Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
File: rO9NpWy5QNny99Ahryph-9OxTqg.mft (raw, json)
Hash identifier: 1Jy9B2sp3mh6vVfrJBSkN0/2RECx2XqMwjFnNSJj5/Q=
Subject key identifier: 2A:B4:21:92:9D:67:F3:EB:FC:0C:40:DE:68:AF:B4:53:8E:BC:DF:10
Authority key identifier: AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8
Certificate issuer: /CN=acef4da56cb940d9f2f7d021af2a61fbd3b14ea8
Certificate serial: 0194BD4E98B983DF1EC03E1271210BBF28DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
Manifest number: 0A33
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: csc62_075z-O1jbjAbm_rCnKZRc.roa (hash: Tb7p7/2jlLjl4/3NDouCmjK2S/QTfoZSS+7FIIdOEgc=)
2: rO9NpWy5QNny99Ahryph-9OxTqg.crl (hash: 3FT10s8WP2Dmr1NCC9YnAuBZK9syLEIQ60VOUfVGn14=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:98:b9:83:df:1e:c0:3e:12:71:21:0b:bf:28:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acef4da56cb940d9f2f7d021af2a61fbd3b14ea8
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=2ab421929d67f3ebfc0c40de68afb4538ebcdf10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d2:db:17:2e:f7:e4:05:cf:c4:07:66:7d:65:
8d:7e:99:d0:a8:7c:ab:58:b8:c1:9a:c6:cf:06:0d:
da:61:80:d5:eb:84:20:1e:58:16:d4:4b:69:94:89:
88:18:81:d5:c1:27:66:68:8c:6f:f8:5f:c2:d2:8a:
1a:be:04:88:d5:3c:07:1e:42:b5:e0:44:a2:49:7e:
f4:2c:3f:54:80:cb:d4:61:1a:55:14:c0:66:b5:69:
74:ac:b9:59:03:19:06:89:27:08:39:fe:33:5e:af:
c3:69:84:e7:b5:20:72:de:21:bf:71:fa:08:5b:2e:
b7:26:22:33:55:18:0f:0f:b3:c7:50:c8:c8:66:b9:
42:6e:e8:b7:b6:e9:13:d5:e9:ba:0f:81:9b:46:81:
3f:f2:29:0d:2e:a5:98:ac:03:4a:a7:53:d1:d7:dd:
cd:5f:fb:91:05:5a:63:0b:7b:95:d5:4b:33:01:3e:
e0:fd:24:20:d6:3f:8d:3b:65:c2:9c:a8:b2:af:c9:
76:83:f7:be:9a:5d:c9:09:04:d8:fc:d5:5f:a5:aa:
4e:47:22:94:b5:bd:79:90:bd:1d:03:fe:fe:90:61:
6e:d9:cf:26:8a:ad:b4:5e:20:f6:2b:03:f8:b6:d3:
31:03:e7:63:d4:e1:8d:c7:db:97:de:3b:b5:07:cf:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B4:21:92:9D:67:F3:EB:FC:0C:40:DE:68:AF:B4:53:8E:BC:DF:10
X509v3 Authority Key Identifier:
keyid:AC:EF:4D:A5:6C:B9:40:D9:F2:F7:D0:21:AF:2A:61:FB:D3:B1:4E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rO9NpWy5QNny99Ahryph-9OxTqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a5c088-cfdc-4b95-abf4-3911bbc54747/1/rO9NpWy5QNny99Ahryph-9OxTqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:8f:e4:35:50:db:55:66:67:0e:ac:30:4e:86:f1:b2:cf:be:
