Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
File: lOxdPU2xSEp34sh2PXSgvXxDTak.mft (raw, json)
Hash identifier: cc9RqbemfS2UtwrpT9Knpq/a75z0ALXefZdkbQLhd0E=
Subject key identifier: 0C:BC:A4:72:45:94:25:18:EE:FD:6B:A2:53:02:64:8A:8F:F3:88:36
Authority key identifier: 94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
Certificate issuer: /CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Certificate serial: 0194BD4E7C0E2153F025D44D4E3C880264F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
Manifest number: 0B1F
Signing time: Fri 31 Jan 2025 17:00:24 +0000
Manifest this update: Fri 31 Jan 2025 17:00:24 +0000
Manifest next update: Sat 01 Feb 2025 17:00:24 +0000
Files and hashes: 1: 50o06An3k3A8kOiunWV55W1-Ajg.roa (hash: AcFz8bkfqTGlKpcv2q2Ys5Hm4t2OZ+46UtANIMDmoyM=)
2: lOxdPU2xSEp34sh2PXSgvXxDTak.crl (hash: 26ZJMq7efeJAAbjNXIK08G7uh3coKDXIPAbsm6SOUIU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7c:0e:21:53:f0:25:d4:4d:4e:3c:88:02:64:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ec5d3d4db1484a77e2c8763d74a0bd7c434da9
Validity
Not Before: Jan 31 17:00:24 2025 GMT
Not After : Feb 1 17:00:24 2025 GMT
Subject: CN=0cbca47245942518eefd6ba25302648a8ff38836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5e:58:ed:39:e3:2c:d2:47:97:a2:52:cf:83:
c7:65:94:6c:3b:3d:fe:ff:08:b8:c6:5e:43:6a:f4:
63:fb:10:15:9f:bd:97:7c:61:f1:20:88:77:c0:9c:
81:ab:fc:5d:a7:62:75:be:fe:77:07:e1:08:04:79:
41:15:83:cf:c5:c5:fd:8e:94:cd:dd:4a:1a:35:dc:
26:14:2b:ea:68:73:ce:ef:b0:fb:80:e3:00:0e:ac:
80:4e:01:22:d0:b8:05:61:55:db:f1:7e:02:99:51:
5a:b1:50:ca:a1:a3:97:47:10:35:b4:c1:36:cb:d0:
10:76:1c:aa:bf:a2:8f:90:68:9d:a9:15:f1:fc:d6:
34:d6:87:86:3e:f8:30:ab:f3:b1:34:e4:12:6c:47:
a2:5d:21:02:dd:ec:30:a9:cc:8f:d6:01:e4:21:d2:
37:8d:75:00:ce:1a:3c:af:82:05:04:74:e0:a6:9f:
b9:e1:af:18:dc:0b:9f:9d:ff:9d:99:0b:5e:40:6f:
57:7a:fe:64:11:9c:d8:ae:8d:5c:28:55:d3:80:e5:
db:a4:6b:82:3c:c8:6c:6d:66:64:04:82:ca:a3:08:
59:e3:73:27:74:cd:b7:52:91:56:78:5a:1e:cd:a7:
38:65:62:c9:f7:a7:e9:a5:d4:e5:f9:dc:5b:f5:94:
c1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BC:A4:72:45:94:25:18:EE:FD:6B:A2:53:02:64:8A:8F:F3:88:36
X509v3 Authority Key Identifier:
keyid:94:EC:5D:3D:4D:B1:48:4A:77:E2:C8:76:3D:74:A0:BD:7C:43:4D:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOxdPU2xSEp34sh2PXSgvXxDTak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b1089-aa37-4236-bb1e-4f3ee8365d8f/1/lOxdPU2xSEp34sh2PXSgvXxDTak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:33:c3:39:5f:54:d1:0b:e0:3c:8f:8f:0b:34:ce:7f:8e:5f:
b0:37:f7:cd:43:3e:d0:c2:42:8e:85:d1:48:76:ae:95:9f:cf:
93:bb:d7:a1:89:ae:4e:4e:cc:6a:24:f4:42:0e:2c:91:a2:e6:
84:77:e9:93:68:5a:0b:8b:43:47:6a:48:2c:3f:4f:bc:f7:10:
a8:eb:5f:c7:79:e4:28:7a:23:a5:8f:ce:a5:d9:41:eb:64:e1:
17:af:de:bc:78:c9:3e:55:d6:ce:53:f1:1c:84:91:fc:e5:29:
1a:6f:c6:aa:ea:5f:2c:8f:d5:d1:1f:91:5b:9c:43:bb:e3:6e:
d4:55:f1:58:ff:f9:d2:78:13:46:16:96:8b:79:05:d1:48:b0:
16:b3:17:47:3f:82:83:92:9c:9a:5f:a8:ba:ff:d2:bf:dc:2e:
6b:b3:7b:0b:c3:73:f2:3a:ef:35:65:eb:bc:64:68:33:3c:09:
36:d1:ac:ba:39:62:43:d5:3f:0a:d2:ba:6e:e2:eb:56:04:f5:
70:1c:ee:72:4d:94:22:a7:33:d3:4c:41:16:16:74:a8:58:89:
b0:17:27:0b:09:75:75:3e:ed:8a:7a:f5:35:0e:f1:00:b6:3e:
35:ed:c5:9c:31:7b:f2:af:70:74:90:8c:f6:b5:e1:10:4d:bb:
ad:5a:94:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TnwOIVPwJdRNTjyIAmT3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZWM1ZDNkNGRiMTQ4NGE3N2UyYzg3NjNkNzRhMGJkN2M0
MzRkYTkwHhcNMjUwMTMxMTcwMDI0WhcNMjUwMjAxMTcwMDI0WjAzMTEwLwYDVQQD
EygwY2JjYTQ3MjQ1OTQyNTE4ZWVmZDZiYTI1MzAyNjQ4YThmZjM4ODM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArF5Y7TnjLNJHl6JSz4PHZZRsOz3+
/wi4xl5DavRj+xAVn72XfGHxIIh3wJyBq/xdp2J1vv53B+EIBHlBFYPPxcX9jpTN
3UoaNdwmFCvqaHPO77D7gOMADqyATgEi0LgFYVXb8X4CmVFasVDKoaOXRxA1tME2
y9AQdhyqv6KPkGidqRXx/NY01oeGPvgwq/OxNOQSbEeiXSEC3ewwqcyP1gHkIdI3
jXUAzho8r4IFBHTgpp+54a8Y3Aufnf+dmQteQG9Xev5kEZzYro1cKFXTgOXbpGuC
PMhsbWZkBILKowhZ43MndM23UpFWeFoezac4ZWLJ96fppdTl+dxb9ZTB1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAy8pHJFlCUY7v1rolMCZIqP84g2MB8GA1UdIwQY
MBaAFJTsXT1NsUhKd+LIdj10oL18Q02pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUt
NGYzZWU4MzY1ZDhmLzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84YjEwODktYWEzNy00MjM2LWJiMWUtNGYzZWU4MzY1ZDhm
LzEvbE94ZFBVMnhTRXAzNHNoMlBYU2d2WHhEVGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjPDOV9U
0QvgPI+PCzTOf45fsDf3zUM+0MJCjoXRSHaulZ/Pk7vXoYmuTk7MaiT0Qg4skaLm
hHfpk2haC4tDR2pILD9PvPcQqOtfx3nkKHojpY/OpdlB62ThF6/evHjJPlXWzlPx
HISR/OUpGm/GqupfLI/V0R+RW5xDu+Nu1FXxWP/50ngTRhaWi3kF0UiwFrMXRz+C
g5Kcml+ouv/Sv9wua7N7C8Nz8jrvNWXrvGRoMzwJNtGsujliQ9U/CtK6buLrVgT1
cBzuck2UIqcz00xBFhZ0qFiJsBcnCwl1dT7tinr1NQ7xALY+Ne3FnDF78q9wdJCM
9rXhEE27rVqUew==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:55:13 2025 by rpki-client