Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
File: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft (raw, json)
Hash identifier: yGoBp0mdF/pO2es87PmB9L3jwCyzFKjhRw2w61d/m3Q=
Subject key identifier: E9:63:43:B1:44:03:4F:F9:9B:80:B8:25:D0:7E:61:45:11:DD:3D:8B
Authority key identifier: 39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
Certificate issuer: /CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Certificate serial: 0194BBCEB0F0991C4B32AD9AE22BF2B09AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
Manifest number: 03E4
Signing time: Fri 31 Jan 2025 10:01:12 +0000
Manifest this update: Fri 31 Jan 2025 10:01:12 +0000
Manifest next update: Sat 01 Feb 2025 10:01:12 +0000
Files and hashes: 1: MIiHSvDprFFovFG0HPxBPItWWEU.roa (hash: ZHAb1bFdnuHWg+PylUlDK1Ju7Ti/rSboUdEtNH0vKAU=)
2: OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl (hash: Uh2a+XjpIoqmN7AFSjUb+IRdX2qB9uHr7hkAUPxovTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b0:f0:99:1c:4b:32:ad:9a:e2:2b:f2:b0:9a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3939f92b825ce110903c31d522b0f50cafd74a6f
Validity
Not Before: Jan 31 10:01:12 2025 GMT
Not After : Feb 1 10:01:12 2025 GMT
Subject: CN=e96343b144034ff99b80b825d07e614511dd3d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2d:8b:3a:01:bd:7c:94:b3:1f:57:24:44:fb:
d6:6f:fe:0f:40:ca:b7:49:f0:6a:94:fc:5f:67:e0:
98:e5:77:f3:45:bb:3d:5f:8a:14:0c:86:db:35:66:
f4:3b:1b:00:64:7e:ca:cc:00:87:a9:63:46:80:53:
c3:78:c9:e5:9d:a8:dc:f5:76:a9:39:b2:a7:0e:86:
3b:e4:bd:ce:85:4d:30:74:37:f9:14:37:e2:0a:29:
86:a2:eb:61:e1:3a:fe:7e:30:f1:e5:0f:d3:e8:e6:
9f:aa:7a:08:6f:77:7e:c7:34:d9:22:32:ce:82:6f:
f8:ee:d0:bf:96:37:5b:40:2e:75:ff:4c:ad:fe:80:
b0:9d:d1:c4:9b:67:79:43:33:4f:eb:ed:29:ba:94:
de:bc:08:e7:c2:10:f7:79:c7:88:bc:4e:59:69:bd:
34:90:b1:14:31:eb:a9:ab:2b:7f:ef:98:e8:0a:0c:
db:b0:1a:43:21:01:e8:e7:21:be:79:66:5a:5d:a4:
59:b6:bb:3a:2e:72:cb:c6:a4:6d:e5:22:e6:74:a0:
9f:55:cb:4e:fb:bf:e1:6f:ed:4c:cb:f7:7d:fc:eb:
c6:62:fb:d0:2e:5f:8f:3f:4f:c4:b5:d5:b1:3e:ec:
46:ec:c4:29:ee:9c:fc:3e:1c:0c:34:00:74:bc:a8:
17:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:63:43:B1:44:03:4F:F9:9B:80:B8:25:D0:7E:61:45:11:DD:3D:8B
X509v3 Authority Key Identifier:
keyid:39:39:F9:2B:82:5C:E1:10:90:3C:31:D5:22:B0:F5:0C:AF:D7:4A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e75e41-a828-4dc5-8ed3-9fc36411accc/1/OTn5K4Jc4RCQPDHVIrD1DK_XSm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:69:46:94:b0:eb:7c:d1:8b:04:9d:28:c2:33:3c:8f:df:78:
