Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
File: 0HJnvyOylxpHlag--EeKghuvsds.mft (raw, json)
Hash identifier: 8OKx8JA/Xz9pNwhXXnqzEj8UV156E04lKvEAfT7tZjs=
Subject key identifier: A1:10:04:97:D6:06:78:A6:E3:55:CE:3D:70:73:F1:C6:E6:68:72:7A
Authority key identifier: D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
Certificate issuer: /CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Certificate serial: 0194BD17716674CC4934ADBFEC516C682BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:17 +0000
Manifest this update: Fri 31 Jan 2025 16:00:17 +0000
Manifest next update: Sat 01 Feb 2025 16:00:17 +0000
Files and hashes: 1: 0HJnvyOylxpHlag--EeKghuvsds.crl (hash: 2SmkhT0V4q+Tg0ba8NMAllaVXKo0OSiCaYrllO47etI=)
2: 2dNcgj6MvN9n_fYFlGVJH7IP5P0.roa (hash: NdXmI8eBdfB68znJPh1CIG8Aqd8Jvbrd0RbmQ639jeY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:71:66:74:cc:49:34:ad:bf:ec:51:6c:68:2b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d07267bf23b2971a4795a83ef8478a821bafb1db
Validity
Not Before: Jan 31 16:00:17 2025 GMT
Not After : Feb 1 16:00:17 2025 GMT
Subject: CN=a1100497d60678a6e355ce3d7073f1c6e668727a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:5b:5d:be:29:3e:1e:18:f5:fa:52:41:c2:
1a:47:d3:4f:d4:98:51:2a:a2:94:72:cd:26:6b:b1:
53:be:ff:48:40:41:e0:79:a9:70:f9:f2:26:9b:f9:
7e:cd:55:a0:88:2f:66:b8:c7:d4:36:98:77:91:f9:
58:a6:d2:96:79:44:89:3e:25:cd:b7:a9:5e:9a:e1:
63:e0:a4:ea:00:2c:79:d3:aa:80:8b:74:d6:c3:4f:
a4:56:67:77:b3:34:9c:f0:95:62:e5:e1:11:b4:4f:
ee:0a:bc:dc:35:8d:e4:b6:5c:8a:37:4d:04:49:17:
e6:90:18:d6:e7:fd:c5:ed:8d:5f:28:f5:2d:00:b7:
3d:f2:89:6c:50:ca:59:9e:37:c1:a8:82:5b:ac:f1:
1f:f0:2d:fd:40:8f:1d:d4:20:b0:d8:da:68:76:22:
b6:14:58:90:55:e3:dd:f8:f7:a6:fb:b7:c3:8e:72:
f6:9f:79:a5:a7:a2:f4:9e:91:0d:b8:5f:2c:b5:2c:
07:aa:c9:85:2f:c8:d8:5c:b5:3b:2a:8a:6f:60:48:
af:70:32:56:7e:11:a0:47:9c:d0:09:9d:d5:fe:da:
21:3b:3a:d9:bd:4d:b9:54:b3:fe:e4:64:93:36:e3:
8a:08:1b:49:9f:ba:cc:5f:1a:ea:65:19:3b:fb:a4:
05:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:10:04:97:D6:06:78:A6:E3:55:CE:3D:70:73:F1:C6:E6:68:72:7A
X509v3 Authority Key Identifier:
keyid:D0:72:67:BF:23:B2:97:1A:47:95:A8:3E:F8:47:8A:82:1B:AF:B1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0HJnvyOylxpHlag--EeKghuvsds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8db579-c1fc-4215-90f4-f4673ba52c00/1/0HJnvyOylxpHlag--EeKghuvsds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cf:08:aa:20:d8:58:5b:0e:b7:6b:8a:23:2d:d4:8d:c5:20:
