Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
File: ofeIKGHCntWZvkqTdIDE0T4lv8I.mft (raw, json)
Hash identifier: 5eZks4wdkigoLwQx3wV7Agn/KUM4oMhAciwlutmgh3E=
Subject key identifier: FD:ED:F9:6F:70:69:5A:B0:9C:63:69:C6:BD:EF:B3:19:42:3C:78:38
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Certificate issuer: /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial: 0194BCE08BA899E1C54918C4B71016E968C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: ZI8Cc8TbOXHSTT6aTy4qes85u18.roa (hash: Gcf7oNxz6hoE1nbwGxOkKAeIU8snb4fxphzbF+WsHH8=)
2: hQJK6zQLhYj5qTjnWHPVq5_Ggwc.roa (hash: qWKatLGe/VjD4eV5U12XcGzsbBr23W6H5teeHc7VO7g=)
3: ofeIKGHCntWZvkqTdIDE0T4lv8I.crl (hash: wiWI+FG2pXBI0sAWYu4GEuprrW22gDKEBg5/qVxbAgw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8b:a8:99:e1:c5:49:18:c4:b7:10:16:e9:68:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=fdedf96f70695ab09c6369c6bdefb319423c7838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:34:0d:bb:5b:88:af:04:5f:b1:2d:bc:1d:03:
b9:13:2e:99:da:ce:4c:30:11:35:bf:17:11:68:c8:
f3:a5:95:ba:30:1c:a7:74:c5:63:1b:48:eb:38:3c:
08:45:06:3a:ee:51:9f:76:aa:f0:31:19:2c:44:85:
e5:00:16:74:ce:61:52:b4:1d:a6:85:d9:b0:5b:b1:
2e:7c:4b:f0:e4:07:10:a9:6a:f3:ce:27:d0:5d:b1:
0c:dd:cf:13:63:30:17:7c:cb:f6:49:93:a6:19:bf:
b6:6f:ae:c5:1d:36:5e:92:68:4b:59:7a:58:5c:5d:
84:a3:46:a6:00:48:30:98:ce:f2:86:df:17:01:63:
49:be:70:a2:7a:2a:e0:94:3a:f3:68:19:bd:14:86:
53:4c:54:b7:e9:d3:75:a6:c3:77:e0:05:3f:86:2a:
7c:ef:6a:1a:f4:c2:e5:35:83:08:62:fd:a0:85:6e:
d9:6f:b3:8b:17:60:7f:56:bd:3c:53:63:d7:ad:97:
80:26:65:cf:91:c0:3c:c7:78:e3:2b:39:ec:b8:48:
98:2f:28:06:2a:66:da:8b:e0:65:45:d3:3e:13:00:
5e:fa:44:92:5e:60:96:e7:31:40:9c:c9:0a:94:e8:
a8:99:c1:81:3f:9e:ac:a3:99:bc:cc:55:c4:6e:67:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:ED:F9:6F:70:69:5A:B0:9C:63:69:C6:BD:EF:B3:19:42:3C:78:38
X509v3 Authority Key Identifier:
keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:d5:34:99:20:28:35:0b:e7:4a:bb:be:d5:24:17:fe:28:d3:
81:ae:e2:32:3a:d9:ad:c1:ba:68:eb:6d:2c:75:b9:1c:74:8a:
07:40:6e:2b:70:ec:71:ef:16:96:bc:a7:88:44:b6:e4:ce:fb:
c1:4a:23:40:22:d9:c6:ec:5b:3c:86:cb:e2:57:3f:b3:21:78:
bd:20:fc:12:b3:e8:cd:f7:27:60:e4:d4:da:43:0e:56:e8:a9:
5f:f0:67:fc:f7:70:56:18:83:0e:19:c6:82:a5:44:f4:4e:b3:
c8:da:12:51:5e:fa:79:1e:e8:77:27:5d:12:62:2e:d7:33:f7:
3a:ae:be:7f:5d:92:bf:63:90:5c:0e:15:1e:2a:56:af:78:8c:
7c:58:7d:62:fa:59:53:2e:9c:80:2e:86:6b:f3:64:07:d7:c1:
e5:86:9e:cf:74:49:fb:89:3a:e8:e8:df:d0:63:c6:ef:21:23:
d7:13:47:af:9b:88:ad:7e:88:b5:23:75:07:56:59:50:2c:42:
56:08:62:46:12:92:8a:75:55:10:9c:d6:c2:0c:0d:2a:88:23:
2d:a7:3a:2d:6e:4a:b4:b2:8a:a0:bd:8d:7e:a6:c0:0b:71:2e:
02:f5:99:2c:ac:2c:1e:b5:ef:05:08:27:f5:24:37:fe:40:a1:
85:92:db:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84IuomeHFSRjEtxAW6WjAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZjc4ODI4NjFjMjllZDU5OWJlNGE5Mzc0ODBjNGQxM2Uy
NWJmYzIwHhcNMjUwMTMxMTUwMDE5WhcNMjUwMjAxMTUwMDE5WjAzMTEwLwYDVQQD
EyhmZGVkZjk2ZjcwNjk1YWIwOWM2MzY5YzZiZGVmYjMxOTQyM2M3ODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjQNu1uIrwRfsS28HQO5Ey6Z2s5M
MBE1vxcRaMjzpZW6MByndMVjG0jrODwIRQY67lGfdqrwMRksRIXlABZ0zmFStB2m
hdmwW7EufEvw5AcQqWrzzifQXbEM3c8TYzAXfMv2SZOmGb+2b67FHTZekmhLWXpY
XF2Eo0amAEgwmM7yht8XAWNJvnCieirglDrzaBm9FIZTTFS36dN1psN34AU/hip8
72oa9MLlNYMIYv2ghW7Zb7OLF2B/Vr08U2PXrZeAJmXPkcA8x3jjKznsuEiYLygG
Kmbai+BlRdM+EwBe+kSSXmCW5zFAnMkKlOiomcGBP56so5m8zFXEbmdz7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3t+W9waVqwnGNpxr3vsxlCPHg4MB8GA1UdIwQY
MBaAFKH3iChhwp7Vmb5Kk3SAxNE+Jb/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAt
YzM3YTU5ODJmNDY2LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAtYzM3YTU5ODJmNDY2
LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq9U0mSAo
NQvnSru+1SQX/ijTga7iMjrZrcG6aOttLHW5HHSKB0BuK3Dsce8WlryniES25M77
wUojQCLZxuxbPIbL4lc/syF4vSD8ErPozfcnYOTU2kMOVuipX/Bn/PdwVhiDDhnG
gqVE9E6zyNoSUV76eR7odyddEmIu1zP3Oq6+f12Sv2OQXA4VHipWr3iMfFh9YvpZ
Uy6cgC6Ga/NkB9fB5Yaez3RJ+4k66Ojf0GPG7yEj1xNHr5uIrX6ItSN1B1ZZUCxC
VghiRhKSinVVEJzWwgwNKogjLac6LW5KtLKKoL2NfqbAC3EuAvWZLKwsHrXvBQgn
9SQ3/kChhZLbLg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:17 2025 by rpki-client