Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
File: o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft (raw, json)
Hash identifier: hqsof5dE8KWPnh2xCAiRVP8+fLdrZMTmB2aW0lYt55o=
Subject key identifier: 42:2E:5C:DD:5A:69:6D:7E:42:AF:49:4E:69:3D:06:EF:60:86:FD:6F
Authority key identifier: A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
Certificate issuer: /CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Certificate serial: 0194BD8587B766E2FDE7B34F80C3824B7FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
Manifest number: 141D
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: JQFRevUesYnGzWy86if_lRLWdpc.roa (hash: t3BYwJZyAAH5HRBi+AIKc99FxTLmFzwx0nZw4AplB88=)
2: o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl (hash: dPEpa+LPEXezjkCrHf76n+fC4L8CGlG1GP2+aCTKcO4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:87:b7:66:e2:fd:e7:b3:4f:80:c3:82:4b:7f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a366f35bac61a0abf71d18d6b1063d5c933a24ab
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=422e5cdd5a696d7e42af494e693d06ef6086fd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:bd:c7:bd:76:57:85:89:99:d2:97:38:ed:
5d:a3:9a:16:1a:68:18:b7:c4:0a:48:dd:0e:6c:a4:
cb:be:6e:6e:22:65:74:87:fd:01:cd:8e:0f:7b:32:
52:82:32:71:f1:5f:20:33:66:ce:97:70:ac:3c:9a:
a4:52:9f:ba:9f:35:54:c2:ca:84:f9:ca:8e:d4:d7:
21:3c:1d:10:da:c3:1d:df:a2:84:c8:96:43:ff:c8:
a0:0f:cf:48:0e:da:4f:66:47:8c:39:fc:7d:be:ea:
f4:7c:a2:a8:91:31:ec:f4:76:9e:90:5c:4c:a1:c3:
aa:02:a7:eb:c1:50:b4:59:f2:f7:0a:fc:0d:b6:ad:
3d:47:25:92:47:69:6f:70:44:f1:d9:97:a5:64:9f:
8b:23:6d:4a:3d:f7:4d:63:84:69:49:da:c0:bb:f7:
aa:66:66:d1:40:07:40:db:41:a5:91:95:f0:5e:b4:
63:53:35:ce:f1:70:00:ef:1a:e3:4a:34:8a:af:64:
86:c9:7e:73:74:04:58:23:3f:0a:b9:2c:01:6e:9a:
97:55:e1:62:53:32:ee:e2:0a:aa:9f:a0:36:4d:d5:
fa:fc:59:35:bf:a2:35:2f:7f:17:46:74:a2:b0:6e:
de:81:75:17:43:b8:bd:60:2d:8c:31:ae:e5:12:00:
8c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2E:5C:DD:5A:69:6D:7E:42:AF:49:4E:69:3D:06:EF:60:86:FD:6F
X509v3 Authority Key Identifier:
keyid:A3:66:F3:5B:AC:61:A0:AB:F7:1D:18:D6:B1:06:3D:5C:93:3A:24:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2bzW6xhoKv3HRjWsQY9XJM6JKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4cf814-79b5-4786-ac51-3190795e863b/1/o2bzW6xhoKv3HRjWsQY9XJM6JKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:94:89:e8:85:ff:c8:ba:ee:c4:a0:31:24:19:ce:a9:e1:c5:
7c:04:ef:31:ea:8d:df:27:81:c4:62:84:da:d9:d6:a6:22:88:
e1:02:74:88:94:1e:cf:af:86:43:37:58:8b:b3:1b:df:35:1d:
62:ff:28:93:ba:ba:a8:e8:73:e5:6f:e1:47:84:0c:69:98:f1:
10:16:4b:e1:25:da:f5:72:33:46:9f:1c:9d:68:c4:8e:ed:b0:
04:9f:eb:28:8d:c3:f4:1c:09:a8:32:3b:17:db:46:64:fa:28:
55:d4:81:7f:ac:f5:82:13:3e:7b:67:51:d2:b1:7f:50:d8:d7:
64:dc:26:71:3d:ec:28:ab:da:56:fc:dc:dc:d1:4d:02:bc:9c:
6d:d7:b0:f7:29:76:d1:d6:b5:81:fe:31:4b:6d:55:0b:43:ce:
d1:41:d8:ed:b7:9d:58:ef:a6:c2:e3:a6:2a:34:35:dc:a5:23:
72:a0:90:8c:e1:6f:08:76:4b:14:bb:5f:3b:fc:3d:9c:8b:30:
f5:7a:57:73:01:f8:1b:34:39:4e:c1:d1:c9:2f:88:d7:a7:f4:
a0:a1:d8:f9:1a:91:78:3a:9b:57:53:d9:40:bd:e5:b3:c1:fc:
4d:26:a6:b5:7e:09:50:0b:2a:58:ca:11:24:f3:df:39:48:84:
72:50:da:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYe3ZuL957NPgMOCS3+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNjZmMzViYWM2MWEwYWJmNzFkMThkNmIxMDYzZDVjOTMz
YTI0YWIwHhcNMjUwMTMxMTgwMDMyWhcNMjUwMjAxMTgwMDMyWjAzMTEwLwYDVQQD
Eyg0MjJlNWNkZDVhNjk2ZDdlNDJhZjQ5NGU2OTNkMDZlZjYwODZmZDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6e9x712V4WJmdKXOO1do5oWGmgY
t8QKSN0ObKTLvm5uImV0h/0BzY4PezJSgjJx8V8gM2bOl3CsPJqkUp+6nzVUwsqE
+cqO1NchPB0Q2sMd36KEyJZD/8igD89IDtpPZkeMOfx9vur0fKKokTHs9HaekFxM
ocOqAqfrwVC0WfL3CvwNtq09RyWSR2lvcETx2ZelZJ+LI21KPfdNY4RpSdrAu/eq
ZmbRQAdA20GlkZXwXrRjUzXO8XAA7xrjSjSKr2SGyX5zdARYIz8KuSwBbpqXVeFi
UzLu4gqqn6A2TdX6/Fk1v6I1L38XRnSisG7egXUXQ7i9YC2MMa7lEgCMOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIuXN1aaW1+Qq9JTmk9Bu9ghv1vMB8GA1UdIwQY
MBaAFKNm81usYaCr9x0Y1rEGPVyTOiSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzJielc2eGhvS3YzSFJqV3NRWTlYSk02SktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC80Y2Y4MTQtNzliNS00Nzg2LWFjNTEt
MzE5MDc5NWU4NjNiLzEvbzJielc2eGhvS3YzSFJqV3NRWTlYSk02SktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC80Y2Y4MTQtNzliNS00Nzg2LWFjNTEtMzE5MDc5NWU4NjNi
LzEvbzJielc2eGhvS3YzSFJqV3NRWTlYSk02SktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpSJ6IX/
yLruxKAxJBnOqeHFfATvMeqN3yeBxGKE2tnWpiKI4QJ0iJQez6+GQzdYi7Mb3zUd
Yv8ok7q6qOhz5W/hR4QMaZjxEBZL4SXa9XIzRp8cnWjEju2wBJ/rKI3D9BwJqDI7
F9tGZPooVdSBf6z1ghM+e2dR0rF/UNjXZNwmcT3sKKvaVvzc3NFNArycbdew9yl2
0da1gf4xS21VC0PO0UHY7bedWO+mwuOmKjQ13KUjcqCQjOFvCHZLFLtfO/w9nIsw
9XpXcwH4GzQ5TsHRyS+I16f0oKHY+RqReDqbV1PZQL3ls8H8TSamtX4JUAsqWMoR
JPPfOUiEclDaVA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:02 2025 by rpki-client