Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
File: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft (raw, json)
Hash identifier: Ba9fa/JvRdz6KrejPy05N+oDyDZ+h9uIpfdELUfymtc=
Subject key identifier: 4F:B2:5E:C2:45:38:80:08:AE:31:0D:B5:B4:6D:33:6F:3D:38:AB:CF
Authority key identifier: D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
Certificate issuer: /CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Certificate serial: 0194BCA9E94380E424E0F0F69DBDCFE49239
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
Manifest number: 0CDC
Signing time: Fri 31 Jan 2025 14:00:39 +0000
Manifest this update: Fri 31 Jan 2025 14:00:39 +0000
Manifest next update: Sat 01 Feb 2025 14:00:39 +0000
Files and hashes: 1: 0E7XqwXvQw8zGg6cfEDvAxEUfw4.roa (hash: GEurlnwNp4FPEWbJDU+gHsQep+536ZgKzEj3iyCeYrM=)
2: 0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl (hash: ftOGyeLUMqxrw9HBZ1YFW5qkZmnOkjL+LSYBGUcetvs=)
3: 5YRtqk6Jp7Zam_D7fc_X7XfH8s4.roa (hash: X5F/YiS9H2WE1ZFG9REO1WI3BKWNsouj5lZWL1J+hoo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e9:43:80:e4:24:e0:f0:f6:9d:bd:cf:e4:92:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04687a3ee6322b757de81e7f53c5d32eebe33a6
Validity
Not Before: Jan 31 14:00:39 2025 GMT
Not After : Feb 1 14:00:39 2025 GMT
Subject: CN=4fb25ec245388008ae310db5b46d336f3d38abcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:98:d4:68:7a:b8:f5:89:81:99:ea:ba:46:a8:
b8:cb:db:31:52:7f:b8:aa:ea:7f:50:d3:ed:73:b5:
4c:0d:ba:36:b9:89:48:b8:59:62:ec:52:c8:2a:ee:
84:1e:78:ba:4a:18:f6:f9:d3:e5:c3:0e:b6:5b:14:
70:35:0f:fd:3c:46:e8:c5:1e:c0:f4:7b:7c:0c:85:
7b:e0:75:dc:9a:e1:52:a6:b2:3c:4b:72:f3:21:27:
59:8b:8e:f8:c3:36:7e:87:b4:73:da:b4:06:12:47:
6e:b5:50:a9:5d:b8:1b:19:b7:25:8b:ff:e1:7f:ef:
33:59:39:ee:8a:17:84:d2:2e:26:09:e3:69:f1:0c:
15:6c:e0:01:63:b6:a9:74:5b:a2:18:be:20:b7:8c:
8a:70:9e:e9:7c:77:63:c0:51:d7:06:0a:68:5c:9f:
d9:cc:83:90:a4:88:4d:ca:f2:18:e7:30:d6:bb:d4:
d8:3d:a6:74:71:da:25:84:b7:c9:cc:94:d7:cf:ec:
28:3d:59:ba:34:e3:88:d8:06:71:5c:39:65:7f:53:
99:39:ad:ca:e1:16:28:bd:41:09:72:a0:29:d5:9f:
d7:df:05:d3:d8:c8:fc:0a:2d:d3:fa:30:67:dd:91:
fc:1f:15:54:14:4b:14:09:7a:59:6e:59:49:ed:c1:
f0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B2:5E:C2:45:38:80:08:AE:31:0D:B5:B4:6D:33:6F:3D:38:AB:CF
X509v3 Authority Key Identifier:
keyid:D0:46:87:A3:EE:63:22:B7:57:DE:81:E7:F5:3C:5D:32:EE:BE:33:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/bfdd19-6bba-4dc9-afc6-97be426a2334/1/0EaHo-5jIrdX3oHn9TxdMu6-M6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:a1:3f:d5:c5:4f:47:6f:ac:f6:a6:10:30:cf:7f:b9:32:08:
cb:6f:46:1c:35:b1:eb:a6:02:fc:77:f8:da:c4:2b:a4:29:4d:
4f:1b:24:9d:4a:f1:bc:cd:70:26:c3:ec:bb:42:65:d9:a1:2e:
d0:ae:41:fb:36:15:3a:c0:7c:fc:ed:2f:e0:af:9b:4e:5b:f6:
db:91:7f:ba:52:e5:dd:7b:23:e3:ba:b2:4a:cb:29:fe:70:33:
79:10:11:03:83:18:f2:f1:99:b7:57:4f:b6:b9:0d:ec:2d:b8:
0f:45:11:44:da:f2:15:c6:fb:da:81:84:e7:2a:fd:cf:61:54:
4b:4c:de:ec:e0:11:b2:89:fa:af:8d:8e:4a:e9:7a:51:46:64:
1a:5c:d1:d3:f2:e1:bd:25:09:cd:ff:65:de:e2:3e:e5:d1:ee:
f4:3c:1a:94:63:34:aa:7f:33:07:85:75:6b:7e:6a:33:29:3c:
0a:66:ef:eb:1c:32:75:a1:56:a4:29:1d:b4:78:de:f6:3f:9a:
eb:0e:c4:2d:9f:c8:eb:cc:52:2b:fe:19:b9:21:e9:ab:f8:fe:
5c:47:6f:09:ad:5e:d5:cb:2a:11:b4:f9:d3:60:95:a9:67:31:
2a:43:38:05:5b:c5:b8:6d:ca:b7:35:5a:f8:35:19:7c:76:02:
e1:51:d4:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qelDgOQk4PD2nb3P5JI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDY4N2EzZWU2MzIyYjc1N2RlODFlN2Y1M2M1ZDMyZWVi
ZTMzYTYwHhcNMjUwMTMxMTQwMDM5WhcNMjUwMjAxMTQwMDM5WjAzMTEwLwYDVQQD
Eyg0ZmIyNWVjMjQ1Mzg4MDA4YWUzMTBkYjViNDZkMzM2ZjNkMzhhYmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JjUaHq49YmBmeq6Rqi4y9sxUn+4
qup/UNPtc7VMDbo2uYlIuFli7FLIKu6EHni6Shj2+dPlww62WxRwNQ/9PEboxR7A
9Ht8DIV74HXcmuFSprI8S3LzISdZi474wzZ+h7Rz2rQGEkdutVCpXbgbGbcli//h
f+8zWTnuiheE0i4mCeNp8QwVbOABY7apdFuiGL4gt4yKcJ7pfHdjwFHXBgpoXJ/Z
zIOQpIhNyvIY5zDWu9TYPaZ0cdolhLfJzJTXz+woPVm6NOOI2AZxXDllf1OZOa3K
4RYovUEJcqAp1Z/X3wXT2Mj8Ci3T+jBn3ZH8HxVUFEsUCXpZbllJ7cHwxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+yXsJFOIAIrjENtbRtM289OKvPMB8GA1UdIwQY
MBaAFNBGh6PuYyK3V96B5/U8XTLuvjOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVhSG8tNWpJcmRYM29IbjlUeGRNdTYtTTZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iZmRkMTktNmJiYS00ZGM5LWFmYzYt
OTdiZTQyNmEyMzM0LzEvMEVhSG8tNWpJcmRYM29IbjlUeGRNdTYtTTZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iZmRkMTktNmJiYS00ZGM5LWFmYzYtOTdiZTQyNmEyMzM0
LzEvMEVhSG8tNWpJcmRYM29IbjlUeGRNdTYtTTZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALaE/1cVP
R2+s9qYQMM9/uTIIy29GHDWx66YC/Hf42sQrpClNTxsknUrxvM1wJsPsu0Jl2aEu
0K5B+zYVOsB8/O0v4K+bTlv225F/ulLl3Xsj47qySssp/nAzeRARA4MY8vGZt1dP
trkN7C24D0URRNryFcb72oGE5yr9z2FUS0ze7OARson6r42OSul6UUZkGlzR0/Lh
vSUJzf9l3uI+5dHu9DwalGM0qn8zB4V1a35qMyk8Cmbv6xwydaFWpCkdtHje9j+a
6w7ELZ/I68xSK/4ZuSHpq/j+XEdvCa1e1csqEbT502CVqWcxKkM4BVvFuG3KtzVa
+DUZfHYC4VHUfQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:26 2025 by rpki-client