Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
File: oE3odQHH0wgsdmWfTevZQohDtMs.mft (raw, json)
Hash identifier: rSZPir8lrSRp4tk86wJTBAWjfs4l2BtklsH1RUXF3eA=
Subject key identifier: B2:F5:C4:0F:7B:D9:B6:E4:27:36:75:4B:1D:5D:5F:B7:39:5B:76:2D
Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb
Certificate serial: 0194BCA9D3DEF50CCA427E7970DBA6A4BBF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
Manifest number: 100D
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: 3oKx6h0eBr3yZ2nfockvN65K1_o.roa (hash: geWao+6sgTP3cLFpfRuFIKY1lyLCLqYJA9Pcg4p46Gs=)
2: oE3odQHH0wgsdmWfTevZQohDtMs.crl (hash: bj1oEdLMERZe+rdDZoR1BM6lHtndaq9F+4Dfh1t4stQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d3:de:f5:0c:ca:42:7e:79:70:db:a6:a4:bb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=b2f5c40f7bd9b6e42736754b1d5d5fb7395b762d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:41:90:db:6b:c9:e7:47:67:64:27:d3:5b:1e:
8a:8b:a3:95:9a:db:c0:ec:4f:31:da:8e:21:e7:da:
6c:04:8a:bb:e8:b4:af:3e:ff:2c:47:cd:10:6b:3b:
14:f4:2a:81:0a:71:e2:ba:23:2c:21:9f:1f:76:f5:
9d:5e:cb:8a:a8:ec:5d:08:51:e0:c0:15:ab:71:26:
84:e3:50:40:8c:8d:70:ed:05:be:e8:15:78:37:91:
70:cf:b6:9b:7f:a7:ed:ff:00:19:37:80:6e:cc:c7:
14:0d:cf:10:d0:78:1b:68:16:03:9a:c6:d3:76:21:
b0:5d:ab:de:87:3a:56:29:bf:80:24:3e:f2:5a:e3:
a3:c1:03:77:03:4d:02:ac:84:84:24:ec:ff:75:b0:
26:71:20:6c:d7:75:3f:77:3f:f3:36:45:a8:2a:fc:
1b:d2:d5:29:6e:d3:c1:a0:81:85:15:b7:a8:c9:37:
78:51:d7:55:07:6d:79:90:48:d7:bc:d2:c5:08:0a:
e7:c2:b8:e2:65:80:f1:7e:10:c1:c1:0c:8f:fc:ef:
e3:e4:50:f2:8f:67:6b:4a:30:bf:16:a0:f8:09:8c:
f7:cb:51:2c:55:c1:37:4c:14:e8:5d:c4:3f:ee:e6:
fb:db:68:2b:96:b2:2e:01:c1:7e:c2:2b:6f:d4:b4:
25:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F5:C4:0F:7B:D9:B6:E4:27:36:75:4B:1D:5D:5F:B7:39:5B:76:2D
X509v3 Authority Key Identifier:
keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0f:79:e4:9b:38:31:3c:14:f0:85:a7:54:90:e5:c8:da:8c:
30:e9:a2:f9:da:1c:6f:dc:6f:aa:b3:32:c3:11:58:f3:12:da:
7a:b5:43:ca:fd:29:d1:74:c1:91:72:48:cb:dc:49:58:5d:f2:
01:57:71:14:97:e5:a8:93:a1:93:93:18:2b:4c:18:9b:45:70:
53:61:47:55:c9:c8:73:94:66:13:c1:02:65:51:84:d9:e1:45:
18:7f:fa:f4:f7:5b:b1:c7:3b:d6:ac:de:40:05:b7:c3:4e:c1:
8f:86:10:a9:8f:7d:8a:ce:ae:f6:5e:20:dc:17:b1:fc:4c:4e:
12:e8:01:29:c7:d4:ab:5e:94:3b:4b:ef:0a:5e:f5:74:c7:72:
d0:fb:b9:81:c9:2f:92:94:3c:ca:3b:a1:32:67:41:31:44:8b:
df:81:08:74:32:ae:1b:6f:1c:1b:bb:68:e8:eb:04:09:3e:16:
5d:52:c7:df:cc:3a:24:96:48:d5:07:a0:cb:b1:ad:54:74:ff:
a3:8b:b5:7c:e0:3c:7d:b1:44:2c:1e:9c:7e:f7:0c:2b:4b:44:
c5:67:11:25:75:03:ac:f1:84:06:2c:a6:41:93:4d:33:2f:38:
0f:1d:f9:a5:46:24:b9:76:c1:11:69:f7:d7:5e:0f:c5:5c:7a:
18:54:3b:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdPe9QzKQn55cNumpLvzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNGRlODc1MDFjN2QzMDgyYzc2NjU5ZjRkZWJkOTQyODg0
M2I0Y2IwHhcNMjUwMTMxMTQwMDMzWhcNMjUwMjAxMTQwMDMzWjAzMTEwLwYDVQQD
EyhiMmY1YzQwZjdiZDliNmU0MjczNjc1NGIxZDVkNWZiNzM5NWI3NjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkGQ22vJ50dnZCfTWx6Ki6OVmtvA
7E8x2o4h59psBIq76LSvPv8sR80QazsU9CqBCnHiuiMsIZ8fdvWdXsuKqOxdCFHg
wBWrcSaE41BAjI1w7QW+6BV4N5Fwz7abf6ft/wAZN4BuzMcUDc8Q0HgbaBYDmsbT
diGwXavehzpWKb+AJD7yWuOjwQN3A00CrISEJOz/dbAmcSBs13U/dz/zNkWoKvwb
0tUpbtPBoIGFFbeoyTd4UddVB215kEjXvNLFCArnwrjiZYDxfhDBwQyP/O/j5FDy
j2drSjC/FqD4CYz3y1EsVcE3TBToXcQ/7ub722grlrIuAcF+witv1LQlDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLL1xA972bbkJzZ1Sx1dX7c5W3YtMB8GA1UdIwQY
MBaAFKBN6HUBx9MILHZln03r2UKIQ7TLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5Njkt
NzQ4Zjc4NzgzODhhLzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80NjVjOTAtNzBmYi00MDE1LWI5NjktNzQ4Zjc4NzgzODhh
LzEvb0Uzb2RRSEgwd2dzZG1XZlRldlpRb2hEdE1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQ955Js4
MTwU8IWnVJDlyNqMMOmi+docb9xvqrMywxFY8xLaerVDyv0p0XTBkXJIy9xJWF3y
AVdxFJflqJOhk5MYK0wYm0VwU2FHVcnIc5RmE8ECZVGE2eFFGH/69Pdbscc71qze
QAW3w07Bj4YQqY99is6u9l4g3Bex/ExOEugBKcfUq16UO0vvCl71dMdy0Pu5gckv
kpQ8yjuhMmdBMUSL34EIdDKuG28cG7to6OsECT4WXVLH38w6JJZI1Qegy7GtVHT/
o4u1fOA8fbFELB6cfvcMK0tExWcRJXUDrPGEBiymQZNNMy84Dx35pUYkuXbBEWn3
114PxVx6GFQ7AA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:28 2025 by rpki-client