Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier: 3TMY+LKPkmxza/GeCuZ6gxrU1SqhSOfiNpF9DMw7Uk0=
Subject key identifier: DB:AE:1F:E1:64:32:9F:D1:42:31:96:3E:DB:B4:E3:23:14:B4:68:DE
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer: /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial: 0194BC730BA675BDD07CFCE032E61EF3670C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number: 1161
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: 2iXH4fVLMA6GMNxAX/95XPMaCGwsCuEKDSb4ZJ1Kev4=)
2: mVZaVH1Pcezupl88BB4A9aDh2ik.roa (hash: x9LGsO42G/kG8E6OK/kSND1fo/r1Rn2Jod3oqumsnE8=)
3: pXbNNPwN94jiY7_-VrGgRRgnbvM.roa (hash: iGkJvRDhgHWubYW0daL/Fj7V8HneaI44eRUKNiVEAEM=)
4: rVK1f_dmH8IkDbuaYgLPIHaLhTw.roa (hash: ZQMoKPh7bf4f+FY2EcEyUK7kit9BSmoiMPRby8M1WLE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0b:a6:75:bd:d0:7c:fc:e0:32:e6:1e:f3:67:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=dbae1fe164329fd14231963edbb4e32314b468de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c7:d6:a1:0e:c4:9c:c0:bb:d1:68:a6:22:79:
37:5e:7e:45:e3:df:3e:8c:33:ce:f1:12:5f:55:9d:
c3:bf:d6:cf:a5:e1:2b:30:24:74:d4:13:3d:54:e2:
51:d6:96:d0:43:da:65:d3:dc:db:80:3c:99:c3:c3:
01:d4:6c:93:c7:cc:a4:48:f0:3d:92:c1:f1:a5:5d:
ee:85:d0:52:01:65:02:79:32:a2:34:6b:a1:18:c4:
e8:66:d7:c3:a0:ad:27:81:c4:83:b6:b9:4e:37:f2:
46:88:5e:59:00:da:d7:1c:1c:57:cc:53:ed:34:7d:
30:d2:a0:f4:fb:0b:01:63:ce:39:00:7d:84:fb:ba:
59:be:fb:cb:60:31:ff:07:f9:b8:5b:52:24:6b:d2:
b0:0e:6d:11:f9:a3:da:d4:11:77:ba:16:76:11:f9:
59:56:95:d4:24:ba:7c:13:65:93:66:af:47:d1:fd:
c1:e6:f6:c8:7b:c4:0a:5d:20:98:d0:81:90:54:75:
64:4a:ca:8c:85:a4:6f:9c:58:65:e0:eb:22:29:f8:
ce:c0:a7:ba:74:3e:05:60:f8:45:2f:bb:dc:3f:fb:
9b:c2:10:60:50:e6:70:30:37:03:31:3a:80:a2:28:
95:b0:54:47:70:c4:95:da:28:9a:40:5f:d1:46:2b:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AE:1F:E1:64:32:9F:D1:42:31:96:3E:DB:B4:E3:23:14:B4:68:DE
X509v3 Authority Key Identifier:
keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d4:31:02:c9:6f:b1:16:56:8f:b9:d5:3e:98:f4:4e:0d:c5:
46:37:f7:31:c7:2b:cf:56:af:15:11:99:a6:c4:d9:6e:e8:65:
aa:70:26:c5:8b:b5:55:d9:38:c1:ad:9c:33:ca:b2:cc:09:4c:
78:7b:97:55:ef:05:24:d3:0c:30:65:eb:63:ff:88:6d:73:29:
0c:69:7b:d4:af:66:3b:29:dd:7d:8e:3b:33:21:26:fb:86:69:
00:7f:df:fe:cd:b7:63:4d:a6:ec:3b:89:b8:e5:75:90:51:f5:
9a:1a:eb:4a:4c:02:51:24:72:5a:7b:00:86:b5:de:66:ed:15:
54:b7:15:53:27:bb:3a:6c:61:23:08:ef:4a:a8:ba:53:a4:f6:
46:f2:8a:bc:0e:9b:97:02:f7:73:0d:23:21:0c:7e:5d:1a:27:
99:b7:c5:cb:48:15:f6:12:25:14:cb:95:46:d7:d8:e5:5a:52:
29:e4:e2:62:ca:1e:35:2d:ed:50:a6:d7:78:a2:1a:5b:69:f7:
c4:7f:39:fa:f6:42:52:4c:85:71:34:ab:bb:23:e7:6c:44:68:
45:e4:20:5b:61:77:37:2d:87:d8:a9:d8:aa:b5:12:3e:b8:01:
c6:23:b7:2c:d1:0d:06:07:08:44:26:c8:d4:ce:2f:18:5f:45:
ba:e3:85:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cwumdb3QfPzgMuYe82cMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODM2MTZmMTM2MmMyNWQ4MmVjMmE3MGM0Yjk3NTA1NjVi
MTE5N2YwHhcNMjUwMTMxMTMwMDQzWhcNMjUwMjAxMTMwMDQzWjAzMTEwLwYDVQQD
EyhkYmFlMWZlMTY0MzI5ZmQxNDIzMTk2M2VkYmI0ZTMyMzE0YjQ2OGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8fWoQ7EnMC70WimInk3Xn5F498+
jDPO8RJfVZ3Dv9bPpeErMCR01BM9VOJR1pbQQ9pl09zbgDyZw8MB1GyTx8ykSPA9
ksHxpV3uhdBSAWUCeTKiNGuhGMToZtfDoK0ngcSDtrlON/JGiF5ZANrXHBxXzFPt
NH0w0qD0+wsBY845AH2E+7pZvvvLYDH/B/m4W1Ika9KwDm0R+aPa1BF3uhZ2EflZ
VpXUJLp8E2WTZq9H0f3B5vbIe8QKXSCY0IGQVHVkSsqMhaRvnFhl4OsiKfjOwKe6
dD4FYPhFL7vcP/ubwhBgUOZwMDcDMTqAoiiVsFRHcMSV2iiaQF/RRiswOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNuuH+FkMp/RQjGWPtu04yMUtGjeMB8GA1UdIwQY
MBaAFNKDYW8TYsJdguwqcMS5dQVlsRl/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5Njkt
YTZkMjdjNDMxODE4LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yZmJjY2MtNjRiNi00ZjY2LTg5NjktYTZkMjdjNDMxODE4
LzEvMG9OaGJ4Tml3bDJDN0Nwd3hMbDFCV1d4R1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdQxAslv
sRZWj7nVPpj0Tg3FRjf3Mccrz1avFRGZpsTZbuhlqnAmxYu1Vdk4wa2cM8qyzAlM
eHuXVe8FJNMMMGXrY/+IbXMpDGl71K9mOyndfY47MyEm+4ZpAH/f/s23Y02m7DuJ
uOV1kFH1mhrrSkwCUSRyWnsAhrXeZu0VVLcVUye7OmxhIwjvSqi6U6T2RvKKvA6b
lwL3cw0jIQx+XRonmbfFy0gV9hIlFMuVRtfY5VpSKeTiYsoeNS3tUKbXeKIaW2n3
xH85+vZCUkyFcTSruyPnbERoReQgW2F3Ny2H2KnYqrUSPrgBxiO3LNENBgcIRCbI
1M4vGF9FuuOFdQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:16 2025 by rpki-client