2e:a1:f7:48:4e:ba:8a:e7:86:f0:f0:cc:8e:7c:b3:d6:df:13:
05:6c:76:9b:cf:0c:33:ef:96:5f:4d:8f:a6:d3:c7:9a:a9:22:
ea:b1:96:57:e0:76:fd:df:d6:e1:04:af:22:e8:97:98:b6:c5:
3e:9e:7e:c7:01:85:3a:ad:e0:96:a8:d5:c6:00:8b:33:67:99:
88:30:93:2f:23:58:b1:0c:1c:64:8c:20:8f:b7:48:31:a4:11:
52:2f:b2:38:09:4d:c4:51:a4:d7:91:d4:89:62:d7:5a:f3:6d:
08:66:5f:9b:f0:4b:c0:d3:18:0d:41:58:85:01:53:ea:bb:c4:
34:66:91:a9:0a:3c:f3:8c:0c:5b:53:58:68:8d:a6:7b:9b:d7:
1c:59:65:e6:dd:db:2d:08:93:02:2e:2e:dc:20:e2:98:58:a4:
2f:b4:90:06:82:64:d1:98:53:22:f3:af:4c:38:cd:53:11:ad:
ea:a9:d5:ec:bc:2e:6b:c7:d8:93:a3:4f:b8:ee:8e:d5:c7:e5:
b2:d0:3e:02:50:e5:0c:88:ca:15:dc:c2:6d:a5:f8:6c:7d:45:
84:10:c9:f3:fa:75:9f:be:5f:b9:81:73:cc:a0:a0:75:5a:21:
b7:17:a2:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F3FmdMxJNK2/7FFsaCvnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNzI2N2JmMjNiMjk3MWE0Nzk1YTgzZWY4NDc4YTgyMWJh
ZmIxZGIwHhcNMjUwMTMxMTYwMDE3WhcNMjUwMjAxMTYwMDE3WjAzMTEwLwYDVQQD
EyhhMTEwMDQ5N2Q2MDY3OGE2ZTM1NWNlM2Q3MDczZjFjNmU2Njg3MjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU5bXb4pPh4Y9fpSQcIaR9NP1JhR
KqKUcs0ma7FTvv9IQEHgealw+fImm/l+zVWgiC9muMfUNph3kflYptKWeUSJPiXN
t6lemuFj4KTqACx506qAi3TWw0+kVmd3szSc8JVi5eERtE/uCrzcNY3ktlyKN00E
SRfmkBjW5/3F7Y1fKPUtALc98olsUMpZnjfBqIJbrPEf8C39QI8d1CCw2NpodiK2
FFiQVePd+Pem+7fDjnL2n3mlp6L0npENuF8stSwHqsmFL8jYXLU7KopvYEivcDJW
fhGgR5zQCZ3V/tohOzrZvU25VLP+5GSTNuOKCBtJn7rMXxrqZRk7+6QFkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEQBJfWBnim41XOPXBz8cbmaHJ6MB8GA1UdIwQY
MBaAFNByZ78jspcaR5WoPvhHioIbr7HbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS84ZGI1NzktYzFmYy00MjE1LTkwZjQt
ZjQ2NzNiYTUyYzAwLzEvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS84ZGI1NzktYzFmYy00MjE1LTkwZjQtZjQ2NzNiYTUyYzAw
LzEvMEhKbnZ5T3lseHBIbGFnLS1FZUtnaHV2c2RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMs8IqiDY
WFsOt2uKIy3UjcUgLqH3SE66iueG8PDMjnyz1t8TBWx2m88MM++WX02PptPHmqki
6rGWV+B2/d/W4QSvIuiXmLbFPp5+xwGFOq3glqjVxgCLM2eZiDCTLyNYsQwcZIwg
j7dIMaQRUi+yOAlNxFGk15HUiWLXWvNtCGZfm/BLwNMYDUFYhQFT6rvENGaRqQo8
84wMW1NYaI2me5vXHFll5t3bLQiTAi4u3CDimFikL7SQBoJk0ZhTIvOvTDjNUxGt
6qnV7Lwua8fYk6NPuO6O1cflstA+AlDlDIjKFdzCbaX4bH1FhBDJ8/p1n75fuYFz
zKCgdVohtxei7w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:19 2025 by rpki-client