Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
File: otlSJFuzTkDNq11LCQFDwNhYE5A.mft (raw, json)
Hash identifier: ileBxDOIiDAg2BZNOaOBfjax3rzoYajrHcB/uROw4X8=
Subject key identifier: 9A:C2:E7:81:23:5E:C8:C7:77:A7:D8:B7:EF:82:FC:92:04:89:E1:FB
Authority key identifier: A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
Certificate issuer: /CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Certificate serial: 0194BCA9DDFB85D4A89080555FFAC188A531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:36 +0000
Manifest this update: Fri 31 Jan 2025 14:00:36 +0000
Manifest next update: Sat 01 Feb 2025 14:00:36 +0000
Files and hashes: 1: 3HWzcOaTDrdG94i3xjE6Qq-tfnk.roa (hash: 10l24Yg/npX27cx+ImjzGfcJeOU0IJssFEQ4Du2ScJQ=)
2: 6NvbAT4RMJYDBf6360dj0cmbOC4.roa (hash: tpHQQELFe4AosbNjooax9dsLwDFzjHfeb9ASXozivq8=)
3: cn7xlpxUU_sjrheBrcxBDUwIFZM.roa (hash: rjBABCp1JK8gkLVNNwhPnYtWrojXtWHlNh1PMd//BKI=)
4: otlSJFuzTkDNq11LCQFDwNhYE5A.crl (hash: 0HI7Irggpcl7qHmGJFUeQxAgSk/t1ofLeprL6MkEGpc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:dd:fb:85:d4:a8:90:80:55:5f:fa:c1:88:a5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2d952245bb34e40cdab5d4b090143c0d8581390
Validity
Not Before: Jan 31 14:00:36 2025 GMT
Not After : Feb 1 14:00:36 2025 GMT
Subject: CN=9ac2e781235ec8c777a7d8b7ef82fc920489e1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:d8:0b:b6:47:22:56:53:35:c6:28:f7:3b:
9b:ba:53:ad:ba:a2:71:ba:f8:55:f4:99:1b:a3:a4:
06:cb:e2:33:6c:96:61:9f:2a:36:dd:8a:bc:99:0d:
38:54:e7:8d:78:a0:fb:9e:ad:f2:9a:38:4d:e3:f9:
8e:f6:11:f1:b2:51:d0:84:77:37:d1:8e:7d:02:ea:
96:91:57:48:3a:b8:30:b0:50:91:79:2c:03:db:af:
9b:31:bf:56:5a:05:94:07:75:12:b9:a7:f7:87:07:
25:93:43:51:af:dd:ce:e8:3c:7d:94:41:18:e2:36:
96:31:8a:ec:31:65:69:c5:cf:17:89:8d:b1:1c:dd:
fc:f1:d3:4c:5c:bf:d1:29:ad:38:e6:4c:6c:95:e5:
8e:e0:a5:cd:8f:0f:06:03:76:fb:87:59:92:c2:8f:
32:af:f4:e6:14:a9:3a:2c:39:de:dd:d7:de:eb:c8:
0a:cc:8e:be:24:61:c4:b7:9e:a3:26:30:e5:96:dc:
0f:f1:6a:21:00:f4:97:77:4f:98:c8:fb:41:f8:9e:
79:38:96:6b:2a:b1:a5:36:52:ab:4b:d5:91:9a:a1:
71:c5:e6:d3:4b:54:15:1f:7d:7a:0c:7a:60:5e:93:
e4:0a:c7:ad:ea:f4:d9:20:8a:3a:05:ce:47:81:f6:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C2:E7:81:23:5E:C8:C7:77:A7:D8:B7:EF:82:FC:92:04:89:E1:FB
X509v3 Authority Key Identifier:
keyid:A2:D9:52:24:5B:B3:4E:40:CD:AB:5D:4B:09:01:43:C0:D8:58:13:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otlSJFuzTkDNq11LCQFDwNhYE5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/4b1a80-4e5f-49e7-b502-a22ffee4a515/1/otlSJFuzTkDNq11LCQFDwNhYE5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f0:4c:7b:62:ae:a8:21:8b:be:3e:c3:5f:37:93:6c:db:e0:
6a:47:f4:b6:74:9a:0e:95:2a:db:2e:08:86:d7:4f:7c:ab:58:
d6:a8:7d:1b:7c:17:6b:79:10:e2:f7:93:a7:2c:6d:eb:d9:25:
71:b5:c5:5e:e7:a0:60:5f:10:ba:5c:4c:94:a8:ed:57:cb:c3:
86:04:a9:39:5f:d4:e5:9a:13:64:70:62:60:e0:f0:5f:fc:b9:
df:e4:18:80:65:c6:64:fe:2e:c6:13:25:b9:60:4b:05:81:ed:
20:7f:1c:98:d2:99:6c:7e:ae:58:c0:67:7b:6e:75:2e:ad:15:
ef:f5:01:55:26:b2:d5:22:de:6f:22:a4:1e:47:08:5f:25:d6:
19:66:f1:46:72:e0:e1:1b:d2:41:b5:d3:74:ed:06:c6:35:03:
72:15:27:e3:b1:c1:fd:12:ac:9f:f1:b5:82:19:1f:cf:b9:d0:
d5:bf:cb:8a:b5:ab:29:3e:ab:a7:5b:67:6e:84:b9:c1:ab:10:
56:e2:4a:28:51:01:2a:1c:f3:65:a0:6b:2d:8e:60:ff:7e:72:
32:4c:57:8b:d9:31:4d:0c:6b:88:4b:e7:6f:e2:65:68:7c:5e:
cd:ff:b4:01:b2:ae:a7:5c:1f:8c:4c:46:1b:ef:8f:28:a5:f8:
c1:96:fd:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qd37hdSokIBVX/rBiKUxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZDk1MjI0NWJiMzRlNDBjZGFiNWQ0YjA5MDE0M2MwZDg1
ODEzOTAwHhcNMjUwMTMxMTQwMDM2WhcNMjUwMjAxMTQwMDM2WjAzMTEwLwYDVQQD
Eyg5YWMyZTc4MTIzNWVjOGM3NzdhN2Q4YjdlZjgyZmM5MjA0ODllMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQPYC7ZHIlZTNcYo9zubulOtuqJx
uvhV9Jkbo6QGy+IzbJZhnyo23Yq8mQ04VOeNeKD7nq3ymjhN4/mO9hHxslHQhHc3
0Y59AuqWkVdIOrgwsFCReSwD26+bMb9WWgWUB3USuaf3hwclk0NRr93O6Dx9lEEY
4jaWMYrsMWVpxc8XiY2xHN388dNMXL/RKa045kxsleWO4KXNjw8GA3b7h1mSwo8y
r/TmFKk6LDne3dfe68gKzI6+JGHEt56jJjDlltwP8WohAPSXd0+YyPtB+J55OJZr
KrGlNlKrS9WRmqFxxebTS1QVH316DHpgXpPkCset6vTZIIo6Bc5Hgfb6swIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrC54EjXsjHd6fYt++C/JIEieH7MB8GA1UdIwQY
MBaAFKLZUiRbs05AzatdSwkBQ8DYWBOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDIt
YTIyZmZlZTRhNTE1LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC80YjFhODAtNGU1Zi00OWU3LWI1MDItYTIyZmZlZTRhNTE1
LzEvb3RsU0pGdXpUa0ROcTExTENRRkR3TmhZRTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD/BMe2Ku
qCGLvj7DXzeTbNvgakf0tnSaDpUq2y4IhtdPfKtY1qh9G3wXa3kQ4veTpyxt69kl
cbXFXuegYF8QulxMlKjtV8vDhgSpOV/U5ZoTZHBiYODwX/y53+QYgGXGZP4uxhMl
uWBLBYHtIH8cmNKZbH6uWMBne251Lq0V7/UBVSay1SLebyKkHkcIXyXWGWbxRnLg
4RvSQbXTdO0GxjUDchUn47HB/RKsn/G1ghkfz7nQ1b/LirWrKT6rp1tnboS5wasQ
VuJKKFEBKhzzZaBrLY5g/35yMkxXi9kxTQxriEvnb+JlaHxezf+0AbKup1wfjExG
G++PKKX4wZb9QA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:04 2025 by rpki-client