Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
File: 0deIJuFxfsmT62TdEYeHawZej1g.mft (raw, json)
Hash identifier: wPj9jT9HczNNmfqz82xdfEhEt0ChaoY5GBuQfzi01tg=
Subject key identifier: 88:87:1D:BF:5D:74:0C:D9:95:CC:8C:4F:A7:F2:06:0F:71:53:2B:9D
Authority key identifier: D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
Certificate issuer: /CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Certificate serial: 0194BD1784D6E6944C6D02AD4859438D8AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
Manifest number: 0BED
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: 0deIJuFxfsmT62TdEYeHawZej1g.crl (hash: T392QnrZu1/buHn9Ovl3oyiB9eGP96819vzjO05TyD4=)
2: lsnXG1QZQcE8MO7Sy6Rk0--VHVo.roa (hash: H6uKA8IXZMicdWaKzhjJe9pvq8QiwubQ+Jp2iPiiq2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:84:d6:e6:94:4c:6d:02:ad:48:59:43:8d:8a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1d78826e1717ec993eb64dd1187876b065e8f58
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=88871dbf5d740cd995cc8c4fa7f2060f71532b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:3b:3f:3b:50:5c:6f:54:b4:99:da:46:bc:
2c:1c:fc:05:e4:e3:fe:48:e8:41:bb:c4:46:9f:94:
eb:83:e7:d3:2a:32:cf:23:13:ec:ec:f3:4d:9d:c0:
ed:fb:15:65:0a:57:1f:27:36:d2:b5:ad:6d:23:a8:
29:23:4b:a3:32:b8:ef:4b:18:97:26:07:0a:01:97:
ae:8d:73:e2:e9:7b:27:74:6a:fc:1f:6d:63:d0:7e:
41:6a:c4:10:e1:86:49:fc:58:8d:75:98:3c:07:22:
4f:a1:d3:8f:5f:4f:86:40:54:7b:e8:1b:f2:ef:d6:
4b:a4:56:f0:64:a5:b0:53:1f:cb:31:04:42:3a:6b:
7e:28:64:2a:da:27:4c:a6:ee:6f:47:18:a4:60:b9:
e7:14:49:04:57:67:d7:33:83:b2:61:b6:fc:6e:3c:
d5:7c:2b:fe:36:5a:d9:58:33:7f:63:3a:e3:e1:d6:
f1:ab:ba:ab:15:0a:79:52:a4:18:87:44:d5:75:d3:
06:63:3f:8e:ec:e4:cf:a6:88:31:f4:7b:9b:93:4e:
58:f9:7d:8f:8d:52:f7:c9:3e:bb:e9:1a:ee:24:43:
b8:07:94:68:83:f7:09:57:cf:86:fc:cb:1c:0e:ed:
dd:58:63:aa:29:7a:a3:dd:8b:4c:09:14:44:29:ad:
ca:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:87:1D:BF:5D:74:0C:D9:95:CC:8C:4F:A7:F2:06:0F:71:53:2B:9D
X509v3 Authority Key Identifier:
keyid:D1:D7:88:26:E1:71:7E:C9:93:EB:64:DD:11:87:87:6B:06:5E:8F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0deIJuFxfsmT62TdEYeHawZej1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0eeb2f-1aa0-4762-b4e8-b59c2ac951cb/1/0deIJuFxfsmT62TdEYeHawZej1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e5:25:3c:17:1e:89:08:db:4b:79:40:70:76:cd:5a:ad:3f:
52:34:5a:33:86:cf:69:85:d4:70:28:ad:be:ea:07:c6:96:ff:
77:f5:3c:6a:62:25:ce:a0:c3:ba:0f:db:33:3d:ad:0a:ba:18:
85:98:e3:58:bc:ce:2f:6e:3a:7c:9c:a5:27:41:fb:1d:71:3c:
6f:df:a8:eb:e1:aa:73:a8:52:2f:bf:32:e9:3b:3f:7d:5b:3b:
88:d5:ac:67:8c:28:76:0c:3c:2c:46:41:d1:ed:48:d5:62:ce:
03:80:0e:19:3f:e9:32:52:31:3d:85:57:5c:de:9e:80:7d:44:
87:54:0c:7c:1a:1e:88:31:cf:61:94:88:52:de:a2:3b:64:b4:
5e:f3:fe:a8:aa:6c:1f:ea:14:3d:1c:a7:8f:98:d8:b2:95:34:
a8:13:5c:dc:50:59:07:c7:55:7d:49:85:75:8c:60:aa:a6:38:
0b:2d:6a:04:70:f9:28:c0:fb:f4:18:fa:cb:28:9d:ef:aa:e7:
40:f3:bf:a0:10:6f:32:54:0a:07:0a:76:cc:85:28:7c:56:ea:
c6:42:b7:6b:49:d5:87:69:27:e6:fc:b9:06:42:46:02:5f:dc:
c2:e8:bf:56:ab:51:41:f8:3d:4a:1b:31:90:f4:92:ca:13:1f:
fb:3e:b4:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F4TW5pRMbQKtSFlDjYrlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZDc4ODI2ZTE3MTdlYzk5M2ViNjRkZDExODc4NzZiMDY1
ZThmNTgwHhcNMjUwMTMxMTYwMDIyWhcNMjUwMjAxMTYwMDIyWjAzMTEwLwYDVQQD
Eyg4ODg3MWRiZjVkNzQwY2Q5OTVjYzhjNGZhN2YyMDYwZjcxNTMyYjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtio7PztQXG9UtJnaRrwsHPwF5OP+
SOhBu8RGn5Trg+fTKjLPIxPs7PNNncDt+xVlClcfJzbSta1tI6gpI0ujMrjvSxiX
JgcKAZeujXPi6XsndGr8H21j0H5BasQQ4YZJ/FiNdZg8ByJPodOPX0+GQFR76Bvy
79ZLpFbwZKWwUx/LMQRCOmt+KGQq2idMpu5vRxikYLnnFEkEV2fXM4OyYbb8bjzV
fCv+NlrZWDN/Yzrj4dbxq7qrFQp5UqQYh0TVddMGYz+O7OTPpogx9Hubk05Y+X2P
jVL3yT676RruJEO4B5Rog/cJV8+G/MscDu3dWGOqKXqj3YtMCRREKa3KCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiHHb9ddAzZlcyMT6fyBg9xUyudMB8GA1UdIwQY
MBaAFNHXiCbhcX7Jk+tk3RGHh2sGXo9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgt
YjU5YzJhYzk1MWNiLzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8wZWViMmYtMWFhMC00NzYyLWI0ZTgtYjU5YzJhYzk1MWNi
LzEvMGRlSUp1Rnhmc21UNjJUZEVZZUhhd1plajFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtOUlPBce
iQjbS3lAcHbNWq0/UjRaM4bPaYXUcCitvuoHxpb/d/U8amIlzqDDug/bMz2tCroY
hZjjWLzOL246fJylJ0H7HXE8b9+o6+Gqc6hSL78y6Ts/fVs7iNWsZ4wodgw8LEZB
0e1I1WLOA4AOGT/pMlIxPYVXXN6egH1Eh1QMfBoeiDHPYZSIUt6iO2S0XvP+qKps
H+oUPRynj5jYspU0qBNc3FBZB8dVfUmFdYxgqqY4Cy1qBHD5KMD79Bj6yyid76rn
QPO/oBBvMlQKBwp2zIUofFbqxkK3a0nVh2kn5vy5BkJGAl/cwui/VqtRQfg9Shsx
kPSSyhMf+z60bw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:43 2025 by rpki-client