Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
File: oeqN4xzspVgDzzrxTUpyea6ERtA.mft (raw, json)
Hash identifier: mTiipiED3VZB19lbVoG6501beN5Ohe2iV2Za29iNiPA=
Subject key identifier: 03:FB:F3:B3:27:0E:03:05:63:DC:D2:F5:67:77:4E:B2:95:91:1F:8E
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 0194BD4E84F772DA5461A12265814C5D2D7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
Manifest number: 10F6
Signing time: Fri 31 Jan 2025 17:00:27 +0000
Manifest this update: Fri 31 Jan 2025 17:00:27 +0000
Manifest next update: Sat 01 Feb 2025 17:00:27 +0000
Files and hashes: 1: ZsbPyFKfDnHSbXB5Rdfyon4nTbQ.roa (hash: f+ETlYVDvmS9d48p0ZYmqykWIOKGSt0JzwDEXRuMaVs=)
2: oeqN4xzspVgDzzrxTUpyea6ERtA.crl (hash: lvZm3tXiNpXTGLJlMkwWOGgwE57tp5q5tiwo+ok2JLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:84:f7:72:da:54:61:a1:22:65:81:4c:5d:2d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: Jan 31 17:00:27 2025 GMT
Not After : Feb 1 17:00:27 2025 GMT
Subject: CN=03fbf3b3270e030563dcd2f567774eb295911f8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:25:6b:af:8a:14:28:11:94:29:20:d9:2e:8b:
03:cc:69:0e:7b:88:3b:e4:44:18:b6:25:f1:b8:c4:
de:16:8c:9c:77:b4:d4:b2:cc:1e:e4:2e:a4:36:06:
ad:53:67:0d:94:14:22:7c:42:2f:2a:b6:27:62:bb:
8f:25:11:63:19:86:42:93:a6:84:33:0c:1e:59:39:
5b:96:64:46:49:dc:bd:58:59:f3:59:dd:67:0b:91:
0b:54:64:89:a9:03:99:e6:c2:e1:12:a7:e1:66:48:
fe:b4:e1:49:90:96:d7:38:9b:b5:57:32:f0:53:b9:
95:2b:ce:d8:4c:87:54:8b:28:32:0a:d2:67:cb:5d:
be:cc:bb:54:ce:3a:1a:e8:f0:3c:4e:4a:82:ad:35:
3e:8f:b3:68:f7:a2:29:55:7e:27:46:70:a7:40:f9:
0f:ae:93:78:41:78:cf:b5:47:89:e3:a9:d7:38:c0:
27:85:d8:bd:2d:cd:2d:5e:ba:b4:4d:fb:e3:ca:d2:
29:1d:03:11:d5:fe:ee:cd:26:85:f1:55:4e:1d:70:
e2:e1:55:e8:b2:83:fc:66:be:9c:d4:22:23:b8:db:
2b:50:0c:72:7f:a4:c3:77:bd:a9:77:9b:26:9f:2c:
5a:8b:bf:dc:85:c9:36:03:50:ba:2c:aa:64:6b:72:
2e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FB:F3:B3:27:0E:03:05:63:DC:D2:F5:67:77:4E:B2:95:91:1F:8E
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5c:99:29:d9:ec:6d:84:e7:6e:30:76:07:82:b6:f7:31:ff:
03:19:ac:d9:b9:f4:fd:15:68:27:83:ed:27:38:a4:d5:15:e2:
bd:b1:7e:7a:81:2c:14:a0:04:84:7e:cb:e8:ba:7b:34:4e:ac:
b9:36:2e:60:43:5b:0e:e1:c5:4b:27:63:c1:92:4e:a6:b3:e0:
b2:c2:59:d6:10:c1:ce:c3:ff:91:ae:0c:83:a7:5d:74:9a:8b:
42:b3:fa:3b:ee:0c:cf:31:fb:77:f4:fb:67:51:e4:d9:cd:a1:
9d:9a:44:38:2e:be:e0:a7:59:b6:1f:6e:70:7c:38:25:99:c6:
76:82:42:5f:46:cb:8a:23:65:2d:80:36:25:a8:f7:38:c4:aa:
b7:76:69:2a:22:e2:8a:1a:bf:03:90:5d:f3:bc:5f:62:c7:21:
67:cd:2c:fc:b3:04:5a:7b:e2:35:5b:b6:1c:8a:e1:43:18:f3:
4f:a5:26:e0:ca:3b:a8:c3:da:a7:75:ac:ab:df:f4:5a:4e:5f:
71:ed:24:b1:a8:02:4e:82:b9:74:2b:23:e0:ec:e5:3f:5e:28:
1e:d0:d4:b9:1a:f8:a2:90:43:e8:c3:cd:07:4f:4b:5c:7f:c8:
72:1a:e8:20:a8:05:82:e3:1b:b8:1d:ab:ae:4f:9d:9e:8d:4d:
62:c8:65:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9ToT3ctpUYaEiZYFMXS19MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZWE4ZGUzMWNlY2E1NTgwM2NmM2FmMTRkNGE3Mjc5YWU4
NDQ2ZDAwHhcNMjUwMTMxMTcwMDI3WhcNMjUwMjAxMTcwMDI3WjAzMTEwLwYDVQQD
EygwM2ZiZjNiMzI3MGUwMzA1NjNkY2QyZjU2Nzc3NGViMjk1OTExZjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyVrr4oUKBGUKSDZLosDzGkOe4g7
5EQYtiXxuMTeFoycd7TUsswe5C6kNgatU2cNlBQifEIvKrYnYruPJRFjGYZCk6aE
MwweWTlblmRGSdy9WFnzWd1nC5ELVGSJqQOZ5sLhEqfhZkj+tOFJkJbXOJu1VzLw
U7mVK87YTIdUiygyCtJny12+zLtUzjoa6PA8TkqCrTU+j7No96IpVX4nRnCnQPkP
rpN4QXjPtUeJ46nXOMAnhdi9Lc0tXrq0TfvjytIpHQMR1f7uzSaF8VVOHXDi4VXo
soP8Zr6c1CIjuNsrUAxyf6TDd72pd5smnyxai7/chck2A1C6LKpka3Iu7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAP787MnDgMFY9zS9Wd3TrKVkR+OMB8GA1UdIwQY
MBaAFKHqjeMc7KVYA8868U1KcnmuhEbQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEt
NzY1MjYyZjI5ZWFmLzEvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9jYTk5ZDgtODUyNy00NWI4LWFmNmEtNzY1MjYyZjI5ZWFm
LzEvb2VxTjR4enNwVmdEenpyeFRVcHllYTZFUnRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVyZKdns
bYTnbjB2B4K29zH/Axms2bn0/RVoJ4PtJzik1RXivbF+eoEsFKAEhH7L6Lp7NE6s
uTYuYENbDuHFSydjwZJOprPgssJZ1hDBzsP/ka4Mg6dddJqLQrP6O+4MzzH7d/T7
Z1Hk2c2hnZpEOC6+4KdZth9ucHw4JZnGdoJCX0bLiiNlLYA2Jaj3OMSqt3ZpKiLi
ihq/A5Bd87xfYschZ80s/LMEWnviNVu2HIrhQxjzT6Um4Mo7qMPap3Wsq9/0Wk5f
ce0ksagCToK5dCsj4OzlP14oHtDUuRr4opBD6MPNB09LXH/IchroIKgFguMbuB2r
rk+dno1NYshlgw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:15 2025 by rpki-client