Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
File: 1ots-3IKfJKhgMphS9sO2h8evp0.mft (raw, json)
Hash identifier: O++hhI4ZZm4ahAkwvCim2srAy0uoFLMV71ytS6hqrOc=
Subject key identifier: F6:20:8C:FC:EB:0A:69:93:2B:BD:85:E4:00:D6:72:0E:42:5D:BB:65
Authority key identifier: D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
Certificate issuer: /CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Certificate serial: 0194BC04F27A4CDE32E1CF6E2F3C20ED06DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
Manifest number: 0A29
Signing time: Fri 31 Jan 2025 11:00:28 +0000
Manifest this update: Fri 31 Jan 2025 11:00:28 +0000
Manifest next update: Sat 01 Feb 2025 11:00:28 +0000
Files and hashes: 1: 1ots-3IKfJKhgMphS9sO2h8evp0.crl (hash: bwTp7ru/pcZ0c+rtrqdjrWEV+poODJoi9XSdDuLuszE=)
2: iN4kY7sCfzKOl-coUiFvOhD6wg4.roa (hash: ZI3B1VaDQ0JfOlPoqiW79rOHU3ymg8mbnEbUM636Uvw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f2:7a:4c:de:32:e1:cf:6e:2f:3c:20:ed:06:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68b6cfb720a7c92a180ca614bdb0eda1f1ebe9d
Validity
Not Before: Jan 31 11:00:28 2025 GMT
Not After : Feb 1 11:00:28 2025 GMT
Subject: CN=f6208cfceb0a69932bbd85e400d6720e425dbb65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:db:b3:51:29:7f:7e:12:c5:80:28:8b:25:94:
f7:a1:f5:13:5f:36:6f:02:3c:da:60:98:b4:81:6d:
33:b0:9c:05:ba:79:f4:65:51:26:b5:6c:d4:0e:94:
6f:4a:27:ab:60:ac:ae:ee:8e:dc:5f:8a:60:a8:24:
a0:ee:75:ff:21:8b:4f:6e:4f:37:91:4c:2c:3d:26:
7a:52:dc:d3:d3:8a:32:c2:ee:5a:7c:3e:18:cb:41:
b7:c8:a5:ec:a6:ce:8f:d7:e4:b5:f6:5c:fc:d1:b1:
24:fe:48:55:a1:93:83:2f:29:4c:55:74:d5:22:f6:
4e:df:17:6f:0e:ca:97:4e:56:52:69:24:53:d7:5e:
f6:0d:70:e3:5a:16:22:62:0a:0c:23:10:60:2a:74:
2e:42:70:4f:f3:2d:b1:59:8f:4a:46:2b:5e:52:ad:
94:6e:62:bc:fd:90:b5:2c:eb:a6:5f:34:29:7a:54:
2a:bb:5a:b2:24:9d:1b:4e:2d:e1:22:d9:7f:66:d6:
e4:81:47:13:67:84:51:be:0b:d3:52:ac:d9:e3:07:
58:60:ff:df:1b:20:70:49:ef:6a:39:70:61:d4:a7:
7b:4d:9e:2b:be:d2:46:35:6e:9d:f7:89:68:6d:6a:
dc:9c:04:e7:8a:ec:d4:b9:0f:0b:78:f1:26:29:fe:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:20:8C:FC:EB:0A:69:93:2B:BD:85:E4:00:D6:72:0E:42:5D:BB:65
X509v3 Authority Key Identifier:
keyid:D6:8B:6C:FB:72:0A:7C:92:A1:80:CA:61:4B:DB:0E:DA:1F:1E:BE:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ots-3IKfJKhgMphS9sO2h8evp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b5945d-4915-4bd7-91c1-33e319a454ef/1/1ots-3IKfJKhgMphS9sO2h8evp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:41:a4:6b:9b:aa:65:d1:a5:55:5d:8b:6b:e4:ec:a1:b9:78:
d3:b3:14:29:25:5f:58:82:de:1e:28:e3:b2:6c:62:02:15:f4:
7c:21:48:20:d3:af:47:d3:7f:1e:e7:01:fa:cc:76:5e:1e:74:
a8:7f:56:d3:48:5f:f1:8a:3e:87:7d:6e:5f:3e:1c:8c:9f:05:
ef:4b:28:d7:ed:82:59:23:8e:2a:e8:1e:96:71:44:7f:d8:69:
74:93:8c:bd:8a:20:9d:05:59:39:32:72:8c:d2:ee:58:ad:cc:
dd:1c:54:f1:bd:7e:dd:a6:3c:bf:6a:5e:e7:11:57:21:2e:7b:
ec:35:83:3c:55:17:03:57:9c:f6:22:cd:a4:8f:74:a7:41:91:
f3:ea:98:da:26:77:ae:06:28:52:87:b5:b0:37:db:6b:20:cf:
e0:a6:17:6b:f4:3b:d3:0a:0f:cb:54:73:11:18:86:e2:c7:7e:
fc:4a:12:17:62:4b:70:d7:48:16:89:66:b0:49:7a:55:a6:a4:
64:3a:c9:5f:df:9f:2c:d0:1c:a6:9a:a9:b1:9b:a9:7c:6a:c2:
84:d0:19:53:7a:b0:6b:0f:2f:57:3e:56:9d:d0:0f:a3:89:da:
04:c2:d0:37:da:17:20:82:81:71:7b:4c:7c:b4:3a:75:d9:9f:
df:f5:5d:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BPJ6TN4y4c9uLzwg7QbeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2OGI2Y2ZiNzIwYTdjOTJhMTgwY2E2MTRiZGIwZWRhMWYx
ZWJlOWQwHhcNMjUwMTMxMTEwMDI4WhcNMjUwMjAxMTEwMDI4WjAzMTEwLwYDVQQD
EyhmNjIwOGNmY2ViMGE2OTkzMmJiZDg1ZTQwMGQ2NzIwZTQyNWRiYjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tuzUSl/fhLFgCiLJZT3ofUTXzZv
AjzaYJi0gW0zsJwFunn0ZVEmtWzUDpRvSierYKyu7o7cX4pgqCSg7nX/IYtPbk83
kUwsPSZ6UtzT04oywu5afD4Yy0G3yKXsps6P1+S19lz80bEk/khVoZODLylMVXTV
IvZO3xdvDsqXTlZSaSRT1172DXDjWhYiYgoMIxBgKnQuQnBP8y2xWY9KRiteUq2U
bmK8/ZC1LOumXzQpelQqu1qyJJ0bTi3hItl/ZtbkgUcTZ4RRvgvTUqzZ4wdYYP/f
GyBwSe9qOXBh1Kd7TZ4rvtJGNW6d94lobWrcnATniuzUuQ8LePEmKf4q3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYgjPzrCmmTK72F5ADWcg5CXbtlMB8GA1UdIwQY
MBaAFNaLbPtyCnySoYDKYUvbDtofHr6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW90cy0zSUtmSktoZ01waFM5c08yaDhldnAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iNTk0NWQtNDkxNS00YmQ3LTkxYzEt
MzNlMzE5YTQ1NGVmLzEvMW90cy0zSUtmSktoZ01waFM5c08yaDhldnAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9iNTk0NWQtNDkxNS00YmQ3LTkxYzEtMzNlMzE5YTQ1NGVm
LzEvMW90cy0zSUtmSktoZ01waFM5c08yaDhldnAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbUGka5uq
ZdGlVV2La+Tsobl407MUKSVfWILeHijjsmxiAhX0fCFIINOvR9N/HucB+sx2Xh50
qH9W00hf8Yo+h31uXz4cjJ8F70so1+2CWSOOKugelnFEf9hpdJOMvYognQVZOTJy
jNLuWK3M3RxU8b1+3aY8v2pe5xFXIS577DWDPFUXA1ec9iLNpI90p0GR8+qY2iZ3
rgYoUoe1sDfbayDP4KYXa/Q70woPy1RzERiG4sd+/EoSF2JLcNdIFolmsEl6Vaak
ZDrJX9+fLNAcppqpsZupfGrChNAZU3qwaw8vVz5WndAPo4naBMLQN9oXIIKBcXtM
fLQ6ddmf3/Vdew==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:46 2025 by rpki-client