Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
File: 0OgEFLlH8ZMfIrych4wXt9IweOs.mft (raw, json)
Hash identifier: fD2R1bEc5bfV1MP3dYfKDD86N/B5efu3tMaZOv+B4UM=
Subject key identifier: 1B:CB:80:16:6D:57:BE:06:29:25:4A:63:02:10:0F:A1:03:07:AD:EB
Authority key identifier: D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
Certificate issuer: /CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Certificate serial: 0194BC052774081EF01B43FED7610EE28FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
Manifest number: 12EF
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: 0OgEFLlH8ZMfIrych4wXt9IweOs.crl (hash: EtoQjWd0F2BJBJR/JdT8mpzkLvfTQzov+HsGt4jYbJE=)
2: SEFQEUahukCO25CLynieJYFwZgg.roa (hash: X7nkM3WeHmcxHA7JwfIjXwagYEA1ZAkZsVPWtjQPu3E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:27:74:08:1e:f0:1b:43:fe:d7:61:0e:e2:8f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0e80414b947f1931f22bc9c878c17b7d23078eb
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=1bcb80166d57be0629254a6302100fa10307adeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:12:d2:f9:c7:03:2b:ee:b6:c4:26:52:e0:1f:
53:f6:9f:89:1f:04:ee:5d:be:87:d3:28:67:5c:25:
28:76:98:a6:f4:e4:ff:b4:81:41:a8:9b:b8:83:4a:
df:76:48:41:14:20:14:64:59:45:02:b8:37:d0:44:
f2:ff:6e:36:48:05:b8:61:d1:9c:49:e8:7c:bf:f0:
8d:cf:11:6e:90:48:4b:2f:67:6c:82:d5:f9:71:c6:
de:16:22:69:43:a5:6e:a5:67:9e:b0:39:3c:6d:01:
f4:b9:73:c0:09:11:f4:c7:05:c5:bf:d1:5f:bd:f9:
51:41:e2:31:62:34:fc:f8:05:09:fa:9a:20:34:f8:
80:3d:f4:b5:83:f1:cc:e0:b8:d0:e6:22:47:bd:be:
e2:3c:4d:a1:54:5b:f0:27:4c:f4:87:43:67:62:45:
a9:59:f0:26:d8:46:d2:48:ca:f8:f4:ff:91:ae:11:
d7:98:9c:da:f2:00:f9:e2:57:05:44:d2:47:86:27:
53:94:5f:33:7c:01:03:b7:98:0c:b8:36:f0:18:c3:
34:4d:e5:38:2d:21:49:0f:e2:5c:7c:43:4a:ee:4c:
02:c3:d7:d0:d1:b8:a4:41:ab:9d:2d:09:af:ee:7c:
0a:bc:5b:3c:a7:c9:c1:76:7e:4f:62:d0:41:52:9d:
05:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CB:80:16:6D:57:BE:06:29:25:4A:63:02:10:0F:A1:03:07:AD:EB
X509v3 Authority Key Identifier:
keyid:D0:E8:04:14:B9:47:F1:93:1F:22:BC:9C:87:8C:17:B7:D2:30:78:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0OgEFLlH8ZMfIrych4wXt9IweOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/36fd43-b5f3-40cf-8631-518e7a35660a/1/0OgEFLlH8ZMfIrych4wXt9IweOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:85:d9:a6:41:19:90:50:cf:07:aa:3e:8a:fb:67:b6:a5:45:
37:83:21:37:37:ed:c9:1c:95:ae:dd:7f:34:72:ad:06:30:a2:
8a:44:c9:10:a6:4d:fd:5d:06:08:1b:12:6d:30:d0:f6:5e:a7:
af:00:56:cf:e1:7d:4d:3b:08:47:39:ed:ef:f2:1f:3a:d3:c4:
28:62:ef:78:ac:e5:14:f4:47:ba:99:b5:43:14:43:ae:73:d5:
c2:5a:72:e4:5e:1d:4e:27:fc:6e:97:6f:63:c8:a9:49:c0:23:
e1:7c:7f:22:0b:d8:8f:2c:f6:83:f7:ba:8c:4f:56:cf:f7:99:
2f:4e:77:f8:c9:61:22:b5:de:3f:e6:ae:f9:a0:78:84:f6:fa:
58:b0:17:9b:90:47:dd:f9:f6:0d:84:24:c7:14:0c:61:7e:4d:
7a:62:9a:31:af:af:79:05:d6:97:15:01:20:9e:11:f0:eb:ac:
3c:6b:4e:c6:68:cf:da:46:54:12:51:52:cb:dd:86:d9:2d:84:
e3:4e:b2:70:3d:36:68:5a:77:9b:47:d1:cc:b5:7a:fb:81:64:
a2:63:7d:2f:7c:b3:ef:24:f1:56:28:53:5d:2d:42:43:7c:42:
2a:8d:08:37:25:1e:0d:15:18:00:c4:66:c3:c9:4d:f9:cb:45:
2a:91:0b:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BSd0CB7wG0P+12EO4o/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZTgwNDE0Yjk0N2YxOTMxZjIyYmM5Yzg3OGMxN2I3ZDIz
MDc4ZWIwHhcNMjUwMTMxMTEwMDQxWhcNMjUwMjAxMTEwMDQxWjAzMTEwLwYDVQQD
EygxYmNiODAxNjZkNTdiZTA2MjkyNTRhNjMwMjEwMGZhMTAzMDdhZGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BLS+ccDK+62xCZS4B9T9p+JHwTu
Xb6H0yhnXCUodpim9OT/tIFBqJu4g0rfdkhBFCAUZFlFArg30ETy/242SAW4YdGc
Seh8v/CNzxFukEhLL2dsgtX5ccbeFiJpQ6VupWeesDk8bQH0uXPACRH0xwXFv9Ff
vflRQeIxYjT8+AUJ+pogNPiAPfS1g/HM4LjQ5iJHvb7iPE2hVFvwJ0z0h0NnYkWp
WfAm2EbSSMr49P+RrhHXmJza8gD54lcFRNJHhidTlF8zfAEDt5gMuDbwGMM0TeU4
LSFJD+JcfENK7kwCw9fQ0bikQaudLQmv7nwKvFs8p8nBdn5PYtBBUp0FywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvLgBZtV74GKSVKYwIQD6EDB63rMB8GA1UdIwQY
MBaAFNDoBBS5R/GTHyK8nIeMF7fSMHjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME9nRUZMbEg4Wk1mSXJ5Y2g0d1h0OUl3ZU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zNmZkNDMtYjVmMy00MGNmLTg2MzEt
NTE4ZTdhMzU2NjBhLzEvME9nRUZMbEg4Wk1mSXJ5Y2g0d1h0OUl3ZU9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8zNmZkNDMtYjVmMy00MGNmLTg2MzEtNTE4ZTdhMzU2NjBh
LzEvME9nRUZMbEg4Wk1mSXJ5Y2g0d1h0OUl3ZU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoXZpkEZ
kFDPB6o+ivtntqVFN4MhNzftyRyVrt1/NHKtBjCiikTJEKZN/V0GCBsSbTDQ9l6n
rwBWz+F9TTsIRznt7/IfOtPEKGLveKzlFPRHupm1QxRDrnPVwlpy5F4dTif8bpdv
Y8ipScAj4Xx/IgvYjyz2g/e6jE9Wz/eZL053+MlhIrXeP+au+aB4hPb6WLAXm5BH
3fn2DYQkxxQMYX5NemKaMa+veQXWlxUBIJ4R8OusPGtOxmjP2kZUElFSy92G2S2E
406ycD02aFp3m0fRzLV6+4FkomN9L3yz7yTxVihTXS1CQ3xCKo0INyUeDRUYAMRm
w8lN+ctFKpELRw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:41:27 2025 by rpki-client