Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
File: oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft (raw, json)
Hash identifier: XzZaoIcWvDvQT1f4/80QtxgthQ4ZLEcaCeW36rHtFKA=
Subject key identifier: E8:E9:75:EF:E6:7A:FB:D1:8E:3A:08:21:82:53:E5:F4:0A:C3:F0:13
Authority key identifier: A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
Certificate issuer: /CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Certificate serial: 0194BC050D88D34A7900CF45E8D573AF476B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
Manifest number: 9C
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: KVGzhURun_Z2Cbls6jKq8-siUnI.roa (hash: ICdbcaL6JuM+fFFA7u9Ui1orbNqbZysTahR0X2YtQkM=)
2: hSxuqdFakuVuEvKUogCcsFaigPs.roa (hash: Xj6H7DBsScqxHUyFTpNMVSRKFfZSSLZGI1xOM2DNsyc=)
3: oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl (hash: J3JmGiDRQ0MA0Yf+BudCXj5Dn30zTQRWiF3EQ5CxoLc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0d:88:d3:4a:79:00:cf:45:e8:d5:73:af:47:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a07f6e2b60ca464700dd8e28fba0daadc2c40ced
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=e8e975efe67afbd18e3a08218253e5f40ac3f013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:f7:1b:5c:c7:3c:02:53:87:a0:87:ba:d4:
01:20:5b:1e:6f:14:95:c1:0f:9d:05:2d:f1:5a:04:
23:a1:58:27:9b:e6:8c:75:19:8a:83:c7:ab:fc:0a:
7e:4c:43:98:3b:9f:18:4a:2f:80:a0:0e:e7:cb:fd:
ef:52:46:e8:ff:04:ba:32:d2:30:25:be:b8:57:e9:
18:e0:bc:f2:06:5c:70:af:e8:79:b9:6a:1c:33:ab:
a2:08:2d:de:62:34:3f:99:46:27:dd:d2:81:db:c3:
ce:97:3e:e2:b6:22:ab:a3:6d:00:f4:ab:55:1e:64:
93:c4:a7:cc:48:b8:b8:28:5b:01:32:8d:e0:66:5a:
83:f3:97:96:73:71:e7:5f:2f:88:f5:01:21:ca:74:
69:4c:8f:7c:7e:ca:bc:93:65:75:12:1e:a4:e4:ee:
47:bc:df:b4:e0:85:bc:80:87:cb:db:c8:38:04:65:
b6:ae:6e:b0:c4:a0:5f:d2:b3:96:7a:a6:64:be:d4:
3e:d6:d1:ce:20:b3:a3:2d:2e:76:c7:72:b2:8b:c7:
32:40:f7:a7:de:7e:ae:36:bb:99:65:d4:17:4c:b4:
f7:d9:f0:8e:76:62:54:a3:52:4d:db:3f:15:d3:9d:
ce:7b:35:69:44:49:ef:18:3e:75:77:a9:78:6c:db:
35:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E9:75:EF:E6:7A:FB:D1:8E:3A:08:21:82:53:E5:F4:0A:C3:F0:13
X509v3 Authority Key Identifier:
keyid:A0:7F:6E:2B:60:CA:46:47:00:DD:8E:28:FB:A0:DA:AD:C2:C4:0C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oH9uK2DKRkcA3Y4o-6DarcLEDO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a7ce9e-10fc-4bda-838b-bcb724bc2684/1/oH9uK2DKRkcA3Y4o-6DarcLEDO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:14:04:7b:f5:c6:1b:56:e9:96:b6:bc:03:19:82:c4:fa:bd:
