Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.mft
File: Ko09O9sG8A5rtEX02y2X-bfEvro.mft (raw, json)
Hash identifier: qvlsVbi4EmWmBfDsMgP/1M253NeP8Z53pfP7knObCBc=
Subject key identifier: 28:7F:06:2F:D8:55:9E:7D:DD:7B:1F:AA:58:D9:5E:8C:4C:D2:C7:B0
Authority key identifier: 2A:8D:3D:3B:DB:06:F0:0E:6B:B4:45:F4:DB:2D:97:F9:B7:C4:BE:BA
Certificate issuer: /CN=2a8d3d3bdb06f00e6bb445f4db2d97f9b7c4beba
Certificate serial: 0194BCE09B862EF2C6CD64FCE51CF4369463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ko09O9sG8A5rtEX02y2X-bfEvro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.mft
Manifest number: 0285
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: Ko09O9sG8A5rtEX02y2X-bfEvro.crl (hash: BlvBtUxHPN+D8W1qG9TsBuy8FCMFdb8rsvBdFuuRF5k=)
2: _9hTLlJnLRA_A0tBJZrt39as7xg.roa (hash: wFxuZ4h9T3MV1XhuCw+0BSZnSlOb/FPW9LipazBslAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9b:86:2e:f2:c6:cd:64:fc:e5:1c:f4:36:94:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8d3d3bdb06f00e6bb445f4db2d97f9b7c4beba
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=287f062fd8559e7ddd7b1faa58d95e8c4cd2c7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f3:29:98:64:67:37:3c:98:0f:50:54:ab:87:
9d:ad:9d:ac:66:8a:1d:26:8a:dd:25:bb:9a:83:74:
fc:68:d7:76:e5:28:7d:42:a3:ba:30:d1:ec:ce:34:
1b:ea:f7:a1:c9:02:48:a2:20:67:05:8f:f3:ad:fe:
10:f7:6e:0b:5f:a5:e8:c3:f8:bc:c6:97:48:44:67:
2b:96:e2:fd:9d:69:f2:e6:f0:15:9f:c6:96:68:15:
63:4d:19:40:70:5a:0b:78:3a:19:47:f1:31:c7:db:
71:12:f7:35:9c:f5:e7:22:7a:51:02:fe:dc:b9:a8:
b0:28:5f:34:2f:6e:ea:90:5b:83:07:bd:ac:02:c3:
0f:51:c1:d8:e7:2b:2a:24:ca:0e:2b:49:46:96:00:
b6:9f:43:ad:03:6f:0f:35:c2:67:1f:c4:67:02:19:
b1:7e:bb:4c:c5:42:99:b2:46:d5:35:28:07:f0:80:
86:f0:a4:7a:09:c1:2c:e8:c6:88:a2:17:94:b7:03:
18:53:aa:bc:26:3b:e4:4b:8f:a3:7b:53:32:22:f8:
8c:1a:0c:7c:33:4c:6a:3e:a5:22:e9:4d:dd:2b:1b:
80:5b:2d:d8:e3:f4:03:43:2f:30:64:73:3a:35:58:
3a:69:7f:be:84:59:57:9c:1a:53:d3:36:fc:db:70:
95:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7F:06:2F:D8:55:9E:7D:DD:7B:1F:AA:58:D9:5E:8C:4C:D2:C7:B0
X509v3 Authority Key Identifier:
keyid:2A:8D:3D:3B:DB:06:F0:0E:6B:B4:45:F4:DB:2D:97:F9:B7:C4:BE:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ko09O9sG8A5rtEX02y2X-bfEvro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/a3f06e-ac6c-4b66-a96c-29b97b990555/1/Ko09O9sG8A5rtEX02y2X-bfEvro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c6:62:d2:32:04:c7:8d:ed:e7:85:dd:d9:f5:74:76:ca:27:
ec:fb:48:f9:50:2e:e1:b9:2f:32:2a:b2:f7:64:87:67:db:84:
ac:db:9e:a9:f1:5a:06:7c:22:73:e7:77:22:e5:66:b9:3d:81:
61:4d:df:ae:4b:4d:11:15:7d:dc:51:59:cf:2c:31:3b:cb:3a:
54:10:5d:5c:d2:ad:6b:d3:1e:a1:8b:29:b2:26:02:a2:1c:23:
c0:f3:89:8b:76:a7:1d:27:71:fb:4a:62:49:e1:39:f7:4c:3f:
1e:97:7c:6c:66:4b:88:79:f0:c3:72:b8:75:a5:9f:af:8c:78:
28:8e:66:b7:d3:43:9b:d1:5f:56:17:68:be:a1:22:ed:bd:9b:
a2:39:a2:9d:d1:51:54:72:60:c7:ea:1b:27:d8:a5:06:3a:c0:
d5:49:74:de:08:2e:9e:fa:1d:e5:37:30:4e:ad:55:0a:f1:fa:
ea:d2:ae:4a:05:3f:dd:1b:eb:7f:eb:6e:a6:13:26:09:43:ec:
92:5b:29:13:af:f7:5a:22:f9:c9:90:38:1b:c4:2b:30:e0:3f:
99:16:de:76:01:ea:38:7b:8d:09:a8:7f:2b:bb:2d:de:d3:2f:
d6:90:19:f0:80:b9:39:72:7a:a7:07:c5:70:73:3c:c6:a7:9c:
67:68:77:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84JuGLvLGzWT85Rz0NpRjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOGQzZDNiZGIwNmYwMGU2YmI0NDVmNGRiMmQ5N2Y5Yjdj
NGJlYmEwHhcNMjUwMTMxMTUwMDIzWhcNMjUwMjAxMTUwMDIzWjAzMTEwLwYDVQQD
EygyODdmMDYyZmQ4NTU5ZTdkZGQ3YjFmYWE1OGQ5NWU4YzRjZDJjN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fMpmGRnNzyYD1BUq4edrZ2sZood
JordJbuag3T8aNd25Sh9QqO6MNHszjQb6vehyQJIoiBnBY/zrf4Q924LX6Xow/i8
xpdIRGcrluL9nWny5vAVn8aWaBVjTRlAcFoLeDoZR/Exx9txEvc1nPXnInpRAv7c
uaiwKF80L27qkFuDB72sAsMPUcHY5ysqJMoOK0lGlgC2n0OtA28PNcJnH8RnAhmx
frtMxUKZskbVNSgH8ICG8KR6CcEs6MaIoheUtwMYU6q8JjvkS4+je1MyIviMGgx8
M0xqPqUi6U3dKxuAWy3Y4/QDQy8wZHM6NVg6aX++hFlXnBpT0zb823CV6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCh/Bi/YVZ593XsfqljZXoxM0sewMB8GA1UdIwQY
MBaAFCqNPTvbBvAOa7RF9Nstl/m3xL66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS28wOU85c0c4QTVydEVYMDJ5MlgtYmZFdnJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hM2YwNmUtYWM2Yy00YjY2LWE5NmMt
MjliOTdiOTkwNTU1LzEvS28wOU85c0c4QTVydEVYMDJ5MlgtYmZFdnJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hM2YwNmUtYWM2Yy00YjY2LWE5NmMtMjliOTdiOTkwNTU1
LzEvS28wOU85c0c4QTVydEVYMDJ5MlgtYmZFdnJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcZi0jIE
x43t54Xd2fV0dson7PtI+VAu4bkvMiqy92SHZ9uErNueqfFaBnwic+d3IuVmuT2B
YU3frktNERV93FFZzywxO8s6VBBdXNKta9MeoYspsiYCohwjwPOJi3anHSdx+0pi
SeE590w/Hpd8bGZLiHnww3K4daWfr4x4KI5mt9NDm9FfVhdovqEi7b2bojmindFR
VHJgx+obJ9ilBjrA1Ul03ggunvod5TcwTq1VCvH66tKuSgU/3Rvrf+tuphMmCUPs
klspE6/3WiL5yZA4G8QrMOA/mRbedgHqOHuNCah/K7st3tMv1pAZ8IC5OXJ6pwfF
cHM8xqecZ2h3CA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:00:58 2025 by rpki-client