Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
File: OuvyLoZEQlX994owxMsLLZHlt1c.mft (raw, json)
Hash identifier: jLYn24ouj7gsZ1UNbp/yTQlRYY9U1Uey7KVcnQ5BHXM=
Subject key identifier: 1E:D8:73:9D:3C:6C:C1:D3:F7:FB:22:26:47:06:07:E5:5A:2B:B0:C6
Authority key identifier: 3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
Certificate issuer: /CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Certificate serial: 0194BD8533B8D41678521D160CAADB37E3BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: OuvyLoZEQlX994owxMsLLZHlt1c.crl (hash: PwN4b58pPJ2nHs9l4/bkYg9uiJNQa3Or5NzU0W0SjQU=)
2: XGOc6Yta1j7sUM6Fv0ZGp6ykvs4.roa (hash: c3SifmbdW15nfuTRwIPceqNmWNmz6mVEc9pu384Gaco=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:33:b8:d4:16:78:52:1d:16:0c:aa:db:37:e3:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aebf22e86444255fdf78a30c4cb0b2d91e5b757
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=1ed8739d3c6cc1d3f7fb2226470607e55a2bb0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:69:29:57:e4:92:17:a2:eb:0a:9b:e0:a4:
69:89:ac:80:7d:17:93:fd:ac:3f:47:b5:5f:38:3d:
14:46:4b:bd:e3:8a:26:d8:0f:b1:8e:42:4c:a8:9b:
16:df:08:37:d5:85:2e:11:dd:ed:df:e9:d1:ef:21:
a1:65:5a:c8:82:0a:df:9f:e6:5a:c1:19:f6:2b:0d:
f0:24:04:66:a4:91:d0:26:fb:b7:4e:89:51:da:c5:
db:10:1f:07:28:b9:79:36:66:aa:35:28:a2:20:ec:
1d:65:b6:44:77:99:3a:34:e9:65:fb:e0:c9:42:30:
cc:c6:10:6d:df:56:66:47:6c:7b:2d:2c:5f:9a:f8:
14:ba:80:87:4b:35:67:5d:2b:ce:d4:49:1e:26:8d:
bc:f0:2f:5d:7c:60:10:a0:a9:b4:79:e1:5b:23:15:
ed:93:56:26:fc:87:7a:fc:64:e7:1a:5b:34:1f:24:
38:09:6a:60:29:be:d4:2b:3d:f2:90:a4:61:ea:f1:
40:01:fc:99:b1:4c:11:b5:38:fd:97:98:d2:e6:b3:
a1:44:de:6c:b6:94:9d:0a:ac:3a:db:16:88:fe:ed:
58:7f:75:1f:a0:c3:3b:3f:74:00:d0:23:bf:cb:f1:
7e:74:93:aa:79:7a:a6:84:e6:e5:70:55:b4:59:b6:
1c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D8:73:9D:3C:6C:C1:D3:F7:FB:22:26:47:06:07:E5:5A:2B:B0:C6
X509v3 Authority Key Identifier:
keyid:3A:EB:F2:2E:86:44:42:55:FD:F7:8A:30:C4:CB:0B:2D:91:E5:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OuvyLoZEQlX994owxMsLLZHlt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/98b2f5-75e1-4245-976d-0150c94f940d/1/OuvyLoZEQlX994owxMsLLZHlt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:37:98:bf:cc:f5:e2:06:28:a1:77:28:99:89:c0:0e:b5:63:
98:3c:8f:11:73:28:b2:f3:eb:3e:1a:5a:b5:c0:fc:1c:8f:3c:
3e:e1:56:e6:d0:5b:5b:42:6d:83:4d:84:a3:51:ba:f5:50:6c:
23:aa:59:fe:be:9c:f9:d8:22:b7:b6:7e:46:fd:f4:85:04:ac:
d8:ce:e1:af:9e:60:66:e1:47:04:86:17:ef:84:c5:f5:4a:8b:
63:3e:53:0a:e9:4d:96:ab:d6:3e:b5:d4:1a:99:8b:12:c7:3e:
90:99:01:79:df:12:34:b2:cf:e5:98:37:8f:e8:05:16:6a:e4:
c2:c9:1b:f8:90:8e:f2:67:04:48:98:66:62:fe:fa:d8:00:b7:
94:dd:fd:da:ed:67:5a:0d:38:9c:7d:63:16:ea:f4:87:1b:f3:
be:c7:7b:9d:2a:64:03:fa:d2:de:24:78:81:31:18:7c:56:0a:
2b:6e:6c:47:d5:fe:e0:6e:ea:be:03:32:2a:96:24:7c:84:b7:
e7:c7:76:31:de:8e:d2:64:7f:9d:a5:be:a4:db:02:7b:10:ba:
d6:4c:b2:f7:1a:3b:fa:27:ec:e0:00:67:3a:d3:63:b9:e0:66:
7e:c7:e3:1a:bf:8a:c0:fd:ca:94:a7:f2:23:be:10:a1:5a:24:
e2:1a:da:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hTO41BZ4Uh0WDKrbN+O/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWJmMjJlODY0NDQyNTVmZGY3OGEzMGM0Y2IwYjJkOTFl
NWI3NTcwHhcNMjUwMTMxMTgwMDEwWhcNMjUwMjAxMTgwMDEwWjAzMTEwLwYDVQQD
EygxZWQ4NzM5ZDNjNmNjMWQzZjdmYjIyMjY0NzA2MDdlNTVhMmJiMGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAlpKVfkkhei6wqb4KRpiayAfReT
/aw/R7VfOD0URku944om2A+xjkJMqJsW3wg31YUuEd3t3+nR7yGhZVrIggrfn+Za
wRn2Kw3wJARmpJHQJvu3TolR2sXbEB8HKLl5NmaqNSiiIOwdZbZEd5k6NOll++DJ
QjDMxhBt31ZmR2x7LSxfmvgUuoCHSzVnXSvO1EkeJo288C9dfGAQoKm0eeFbIxXt
k1Ym/Id6/GTnGls0HyQ4CWpgKb7UKz3ykKRh6vFAAfyZsUwRtTj9l5jS5rOhRN5s
tpSdCqw62xaI/u1Yf3UfoMM7P3QA0CO/y/F+dJOqeXqmhOblcFW0WbYcCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7Yc508bMHT9/siJkcGB+VaK7DGMB8GA1UdIwQY
MBaAFDrr8i6GREJV/feKMMTLCy2R5bdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3V2eUxvWkVRbFg5OTRvd3hNc0xMWkhsdDFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQt
MDE1MGM5NGY5NDBkLzEvT3V2eUxvWkVRbFg5OTRvd3hNc0xMWkhsdDFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85OGIyZjUtNzVlMS00MjQ1LTk3NmQtMDE1MGM5NGY5NDBk
LzEvT3V2eUxvWkVRbFg5OTRvd3hNc0xMWkhsdDFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjeYv8z1
4gYooXcomYnADrVjmDyPEXMosvPrPhpatcD8HI88PuFW5tBbW0Jtg02Eo1G69VBs
I6pZ/r6c+dgit7Z+Rv30hQSs2M7hr55gZuFHBIYX74TF9UqLYz5TCulNlqvWPrXU
GpmLEsc+kJkBed8SNLLP5Zg3j+gFFmrkwskb+JCO8mcESJhmYv762AC3lN392u1n
Wg04nH1jFur0hxvzvsd7nSpkA/rS3iR4gTEYfFYKK25sR9X+4G7qvgMyKpYkfIS3
58d2Md6O0mR/naW+pNsCexC61kyy9xo7+ifs4ABnOtNjueBmfsfjGr+KwP3KlKfy
I74QoVok4hraCg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:42 2025 by rpki-client