ae:e3:6b:35:9f:5a:1e:07:d2:03:a7:d1:cf:
52:41:d9:8a:8c:0b:b9:12:fc:1f:fc:c1:6e:f7:d3:76:96:b9:
75:c3:31:f0:7b:23:c4:c8:30:59:4b:09:bd:3a:e1:00:22:89:
fd:18:5e:37:37:2b:ec:79:de:94:76:95:25:81:8d:80:46:33:
42:6c:c3:30:49:ee:10:76:53:e1:8b:9f:2b:ac:df:7b:25:9f:
1d:80:45:19:ed:92:4d:5a:73:0f:79:3d:58:77:8c:68:63:a7:
60:d6:95:e2:37:e5:10:9f:e3:c3:92:30:31:eb:5a:ea:f7:2c:
43:9b:2b:61:b7:aa:04:e5:df:fd:8f:24:45:3f:82:2f:6c:e9:
ba:e8:ec:47:2c:7d:5b:69:1a:dd:ee:b5:a8:fe:f5:dd:19:44:
aa:db:f6:26:7b:92:f7:a9:d1:69:95:2f:13:0d:54:ed:db:94:
a8:02:d0:ba:a8:5a:e5:3e:e6:a3:30:bf:a3:e5:50:79:fe:ae:
12:c8:c4:f1:5b:c5:65:4c:ab:1a:2c:f6:65:d7:eb:e0:61:6e:
fc:b3:85:d7:b6:7e:55:3e:90:c9:e5:c0:b1:a3:49:13:19:f6:
a6:ea:15:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zr6/XUO9h0csxjKo5Y3vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZjM5ZDJmMjBlMmQ5YjRmOTZjYmQxMzM3ZWEzMmRhNTE4
ZDhlYzgwHhcNMjUwMTMxMTAwMTE2WhcNMjUwMjAxMTAwMTE2WjAzMTEwLwYDVQQD
EygzMTY3ODgxMTczNjM4NjRkMzgwZWM4ZTk1MjMyMWM5ZWFhNDNhNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHibsnPMVwd3ge/ubIaCN+zLwnE3
qQZnIP4dg3ArtjWvvihrQizsclsMnEL85UPRzs/3/BmVQlZPPrJHRzJoUo1jzRdj
PLaoDhsCsTDHdVTVtSkAHAoHoouzU2BZhmOOzwgMctorAXxF+rNDzdB83QBe+yQ8
Xv2U+C9YfT0YGaVxloIL2W6iRFYd8R7Ii3qpzw9hp2EDd0/hkFZhaPd+Bzhs4Tb9
OWm3c1JaKtWgpqqS1fg3NDFhO0uu9AvYJ/5mEXho8ZJfWNBss1awNchyRYspZuO6
9PzvyFtbDnqDMPR1ti4SbjP0GjzHiQz7LI6WdP+48etBa889rX5zOXmbTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFniBFzY4ZNOA7I6VIyHJ6qQ6RqMB8GA1UdIwQY
MBaAFFPznS8g4tm0+Wy9EzfqMtpRjY7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMt
ZTQxMWI0M2RjNjhhLzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xZDhmY2EtYjQ2Mi00MzEzLWE1MjMtZTQxMWI0M2RjNjhh
LzEvVV9PZEx5RGkyYlQ1YkwwVE4tb3kybEdOanNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn4/z6K6n
1k/BKZiYpItA2l7qgZ9HG4eu42s1n1oeB9IDp9HPUkHZiowLuRL8H/zBbvfTdpa5
dcMx8HsjxMgwWUsJvTrhACKJ/RheNzcr7HnelHaVJYGNgEYzQmzDMEnuEHZT4Yuf
K6zfeyWfHYBFGe2STVpzD3k9WHeMaGOnYNaV4jflEJ/jw5IwMeta6vcsQ5srYbeq
BOXf/Y8kRT+CL2zpuujsRyx9W2ka3e61qP713RlEqtv2JnuS96nRaZUvEw1U7duU
qALQuqha5T7mozC/o+VQef6uEsjE8VvFZUyrGiz2Zdfr4GFu/LOF17Z+VT6QyeXA
saNJExn2puoVEw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:08 2025 by rpki-client