Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
File: ONBDirVthCFxMbwG_jNeTHhD63k.mft (raw, json)
Hash identifier: oYXfTZc3VORum7w3LsLxerTLgr/qjFVqWQIqjPSXVEY=
Subject key identifier: 08:26:2B:16:9F:27:A3:E8:E8:F2:BE:EE:CF:72:05:60:25:27:ED:8B
Authority key identifier: 38:D0:43:8A:B5:6D:84:21:71:31:BC:06:FE:33:5E:4C:78:43:EB:79
Certificate issuer: /CN=38d0438ab56d84217131bc06fe335e4c7843eb79
Certificate serial: 0194BBCDE788B2FA2C80DBFBD53A1A7EA226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ONBDirVthCFxMbwG_jNeTHhD63k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
Manifest number: 012F
Signing time: Fri 31 Jan 2025 10:00:21 +0000
Manifest this update: Fri 31 Jan 2025 10:00:21 +0000
Manifest next update: Sat 01 Feb 2025 10:00:21 +0000
Files and hashes: 1: BFrr-Y0U-5iptN2idzPFsrYv6zw.roa (hash: SItZsNwfN8g7OyWNk2li9IKpDbpjiOGNcOTycVK0WwU=)
2: ONBDirVthCFxMbwG_jNeTHhD63k.crl (hash: yE3xBd3Utyp39S9fi8IsXXd3Di+D29s4Xc0E1HtKeLI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e7:88:b2:fa:2c:80:db:fb:d5:3a:1a:7e:a2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38d0438ab56d84217131bc06fe335e4c7843eb79
Validity
Not Before: Jan 31 10:00:21 2025 GMT
Not After : Feb 1 10:00:21 2025 GMT
Subject: CN=08262b169f27a3e8e8f2beeecf7205602527ed8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:a9:a6:40:c9:eb:3e:3a:86:f1:26:b2:1a:
a8:38:7d:56:73:f5:5d:af:b8:68:0e:f0:e7:8e:99:
91:77:a9:fc:d7:fa:a4:4f:7a:de:9d:d3:c6:ca:de:
3b:04:82:5b:92:b6:ca:52:ef:28:05:71:20:56:99:
3e:8c:43:a9:20:d1:f5:ac:e9:2c:21:07:ec:2b:fa:
1c:c1:e6:3a:1d:5d:e4:c7:ba:fa:44:f5:18:41:fc:
75:97:9c:aa:f4:ef:93:e5:57:67:3c:15:71:b0:36:
69:ef:da:e6:d8:60:a4:79:1c:31:02:8e:52:cb:14:
9c:e2:09:cd:69:90:b9:66:f0:c6:89:4f:02:68:6a:
62:f0:ca:0b:b1:23:05:25:65:4a:47:36:22:f4:ef:
b3:3b:6b:1e:47:8b:fb:05:be:d4:8d:94:06:2e:8b:
71:ab:41:0d:d3:2e:be:42:cf:45:da:b6:25:c2:1e:
d5:13:3a:f8:d7:33:5e:d2:ff:6d:b3:c9:bd:a3:bd:
4c:8a:e7:d3:67:09:6a:1b:e8:4b:51:c7:c8:56:2f:
43:7d:90:dc:32:d1:7c:09:6f:43:cc:86:3b:aa:e9:
f0:23:24:7a:66:4a:8f:3d:5c:bc:af:9d:f3:4c:b6:
46:33:a6:85:1e:53:fe:62:b3:40:e5:f6:05:56:55:
c9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:26:2B:16:9F:27:A3:E8:E8:F2:BE:EE:CF:72:05:60:25:27:ED:8B
X509v3 Authority Key Identifier:
keyid:38:D0:43:8A:B5:6D:84:21:71:31:BC:06:FE:33:5E:4C:78:43:EB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ONBDirVthCFxMbwG_jNeTHhD63k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/fe1a8c-9585-4291-9df1-d9e6c5f0d288/1/ONBDirVthCFxMbwG_jNeTHhD63k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5b:d3:99:c2:b0:74:2a:1c:f1:64:5e:d4:09:95:50:57:95:
6f:f7:d2:c6:ba:0a:9d:cd:a6:da:fc:bc:b1:e6:fa:1d:f2:8e:
4d:76:78:d3:79:6a:c4:cb:53:89:1e:b5:27:07:98:7a:c4:f9:
ab:2b:41:7f:ac:64:41:d7:6e:3f:8f:49:fe:8d:92:0a:e8:d0:
8e:ba:83:33:30:62:db:00:0b:55:bc:7d:8b:33:bc:7b:5a:9a:
4c:d3:73:28:c0:63:b0:d7:07:1d:29:c5:97:8d:b6:58:48:78:
0b:8d:58:c5:a0:47:30:29:a9:84:50:30:89:44:b7:33:d1:81:
33:81:ad:ad:ca:53:a0:5e:40:54:50:62:eb:ce:f7:3d:16:10:
93:cb:0a:4b:7a:8c:f3:6e:59:06:a3:5e:e6:42:1a:7f:5a:6e:
ac:bd:9a:0c:c3:ef:0e:58:d3:86:c5:8f:0d:3f:1b:88:12:c4:
39:e6:db:01:32:64:c0:62:d3:8f:53:67:30:96:03:c1:2e:7d:
08:75:17:ca:6b:69:67:ae:94:56:fe:fc:43:10:10:6a:b4:4e:
b0:02:7f:bc:d0:3c:0f:7c:39:0d:12:6d:44:82:9b:8e:66:bb:
8f:15:a1:4a:98:9a:27:ee:62:d1:d4:44:55:02:89:ea:0d:81:
2d:e5:e0:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zeeIsvosgNv71ToafqImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ZDA0MzhhYjU2ZDg0MjE3MTMxYmMwNmZlMzM1ZTRjNzg0
M2ViNzkwHhcNMjUwMTMxMTAwMDIxWhcNMjUwMjAxMTAwMDIxWjAzMTEwLwYDVQQD
EygwODI2MmIxNjlmMjdhM2U4ZThmMmJlZWVjZjcyMDU2MDI1MjdlZDhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLeppkDJ6z46hvEmshqoOH1Wc/Vd
r7hoDvDnjpmRd6n81/qkT3rendPGyt47BIJbkrbKUu8oBXEgVpk+jEOpINH1rOks
IQfsK/ocweY6HV3kx7r6RPUYQfx1l5yq9O+T5VdnPBVxsDZp79rm2GCkeRwxAo5S
yxSc4gnNaZC5ZvDGiU8CaGpi8MoLsSMFJWVKRzYi9O+zO2seR4v7Bb7UjZQGLotx
q0EN0y6+Qs9F2rYlwh7VEzr41zNe0v9ts8m9o71MiufTZwlqG+hLUcfIVi9DfZDc
MtF8CW9DzIY7qunwIyR6ZkqPPVy8r53zTLZGM6aFHlP+YrNA5fYFVlXJSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgmKxafJ6Po6PK+7s9yBWAlJ+2LMB8GA1UdIwQY
MBaAFDjQQ4q1bYQhcTG8Bv4zXkx4Q+t5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT05CRGlyVnRoQ0Z4TWJ3R19qTmVUSGhENjNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9mZTFhOGMtOTU4NS00MjkxLTlkZjEt
ZDllNmM1ZjBkMjg4LzEvT05CRGlyVnRoQ0Z4TWJ3R19qTmVUSGhENjNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9mZTFhOGMtOTU4NS00MjkxLTlkZjEtZDllNmM1ZjBkMjg4
LzEvT05CRGlyVnRoQ0Z4TWJ3R19qTmVUSGhENjNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlvTmcKw
dCoc8WRe1AmVUFeVb/fSxroKnc2m2vy8seb6HfKOTXZ403lqxMtTiR61JweYesT5
qytBf6xkQdduP49J/o2SCujQjrqDMzBi2wALVbx9izO8e1qaTNNzKMBjsNcHHSnF
l422WEh4C41YxaBHMCmphFAwiUS3M9GBM4GtrcpToF5AVFBi6873PRYQk8sKS3qM
825ZBqNe5kIaf1purL2aDMPvDljThsWPDT8biBLEOebbATJkwGLTj1NnMJYDwS59
CHUXymtpZ66UVv78QxAQarROsAJ/vNA8D3w5DRJtRIKbjma7jxWhSpiaJ+5i0dRE
VQKJ6g2BLeXg0g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:02 2025 by rpki-client