87:05:c2:31:0d:bd:71:2d:ab:60:41:63:17:f9:d7:34:6b:64:
b4:48:90:b0:7a:cd:61:2f:0b:b2:c2:13:56:47:f9:18:19:5b:
5c:b5:aa:3e:3b:07:01:1c:03:0b:5d:43:0a:91:c5:e9:43:aa:
28:ad:68:98:91:93:f7:bb:a9:9a:59:d8:0d:ed:aa:9e:20:df:
94:7e:52:13:65:7e:67:91:da:ae:2b:b1:e2:0e:95:1a:c3:c6:
ce:3d:cb:b5:a7:67:08:c1:3b:b4:1f:01:01:f7:eb:f9:06:7e:
bd:d8:7e:43:90:5e:81:67:2c:20:13:1e:35:da:db:b6:f8:0b:
81:2b:39:f0:16:9f:e5:d1:81:84:c7:2f:99:33:f8:e6:e0:d7:
22:00:6a:85:2c:17:6a:16:a7:03:3d:07:e0:13:aa:bd:05:31:
20:1d:ba:99:b1:85:29:43:21:56:8e:1c:a6:d7:9c:44:84:f9:
90:0f:7f:b8:1b:60:59:58:36:77:8c:83:75:e1:b8:c3:48:a1:
1c:c2:e7:7f:c4:34:82:44:e9:6c:fa:00:0f:e2:a5:cc:e0:16:
a0:1e:a6:42:19:36:99:08:89:a8:81:80:d8:05:a1:56:ee:c1:
c4:0b:cc:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQ2I00p5AM9F6NVzr0drMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwN2Y2ZTJiNjBjYTQ2NDcwMGRkOGUyOGZiYTBkYWFkYzJj
NDBjZWQwHhcNMjUwMTMxMTEwMDM1WhcNMjUwMjAxMTEwMDM1WjAzMTEwLwYDVQQD
EyhlOGU5NzVlZmU2N2FmYmQxOGUzYTA4MjE4MjUzZTVmNDBhYzNmMDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzeD3G1zHPAJTh6CHutQBIFsebxSV
wQ+dBS3xWgQjoVgnm+aMdRmKg8er/Ap+TEOYO58YSi+AoA7ny/3vUkbo/wS6MtIw
Jb64V+kY4LzyBlxwr+h5uWocM6uiCC3eYjQ/mUYn3dKB28POlz7itiKro20A9KtV
HmSTxKfMSLi4KFsBMo3gZlqD85eWc3HnXy+I9QEhynRpTI98fsq8k2V1Eh6k5O5H
vN+04IW8gIfL28g4BGW2rm6wxKBf0rOWeqZkvtQ+1tHOILOjLS52x3Kyi8cyQPen
3n6uNruZZdQXTLT32fCOdmJUo1JN2z8V053OezVpREnvGD51d6l4bNs1DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOjpde/mevvRjjoIIYJT5fQKw/ATMB8GA1UdIwQY
MBaAFKB/bitgykZHAN2OKPug2q3CxAztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hN2NlOWUtMTBmYy00YmRhLTgzOGIt
YmNiNzI0YmMyNjg0LzEvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hN2NlOWUtMTBmYy00YmRhLTgzOGItYmNiNzI0YmMyNjg0
LzEvb0g5dUsyREtSa2NBM1k0by02RGFyY0xFRE8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRQEe/XG
G1bplra8AxmCxPq9hwXCMQ29cS2rYEFjF/nXNGtktEiQsHrNYS8LssITVkf5GBlb
XLWqPjsHARwDC11DCpHF6UOqKK1omJGT97upmlnYDe2qniDflH5SE2V+Z5Hariux
4g6VGsPGzj3LtadnCME7tB8BAffr+QZ+vdh+Q5BegWcsIBMeNdrbtvgLgSs58Baf
5dGBhMcvmTP45uDXIgBqhSwXahanAz0H4BOqvQUxIB26mbGFKUMhVo4cptecRIT5
kA9/uBtgWVg2d4yDdeG4w0ihHMLnf8Q0gkTpbPoAD+KlzOAWoB6mQhk2mQiJqIGA
2AWhVu7BxAvMyQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:39:05 2025 by rpki-client