Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
File: 0OhNbWqe7eaC7xtcePGz8KMxORE.mft (raw, json)
Hash identifier: v1PVtgkQNqKc5FOad02N6/ygOp6hAWdmzscteL5yh+Q=
Subject key identifier: 27:0A:57:A3:FA:0D:6B:0F:11:BC:00:5D:37:DC:0A:C0:EC:C0:43:71
Authority key identifier: D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
Certificate issuer: /CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Certificate serial: 0194BC72E6F1303C32ACF01D141D76A544FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
Manifest number: 05FE
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: 0OhNbWqe7eaC7xtcePGz8KMxORE.crl (hash: MIOYDqNV2it6e0Y61xr1iMgDKwh90oVyG5mQIwjiCg0=)
2: eEAcVM4h3e_6uLTwXzH2smck964.roa (hash: 2dyqSC4Nr999y8UdL9+8BtI2W3QPoxUvEaAKvO9sMtg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e6:f1:30:3c:32:ac:f0:1d:14:1d:76:a5:44:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e84d6d6a9eede682ef1b5c78f1b3f0a3313911
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=270a57a3fa0d6b0f11bc005d37dc0ac0ecc04371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:2b:c4:e6:48:83:d9:e2:5b:9c:17:06:22:
c9:22:ad:4c:2d:2e:49:6e:55:d3:ec:60:a8:e6:f9:
ec:58:d0:df:3a:62:d7:f9:87:de:f8:37:d9:b6:d9:
56:98:38:73:9e:e7:52:d1:d5:ec:07:14:ed:59:aa:
95:62:a1:2c:67:27:5f:07:14:2f:cd:00:6f:89:9c:
d4:fd:ee:20:63:f0:ae:76:ca:ef:c4:cc:db:51:f8:
ff:db:05:2d:4c:58:30:03:ea:99:57:c1:54:21:e4:
81:8f:57:c0:8b:b5:16:3e:71:c6:3d:59:11:48:85:
56:49:96:b0:05:5e:ae:0f:db:e7:7b:78:26:42:f1:
48:56:25:fe:77:26:9d:9c:03:e0:c8:78:f2:c6:ee:
0c:46:98:74:da:e7:2f:35:50:7e:72:f9:ae:e5:ba:
f4:b7:50:42:49:92:eb:1a:8e:13:ba:23:9f:b3:a5:
1b:01:be:cf:aa:df:5b:93:a6:5e:53:eb:78:fb:42:
6d:1a:83:34:d6:a9:28:7f:82:f9:b8:16:b9:99:95:
df:cd:32:e5:18:5b:28:9e:c6:64:48:f4:b4:e4:fc:
91:d3:45:e2:6c:4c:03:02:b4:dd:15:18:4e:0f:c5:
63:4d:dc:fd:24:a9:7d:57:45:59:73:b8:1e:de:95:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0A:57:A3:FA:0D:6B:0F:11:BC:00:5D:37:DC:0A:C0:EC:C0:43:71
X509v3 Authority Key Identifier:
keyid:D0:E8:4D:6D:6A:9E:ED:E6:82:EF:1B:5C:78:F1:B3:F0:A3:31:39:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OhNbWqe7eaC7xtcePGz8KMxORE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/62b775-7841-4a61-b78c-b7ba28165a77/1/0OhNbWqe7eaC7xtcePGz8KMxORE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:44:57:82:d2:77:58:09:80:d9:1b:a7:44:90:17:04:53:9d:
b0:10:71:50:80:cf:de:24:37:b0:39:3b:b7:bf:d2:79:84:d8:
07:5c:39:dc:54:67:48:2d:33:27:b8:f9:0f:ea:24:5d:4d:95:
92:8d:34:dd:04:f2:5e:26:23:08:96:86:30:0e:12:96:02:49:
70:6f:7a:2f:df:86:2e:dd:d7:76:2b:c8:44:63:fa:3e:71:10:
5f:3e:0d:a9:68:bc:65:e2:cb:9a:da:86:2b:0a:91:59:95:10:
5c:ef:0b:fe:9b:e5:9a:41:30:f9:92:d2:b4:b8:7e:7f:6a:62:
1b:39:55:d1:b7:72:a6:9d:21:82:da:a3:46:54:b5:4e:9e:5d:
a7:74:6d:27:3a:59:c9:90:ed:ca:7a:cf:a3:8a:ac:d2:f9:b5:
c6:71:2b:84:f6:23:12:83:4f:c8:a6:6d:c9:d8:dd:f3:97:fd:
4b:a1:9f:c1:f6:fe:03:69:c0:00:24:00:d1:c4:b0:2b:6e:15:
fb:33:92:79:91:f7:75:a1:ab:eb:9c:af:72:a8:3c:ee:3c:2a:
f2:e0:36:83:19:8e:8d:da:ac:49:d0:89:d2:94:0e:c7:e8:14:
ef:cc:e8:5b:77:8a:fb:88:2a:b9:aa:2e:2c:c4:3f:de:bb:7e:
ba:2f:a4:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cubxMDwyrPAdFB12pUT9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTg0ZDZkNmE5ZWVkZTY4MmVmMWI1Yzc4ZjFiM2YwYTMz
MTM5MTEwHhcNMjUwMTMxMTMwMDM0WhcNMjUwMjAxMTMwMDM0WjAzMTEwLwYDVQQD
EygyNzBhNTdhM2ZhMGQ2YjBmMTFiYzAwNWQzN2RjMGFjMGVjYzA0MzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSorxOZIg9niW5wXBiLJIq1MLS5J
blXT7GCo5vnsWNDfOmLX+Yfe+DfZttlWmDhznudS0dXsBxTtWaqVYqEsZydfBxQv
zQBviZzU/e4gY/CudsrvxMzbUfj/2wUtTFgwA+qZV8FUIeSBj1fAi7UWPnHGPVkR
SIVWSZawBV6uD9vne3gmQvFIViX+dyadnAPgyHjyxu4MRph02ucvNVB+cvmu5br0
t1BCSZLrGo4TuiOfs6UbAb7Pqt9bk6ZeU+t4+0JtGoM01qkof4L5uBa5mZXfzTLl
GFsonsZkSPS05PyR00XibEwDArTdFRhOD8VjTdz9JKl9V0VZc7ge3pUSUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCcKV6P6DWsPEbwAXTfcCsDswENxMB8GA1UdIwQY
MBaAFNDoTW1qnu3mgu8bXHjxs/CjMTkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9oTmJXcWU3ZWFDN3h0Y2VQR3o4S014T1JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MmI3NzUtNzg0MS00YTYxLWI3OGMt
YjdiYTI4MTY1YTc3LzEvME9oTmJXcWU3ZWFDN3h0Y2VQR3o4S014T1JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82MmI3NzUtNzg0MS00YTYxLWI3OGMtYjdiYTI4MTY1YTc3
LzEvME9oTmJXcWU3ZWFDN3h0Y2VQR3o4S014T1JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmERXgtJ3
WAmA2RunRJAXBFOdsBBxUIDP3iQ3sDk7t7/SeYTYB1w53FRnSC0zJ7j5D+okXU2V
ko003QTyXiYjCJaGMA4SlgJJcG96L9+GLt3XdivIRGP6PnEQXz4NqWi8ZeLLmtqG
KwqRWZUQXO8L/pvlmkEw+ZLStLh+f2piGzlV0bdypp0hgtqjRlS1Tp5dp3RtJzpZ
yZDtynrPo4qs0vm1xnErhPYjEoNPyKZtydjd85f9S6Gfwfb+A2nAACQA0cSwK24V
+zOSeZH3daGr65yvcqg87jwq8uA2gxmOjdqsSdCJ0pQOx+gU78zoW3eK+4gquaou
LMQ/3rt+ui+k6g==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:15:54 2025 by rpki-client