6b:34:7f:2f:97:c5:10:64:7f:18:0e:63:35:9e:3c:79:0f:27:
b7:80:9f:be:58:71:af:01:9a:1b:c1:29:dd:0c:37:c7:63:ed:
fd:00:8b:3c:9d:aa:f8:03:17:e2:e6:13:44:d6:ac:a2:8d:15:
f0:7b:a7:2d:32:f9:cc:00:8c:92:f5:d8:1c:f0:43:8c:af:79:
d7:1b:7e:ad:8f:c0:b4:72:4d:84:a6:42:bd:ba:b1:67:a0:52:
61:8d:42:7d:a7:50:28:a5:ab:56:a7:0e:e7:ef:36:25:07:94:
dd:2e:7b:3f:92:7f:ef:5e:be:42:3e:82:1c:50:e8:de:28:80:
7b:b1:35:84:5d:ee:71:b7:cc:08:bf:86:0e:ba:2e:5a:99:18:
37:9e:2d:c4:7c:f3:52:96:9d:4c:50:ea:0a:f2:43:b3:32:82:
2a:78:1a:e1:36:9d:9b:6f:32:73:93:41:a7:ad:61:41:06:67:
c9:ba:ca:60:c6:89:dd:fe:6b:d1:c3:24:28:2f:b1:f4:2f:8d:
25:0d:46:93:88:5c:a2:cc:19:1f:ad:86:78:93:94:9b:a9:47:
af:41:ff:9c:1a:91:48:c2:b9:49:58:0a:71:52:c2:95:b5:79:
19:f3:ef:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9Tpi5g98ewD4ScSELvyjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZWY0ZGE1NmNiOTQwZDlmMmY3ZDAyMWFmMmE2MWZiZDNi
MTRlYTgwHhcNMjUwMTMxMTcwMDMyWhcNMjUwMjAxMTcwMDMyWjAzMTEwLwYDVQQD
EygyYWI0MjE5MjlkNjdmM2ViZmMwYzQwZGU2OGFmYjQ1MzhlYmNkZjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtLbFy735AXPxAdmfWWNfpnQqHyr
WLjBmsbPBg3aYYDV64QgHlgW1EtplImIGIHVwSdmaIxv+F/C0ooavgSI1TwHHkK1
4ESiSX70LD9UgMvUYRpVFMBmtWl0rLlZAxkGiScIOf4zXq/DaYTntSBy3iG/cfoI
Wy63JiIzVRgPD7PHUMjIZrlCbui3tukT1em6D4GbRoE/8ikNLqWYrANKp1PR193N
X/uRBVpjC3uV1UszAT7g/SQg1j+NO2XCnKiyr8l2g/e+ml3JCQTY/NVfpapORyKU
tb15kL0dA/7+kGFu2c8miq20XiD2KwP4ttMxA+dj1OGNx9uX3ju1B8/WdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCq0IZKdZ/Pr/AxA3mivtFOOvN8QMB8GA1UdIwQY
MBaAFKzvTaVsuUDZ8vfQIa8qYfvTsU6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck85TnBXeTVRTm55OTlBaHJ5cGgtOU94VHFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hNWMwODgtY2ZkYy00Yjk1LWFiZjQt
MzkxMWJiYzU0NzQ3LzEvck85TnBXeTVRTm55OTlBaHJ5cGgtOU94VHFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9hNWMwODgtY2ZkYy00Yjk1LWFiZjQtMzkxMWJiYzU0NzQ3
LzEvck85TnBXeTVRTm55OTlBaHJ5cGgtOU94VHFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfY/kNVDb
VWZnDqwwTobxss++azR/L5fFEGR/GA5jNZ48eQ8nt4CfvlhxrwGaG8Ep3Qw3x2Pt
/QCLPJ2q+AMX4uYTRNasoo0V8HunLTL5zACMkvXYHPBDjK951xt+rY/AtHJNhKZC
vbqxZ6BSYY1CfadQKKWrVqcO5+82JQeU3S57P5J/716+Qj6CHFDo3iiAe7E1hF3u
cbfMCL+GDrouWpkYN54txHzzUpadTFDqCvJDszKCKnga4Tadm28yc5NBp61hQQZn
ybrKYMaJ3f5r0cMkKC+x9C+NJQ1Gk4hcoswZH62GeJOUm6lHr0H/nBqRSMK5SVgK
cVLClbV5GfPvSA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:20:31 2025 by rpki-client