Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
File: OIeaeKWKSFzNiXDwQy2489dxcls.mft (raw, json)
Hash identifier: 8asnpmtylO7hsKpWuP+EMok9FsUJ6Loslg4lcFOBVFY=
Subject key identifier: 35:AE:C7:05:34:50:AC:C6:B5:5A:22:84:C1:11:48:26:1F:17:47:2C
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 0194BC3C6839635E6B336AB91732BE676EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: OIeaeKWKSFzNiXDwQy2489dxcls.crl (hash: ALLuFmQOJ5P6rENA432507S+Z52MV0QsmueJa0fdl/0=)
2: aJF-_eUqR8Yma02F31ybPienJuY.roa (hash: duGwNDtPKrkB5Se3luyctTXBg25/A0K/ZPMK4FyGebo=)
3: xj83lBqnCiYenkchlr_-eEoB-30.roa (hash: rDaj6xDIGI3i5anidMQG7nyOyM3UPZwMFnNZdzH+C5s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:68:39:63:5e:6b:33:6a:b9:17:32:be:67:6e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=35aec7053450acc6b55a2284c11148261f17472c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:8b:f1:f9:5a:db:26:02:36:c9:a5:b7:3a:
d6:cf:f5:7c:c4:80:d4:f2:03:2b:b2:87:6b:0a:ab:
0f:7f:3d:7c:7d:c1:6d:90:be:63:e8:24:07:e2:14:
9c:fc:05:31:70:13:89:12:4f:30:25:74:05:12:bc:
ae:cc:ac:55:75:d2:ac:60:3d:b4:01:b1:fc:3f:a5:
10:f4:4e:eb:2c:ba:0c:e7:15:f4:2d:25:b6:e4:68:
e0:53:86:cf:19:75:91:3f:b4:48:de:6c:a1:17:ba:
50:50:63:e4:35:64:35:3e:5d:8e:c6:a2:b4:61:5d:
00:71:cd:ac:5e:39:80:cd:da:01:05:9f:d6:ba:22:
fe:d8:4b:9a:4c:1c:c0:bf:21:f3:39:9e:66:c1:ce:
28:99:ee:14:d2:ea:cb:0e:57:a7:79:d5:67:9c:40:
03:64:91:9f:a9:7e:f5:87:b7:d0:b9:a4:8d:f8:8c:
c6:1e:fa:82:2b:ef:d0:60:9f:d4:08:07:42:de:39:
8a:86:2a:54:71:6f:90:db:2e:98:24:0b:44:91:a9:
73:83:0a:36:55:93:2f:43:85:77:00:19:80:9f:f2:
d8:53:77:09:f3:99:53:76:e0:5b:0e:e8:96:46:b9:
56:f1:f9:59:1a:b5:f6:ca:71:02:dd:c2:09:1e:20:
6e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AE:C7:05:34:50:AC:C6:B5:5A:22:84:C1:11:48:26:1F:17:47:2C
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:61:1c:2d:b6:5b:d4:96:55:0b:14:cc:e8:2f:d9:0a:06:94:
35:6c:a6:d1:46:c5:cb:32:23:8d:a9:60:87:b6:ce:2c:02:e2:
71:f8:ce:d1:1a:b0:12:67:5c:9d:10:80:5e:c4:ac:ca:11:e2:
bc:c2:3c:5b:5d:85:63:47:54:42:78:9f:f8:74:ce:0c:ca:3c:
cf:9c:6c:cb:7d:61:39:2e:17:ab:31:5c:b9:57:b2:eb:79:bc:
a2:d2:6d:bf:c4:0b:36:09:f3:0e:71:9f:32:e8:d5:3e:55:39:
f0:28:60:b9:59:c6:46:52:43:36:e0:ce:50:a7:a2:79:0f:e1:
39:f6:f8:9a:0a:9a:80:0a:26:0e:89:b4:81:f5:b3:64:f4:9c:
1f:ac:77:90:c0:6f:96:47:c6:73:d5:cc:2b:83:b4:55:13:83:
d3:bd:a8:da:54:61:65:4a:4f:b5:dc:0e:9a:61:a9:cb:fb:04:
3d:3b:8c:68:15:77:8c:10:d4:6b:2e:43:63:0f:9e:3b:21:2a:
41:d5:fb:a8:11:48:61:b4:4b:2f:1d:84:df:46:69:ef:62:54:
47:3c:be:ca:cf:39:d4:7f:14:4c:ef:44:70:be:e4:09:db:38:
36:ea:59:3a:77:d7:55:a9:ab:b9:c3:28:77:01:75:c7:1d:77:
b3:88:ae:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PGg5Y15rM2q5FzK+Z27qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ODc5YTc4YTU4YTQ4NWNjZDg5NzBmMDQzMmRiOGYzZDc3
MTcyNWIwHhcNMjUwMTMxMTIwMTAyWhcNMjUwMjAxMTIwMTAyWjAzMTEwLwYDVQQD
EygzNWFlYzcwNTM0NTBhY2M2YjU1YTIyODRjMTExNDgyNjFmMTc0NzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYuL8fla2yYCNsmltzrWz/V8xIDU
8gMrsodrCqsPfz18fcFtkL5j6CQH4hSc/AUxcBOJEk8wJXQFEryuzKxVddKsYD20
AbH8P6UQ9E7rLLoM5xX0LSW25GjgU4bPGXWRP7RI3myhF7pQUGPkNWQ1Pl2OxqK0
YV0Acc2sXjmAzdoBBZ/WuiL+2EuaTBzAvyHzOZ5mwc4ome4U0urLDlenedVnnEAD
ZJGfqX71h7fQuaSN+IzGHvqCK+/QYJ/UCAdC3jmKhipUcW+Q2y6YJAtEkalzgwo2
VZMvQ4V3ABmAn/LYU3cJ85lTduBbDuiWRrlW8flZGrX2ynEC3cIJHiBugwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWuxwU0UKzGtVoihMERSCYfF0csMB8GA1UdIwQY
MBaAFDiHmnilikhczYlw8EMtuPPXcXJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMt
YTE2YTM0YzQ2ZjMwLzEvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMtYTE2YTM0YzQ2ZjMw
LzEvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2EcLbZb
1JZVCxTM6C/ZCgaUNWym0UbFyzIjjalgh7bOLALicfjO0RqwEmdcnRCAXsSsyhHi
vMI8W12FY0dUQnif+HTODMo8z5xsy31hOS4XqzFcuVey63m8otJtv8QLNgnzDnGf
MujVPlU58ChguVnGRlJDNuDOUKeieQ/hOfb4mgqagAomDom0gfWzZPScH6x3kMBv
lkfGc9XMK4O0VROD072o2lRhZUpPtdwOmmGpy/sEPTuMaBV3jBDUay5DYw+eOyEq
QdX7qBFIYbRLLx2E30Zp72JURzy+ys851H8UTO9EcL7kCds4NupZOnfXVamrucMo
dwF1xx13s4iuow==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:46 2025 by rpki-client