b0:69:dd:f0:97:9d:31:ab:48:63:3f:cf:f2:77:76:cf:32:2b:
e4:74:66:08:aa:5c:4a:9d:2c:ca:61:68:21:04:31:ec:1b:27:
d5:ee:39:c2:60:aa:eb:31:eb:56:84:0e:68:a0:9a:6c:01:18:
5b:79:05:0a:ac:3a:ea:f9:d7:44:84:e9:47:c2:5e:3f:77:25:
cc:d7:58:6f:5b:ff:c8:9e:bf:20:2d:e7:b8:37:52:63:a4:8e:
31:2f:b4:1f:fc:9e:2d:b0:53:89:e2:de:f7:59:8d:34:7d:48:
49:9f:1a:2f:25:e0:10:96:b4:aa:0d:21:00:a6:50:15:bb:c1:
53:78:5b:ca:7a:11:fe:02:8e:7a:60:84:9c:34:5e:9a:0b:ab:
d7:59:78:88:55:02:83:47:a9:aa:58:4e:aa:60:07:0d:d3:28:
3d:bc:37:83:a9:22:0f:05:1c:b1:a1:e0:68:56:54:13:d7:b8:
bc:07:ca:1d:2a:2a:be:64:91:96:1d:e9:c7:6a:2b:5f:1d:35:
df:45:0c:b9:80:73:af:69:49:d0:ee:19:af:0b:a2:c5:84:30:
d2:c7:35:79:64:e5:9b:0a:3b:65:0e:bc:dd:bd:f5:2a:92:e1:
8e:49:f0:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zrDwmRxLMq2a4ivysJqiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzlmOTJiODI1Y2UxMTA5MDNjMzFkNTIyYjBmNTBjYWZk
NzRhNmYwHhcNMjUwMTMxMTAwMTEyWhcNMjUwMjAxMTAwMTEyWjAzMTEwLwYDVQQD
EyhlOTYzNDNiMTQ0MDM0ZmY5OWI4MGI4MjVkMDdlNjE0NTExZGQzZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji2LOgG9fJSzH1ckRPvWb/4PQMq3
SfBqlPxfZ+CY5XfzRbs9X4oUDIbbNWb0OxsAZH7KzACHqWNGgFPDeMnlnajc9Xap
ObKnDoY75L3OhU0wdDf5FDfiCimGouth4Tr+fjDx5Q/T6OafqnoIb3d+xzTZIjLO
gm/47tC/ljdbQC51/0yt/oCwndHEm2d5QzNP6+0pupTevAjnwhD3eceIvE5Zab00
kLEUMeupqyt/75joCgzbsBpDIQHo5yG+eWZaXaRZtrs6LnLLxqRt5SLmdKCfVctO
+7/hb+1My/d9/OvGYvvQLl+PP0/EtdWxPuxG7MQp7pz8PhwMNAB0vKgXEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOljQ7FEA0/5m4C4JdB+YUUR3T2LMB8GA1UdIwQY
MBaAFDk5+SuCXOEQkDwx1SKw9Qyv10pvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lNzVlNDEtYTgyOC00ZGM1LThlZDMt
OWZjMzY0MTFhY2NjLzEvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lNzVlNDEtYTgyOC00ZGM1LThlZDMtOWZjMzY0MTFhY2Nj
LzEvT1RuNUs0SmM0UkNRUERIVklyRDFES19YU204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmlGlLDr
fNGLBJ0owjM8j994sGnd8JedMatIYz/P8nd2zzIr5HRmCKpcSp0symFoIQQx7Bsn
1e45wmCq6zHrVoQOaKCabAEYW3kFCqw66vnXRITpR8JeP3clzNdYb1v/yJ6/IC3n
uDdSY6SOMS+0H/yeLbBTieLe91mNNH1ISZ8aLyXgEJa0qg0hAKZQFbvBU3hbynoR
/gKOemCEnDRemgur11l4iFUCg0epqlhOqmAHDdMoPbw3g6kiDwUcsaHgaFZUE9e4
vAfKHSoqvmSRlh3px2orXx0130UMuYBzr2lJ0O4ZrwuixYQw0sc1eWTlmwo7ZQ68
3b31KpLhjknwfw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:29 2025 by rpki-client