Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
File: kOszbVYE1HuugXI4sNu0l3HiRyk.mft (raw, json)
Hash identifier: BclDSR2yDYggPiLQ0RHHs7ymuKnNTLRNY/KacB7xd1Y=
Subject key identifier: 68:C6:14:C9:CF:A2:E7:C6:C8:1B:5F:43:BD:B5:7B:45:C2:E6:77:4E
Authority key identifier: 90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
Certificate issuer: /CN=90eb336d5604d47bae817238b0dbb49771e24729
Certificate serial: 0194BCE0AAB9EDE9DE43AFD999254F686EAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:27 +0000
Manifest this update: Fri 31 Jan 2025 15:00:27 +0000
Manifest next update: Sat 01 Feb 2025 15:00:27 +0000
Files and hashes: 1: kOszbVYE1HuugXI4sNu0l3HiRyk.crl (hash: foBrpDBdqTlk8QMd6kiRrnkenBBZIS5kNhOwZpID6H0=)
2: nHFDaIILOdTjKywJ536u2NbijQ4.roa (hash: GZUS5OKqPLBVaLkWEyB2Ce3k2q8gf8Rj7vaTEKCevNk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:aa:b9:ed:e9:de:43:af:d9:99:25:4f:68:6e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90eb336d5604d47bae817238b0dbb49771e24729
Validity
Not Before: Jan 31 15:00:27 2025 GMT
Not After : Feb 1 15:00:27 2025 GMT
Subject: CN=68c614c9cfa2e7c6c81b5f43bdb57b45c2e6774e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e0:f7:bf:8b:61:5a:16:6e:76:6c:9d:de:f0:
95:ce:46:67:5e:ad:c1:fb:71:47:79:cd:b1:a7:f8:
a0:26:07:6f:18:93:c7:04:12:6e:ce:59:ff:fd:22:
c7:46:ab:b4:88:ce:ab:a0:90:3d:fc:f9:90:f0:61:
cc:4f:07:b3:58:fb:90:e8:82:4a:1b:a3:eb:d7:c2:
08:a7:4e:6d:ae:69:09:52:8d:39:f1:da:d5:98:5f:
36:5d:6e:04:69:52:5c:b2:a5:5b:b0:80:30:60:ab:
37:91:79:89:84:95:7d:cf:26:d8:1c:81:7d:e7:5e:
a8:cb:40:45:7d:0d:28:f2:f4:47:62:c9:01:fc:0e:
19:ca:7a:a1:8d:dd:e7:8d:8f:bf:b2:95:83:cb:7a:
bf:6b:ad:67:ff:5a:32:38:f8:df:02:45:92:ad:da:
34:1d:0c:50:14:ae:02:91:a5:1b:55:00:2f:08:b0:
c1:da:db:ee:d0:e7:82:c8:c2:00:b3:76:cd:cc:d1:
5d:b6:20:c1:ab:a0:b5:3a:81:35:38:72:df:06:fc:
f9:0d:a2:2c:a6:ce:6b:72:9f:90:b4:30:45:cb:52:
94:94:38:5d:1d:1a:d5:40:2d:f5:12:cb:51:e4:ab:
b3:02:97:b6:6a:00:dc:ce:7e:1e:18:f0:c4:34:08:
88:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C6:14:C9:CF:A2:E7:C6:C8:1B:5F:43:BD:B5:7B:45:C2:E6:77:4E
X509v3 Authority Key Identifier:
keyid:90:EB:33:6D:56:04:D4:7B:AE:81:72:38:B0:DB:B4:97:71:E2:47:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kOszbVYE1HuugXI4sNu0l3HiRyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1e7d2e-1a62-4421-b71b-b119274ad654/1/kOszbVYE1HuugXI4sNu0l3HiRyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:35:29:e5:39:a1:20:4b:a7:26:82:ac:2f:34:5c:d0:4c:79:
86:d8:be:30:02:f8:89:6f:eb:db:fd:51:0f:b7:70:65:4c:06:
ba:95:43:91:08:77:ed:f9:5b:6c:72:1f:65:28:12:69:0a:59:
d5:13:9d:28:76:6f:75:0e:a6:b2:48:09:06:aa:a5:79:d6:45:
a0:ed:21:ca:58:17:fd:3b:5d:36:f1:cb:66:cb:03:46:34:06:
14:9a:c8:49:fb:9c:4b:30:a8:ee:ef:e7:9d:aa:03:d0:ed:83:
e7:ca:57:cb:b3:35:3d:22:ba:ed:01:da:c4:5d:e9:c7:b7:d3:
9f:85:22:4b:f2:34:fd:09:72:bb:ad:84:78:01:eb:ff:9c:a2:
96:31:82:b7:d1:48:70:f4:91:92:e6:8a:3a:f6:e4:fe:fd:18:
8d:b3:36:a2:82:fe:64:ef:c3:49:2f:b9:d6:8b:f6:19:0a:ed:
c6:4e:ec:89:69:f0:11:30:84:11:fe:1d:cc:98:ed:6d:6c:01:
36:9c:4d:35:58:6e:32:9a:e9:8c:b4:28:c1:a7:a0:f7:b5:3a:
35:4c:b9:be:c0:e7:f0:29:21:0b:99:7c:bf:0d:75:fd:8e:4f:
10:a1:00:e2:8b:65:fe:46:ee:b4:12:3a:44:fc:e4:8d:fa:1d:
4f:2c:39:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Kq57eneQ6/ZmSVPaG6qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZWIzMzZkNTYwNGQ0N2JhZTgxNzIzOGIwZGJiNDk3NzFl
MjQ3MjkwHhcNMjUwMTMxMTUwMDI3WhcNMjUwMjAxMTUwMDI3WjAzMTEwLwYDVQQD
Eyg2OGM2MTRjOWNmYTJlN2M2YzgxYjVmNDNiZGI1N2I0NWMyZTY3NzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluD3v4thWhZudmyd3vCVzkZnXq3B
+3FHec2xp/igJgdvGJPHBBJuzln//SLHRqu0iM6roJA9/PmQ8GHMTwezWPuQ6IJK
G6Pr18IIp05trmkJUo058drVmF82XW4EaVJcsqVbsIAwYKs3kXmJhJV9zybYHIF9
516oy0BFfQ0o8vRHYskB/A4Zynqhjd3njY+/spWDy3q/a61n/1oyOPjfAkWSrdo0
HQxQFK4CkaUbVQAvCLDB2tvu0OeCyMIAs3bNzNFdtiDBq6C1OoE1OHLfBvz5DaIs
ps5rcp+QtDBFy1KUlDhdHRrVQC31EstR5KuzApe2agDczn4eGPDENAiIYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjGFMnPoufGyBtfQ721e0XC5ndOMB8GA1UdIwQY
MBaAFJDrM21WBNR7roFyOLDbtJdx4kcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWIt
YjExOTI3NGFkNjU0LzEva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8xZTdkMmUtMWE2Mi00NDIxLWI3MWItYjExOTI3NGFkNjU0
LzEva09zemJWWUUxSHV1Z1hJNHNOdTBsM0hpUnlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADUp5Tmh
IEunJoKsLzRc0Ex5hti+MAL4iW/r2/1RD7dwZUwGupVDkQh37flbbHIfZSgSaQpZ
1ROdKHZvdQ6mskgJBqqledZFoO0hylgX/TtdNvHLZssDRjQGFJrISfucSzCo7u/n
naoD0O2D58pXy7M1PSK67QHaxF3px7fTn4UiS/I0/Qlyu62EeAHr/5yiljGCt9FI
cPSRkuaKOvbk/v0YjbM2ooL+ZO/DSS+51ov2GQrtxk7siWnwETCEEf4dzJjtbWwB
NpxNNVhuMprpjLQowaeg97U6NUy5vsDn8CkhC5l8vw11/Y5PEKEA4otl/kbutBI6
RPzkjfodTyw5PA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:32:27 2025 by rpki-client