Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File: oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier: NXEieDfSeOBZ91UjHDuULbZWS79ocmEeV0QcOf+vJSw=
Subject key identifier: FB:AC:F2:05:92:6B:5D:06:70:BA:8F:50:9F:1F:9A:CE:CB:49:02:15
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer: /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial: 0194BCA973EFDB100E46F929ACE4B8CB8E86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number: 1438
Signing time: Fri 31 Jan 2025 14:00:09 +0000
Manifest this update: Fri 31 Jan 2025 14:00:09 +0000
Manifest next update: Sat 01 Feb 2025 14:00:09 +0000
Files and hashes: 1: 95FzUOf19GAUgH-NNap3guhoYwc.roa (hash: xIP1fB6Qn9UTZZo8HocsS+GRzZb3S08GTszP5U7/+78=)
2: EFk1lNXwEBcRAFhoClA443_i5HA.roa (hash: xLW6nYf20kTwvvd9EPpkcVtHN4fslrZstANOcysv2Fs=)
3: MuDm6qOBJ8xkrh2L926I8rpU5do.roa (hash: LGlkBx/kOBt10H9SsN38yJ3HGznA6mZgmUvmJ/8iHgA=)
4: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: 3oJjXrQaEylc+/dZvPzTDXa2EI787+76VxPjUiC29ac=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:73:ef:db:10:0e:46:f9:29:ac:e4:b8:cb:8e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Validity
Not Before: Jan 31 14:00:09 2025 GMT
Not After : Feb 1 14:00:09 2025 GMT
Subject: CN=fbacf205926b5d0670ba8f509f1f9acecb490215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:d5:6e:15:78:b1:2d:0a:19:1a:c7:d0:e7:
40:f8:3b:28:d0:5c:4e:72:81:3f:97:2e:3b:ab:b6:
51:4f:b6:f1:e0:db:1a:1d:45:bf:04:bb:60:39:60:
f1:85:d0:eb:1f:2b:98:48:46:5f:53:71:f3:85:8c:
02:60:5e:21:a6:be:0e:c1:c2:2e:64:3d:f9:fd:bf:
21:71:16:87:a0:a8:21:37:e2:fa:2f:a4:14:15:dd:
fd:b6:63:cd:25:fd:84:c6:2b:81:b0:cb:43:ac:21:
cb:34:fd:95:84:a5:d0:e2:b9:7f:cf:15:ed:cd:93:
2a:e7:d2:a3:95:b3:98:b1:12:f1:65:1f:c2:2a:3f:
00:4c:16:92:fa:64:cc:70:04:3f:80:15:d0:1c:38:
d4:23:4f:db:c4:99:a1:31:7a:6a:d3:65:f5:0f:0b:
33:bf:7f:1e:bc:a0:2a:ca:26:50:b8:f8:01:19:8a:
63:5a:68:ba:5d:f6:f0:77:43:58:94:c0:9f:e4:a4:
98:0c:f2:eb:99:64:2e:08:3f:be:b0:95:1a:3e:52:
d2:f9:7b:fd:3a:7d:8e:57:0a:7f:64:14:e0:1b:71:
59:42:e3:ad:40:47:26:27:ce:5e:16:4e:8d:1f:e0:
25:e6:1a:1d:53:6e:1a:59:b2:01:5f:ff:6e:64:ef:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AC:F2:05:92:6B:5D:06:70:BA:8F:50:9F:1F:9A:CE:CB:49:02:15
X509v3 Authority Key Identifier:
keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4f:d4:43:92:38:e4:97:ac:50:09:3c:23:60:8d:e8:26:59:
fb:12:dc:d6:e3:63:1f:59:80:a3:c3:30:7b:8e:6d:1c:7e:96:
9b:e3:e5:79:9c:aa:4f:de:3f:51:38:91:9a:07:b9:38:c0:e1:
90:ba:ab:ac:58:15:6a:18:c5:da:d1:54:b6:7b:c7:1d:79:5c:
2e:fe:52:58:7f:bf:4c:7e:98:d0:6e:16:fa:50:a8:39:c2:98:
c1:3a:da:78:1d:f5:38:88:34:82:0d:5c:ac:2b:c9:39:44:77:
50:3a:a0:15:f1:40:fa:85:72:01:96:ac:36:fe:2a:ee:36:45:
f7:b2:f4:23:26:87:97:90:9d:d1:7d:61:a7:94:40:85:92:26:
68:d2:b8:ed:fa:22:99:e3:cf:83:22:38:39:c8:14:3f:85:38:
3e:70:0d:0f:13:54:6f:14:c8:a3:45:20:85:fe:5a:45:ca:95:
4e:23:4a:72:95:ed:a6:b7:d8:5f:f4:6a:09:bc:94:41:64:cd:
c1:30:f1:99:88:70:d4:43:ed:e9:59:c1:66:8b:2a:2d:19:e4:
de:b0:3f:91:89:7e:67:bc:13:06:a5:1e:47:a5:38:46:61:ff:
30:76:be:5a:73:23:2e:9f:fa:3c:13:dd:b7:4a:5b:40:72:df:
b9:63:3f:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qXPv2xAORvkprOS4y46GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZTM4MWI2ZTc2Y2I5NTIwZThkOGY1Njc3NmVjYTBmZTE3
NmNjNDAwHhcNMjUwMTMxMTQwMDA5WhcNMjUwMjAxMTQwMDA5WjAzMTEwLwYDVQQD
EyhmYmFjZjIwNTkyNmI1ZDA2NzBiYThmNTA5ZjFmOWFjZWNiNDkwMjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCjVbhV4sS0KGRrH0OdA+Dso0FxO
coE/ly47q7ZRT7bx4NsaHUW/BLtgOWDxhdDrHyuYSEZfU3HzhYwCYF4hpr4OwcIu
ZD35/b8hcRaHoKghN+L6L6QUFd39tmPNJf2ExiuBsMtDrCHLNP2VhKXQ4rl/zxXt
zZMq59KjlbOYsRLxZR/CKj8ATBaS+mTMcAQ/gBXQHDjUI0/bxJmhMXpq02X1Dwsz
v38evKAqyiZQuPgBGYpjWmi6Xfbwd0NYlMCf5KSYDPLrmWQuCD++sJUaPlLS+Xv9
On2OVwp/ZBTgG3FZQuOtQEcmJ85eFk6NH+Al5hodU24aWbIBX/9uZO/fpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPus8gWSa10GcLqPUJ8fms7LSQIVMB8GA1UdIwQY
MBaAFKDjgbbnbLlSDo2PVnduyg/hdsxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS84ZTZmMDgtMzBmMC00NmRkLWE3YTEt
YTljMzg0MTI4ZDQyLzEvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS84ZTZmMDgtMzBmMC00NmRkLWE3YTEtYTljMzg0MTI4ZDQy
LzEvb09PQnR1ZHN1VklPalk5V2QyN0tELUYyekVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACk/UQ5I4
5JesUAk8I2CN6CZZ+xLc1uNjH1mAo8Mwe45tHH6Wm+PleZyqT94/UTiRmge5OMDh
kLqrrFgVahjF2tFUtnvHHXlcLv5SWH+/TH6Y0G4W+lCoOcKYwTraeB31OIg0gg1c
rCvJOUR3UDqgFfFA+oVyAZasNv4q7jZF97L0IyaHl5Cd0X1hp5RAhZImaNK47foi
mePPgyI4OcgUP4U4PnANDxNUbxTIo0Ughf5aRcqVTiNKcpXtprfYX/RqCbyUQWTN
wTDxmYhw1EPt6VnBZosqLRnk3rA/kYl+Z7wTBqUeR6U4RmH/MHa+WnMjLp/6PBPd
t0pbQHLfuWM/BQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:53 2025 by rpki-client