Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
File: 1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft (raw, json)
Hash identifier: CtI2K6a04lQ61XE+MLZ8KmB13p4Bve2L0UHP4byk2bg=
Subject key identifier: 8B:08:DA:11:74:24:16:32:62:BF:B8:C8:88:3C:98:25:3A:46:CB:DE
Authority key identifier: FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
Certificate issuer: /CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Certificate serial: 0194BC051B62C4FE49BD3C13FB19917CAAAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
Manifest number: 0F36
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: 1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl (hash: Ymz1qFu+XHJim6Y3hOEmp1gAkbGozmPyh1Vz8sT7TbE=)
2: oCmBMF8iI8CutVf6sdX1dTs5wPg.roa (hash: TfgX1fiboG0xroG328eMyAxUa0ejT6atD6RIyf61++A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1b:62:c4:fe:49:bd:3c:13:fb:19:91:7c:aa:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf380b6675b9ccd5f812e069fff175478fb38a4
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=8b08da117424163262bfb8c8883c98253a46cbde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:54:96:bd:be:d3:70:a0:7a:f5:3a:0a:a3:bb:
08:70:ad:89:c9:49:25:72:45:48:90:e8:a0:4b:ee:
57:33:42:f9:3a:ea:e0:5a:b4:88:55:d9:82:36:9a:
40:78:4c:de:47:e9:ae:60:ea:dc:5a:75:b9:bc:ee:
77:86:7c:92:6f:a3:c7:ad:1d:00:84:d8:51:dc:70:
6c:9b:f9:db:f1:99:08:f5:59:26:e0:54:b4:06:48:
fb:24:da:d4:10:83:e6:64:60:f4:03:98:0c:7e:d0:
d0:d3:53:aa:ad:04:8c:23:0b:eb:f9:4c:a1:1a:c8:
40:83:18:b5:82:4f:67:f8:19:ac:4b:41:dd:61:06:
ec:38:d7:c1:a4:26:56:d4:d0:7a:5a:84:e7:0a:1e:
25:59:d3:9b:14:8f:9d:57:a6:4c:4c:66:24:f9:cc:
a9:6b:20:14:be:5e:30:4c:dd:26:54:71:f9:45:6e:
cd:97:6d:29:98:bb:42:9a:04:1d:a7:f2:1e:0e:b1:
e2:33:37:06:c2:15:1f:b9:69:d2:83:f4:14:8a:2d:
de:84:66:ac:81:47:b5:a6:de:d4:e5:fe:f6:75:37:
2b:61:48:1f:62:f5:fb:26:88:12:56:79:09:a2:7b:
e3:f6:c3:ca:a7:f1:bf:13:af:3b:50:34:4c:cb:e3:
80:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:08:DA:11:74:24:16:32:62:BF:B8:C8:88:3C:98:25:3A:46:CB:DE
X509v3 Authority Key Identifier:
keyid:FB:F3:80:B6:67:5B:9C:CD:5F:81:2E:06:9F:FF:17:54:78:FB:38:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/d10813-fe61-4033-a433-5ee9b62246db/1/1-_OAtmdbnM1fgS4Gn_8XVHj7OKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f2:bc:76:09:22:7c:af:1b:44:88:80:f9:9b:8d:db:d2:6e:
3e:ad:a6:70:f3:92:12:aa:94:4f:40:20:eb:20:22:3a:dd:73:
da:bf:67:c0:57:73:fc:ef:ae:fb:24:16:47:31:75:95:5c:39:
29:51:2c:15:d3:ee:f6:9f:0d:ed:6c:7f:61:36:d1:9c:74:7c:
dc:17:fc:d6:eb:18:18:98:03:6c:de:1a:20:81:e8:8c:9d:e8:
c3:3a:ca:5d:23:47:05:0c:d5:13:19:53:a7:82:bd:a4:14:13:
a6:5c:29:8a:0e:f8:74:75:6e:61:d7:90:c4:57:d7:fb:65:7a:
61:18:a4:67:03:61:b6:e5:25:6a:5a:75:ba:7f:c7:43:f1:b2:
03:6f:c5:ff:7f:1d:f8:11:03:7a:81:9f:e5:73:ff:40:33:28:
fb:cd:66:2b:77:3d:06:c5:40:e1:ac:2a:d0:15:06:90:1c:6d:
f8:8a:e6:68:b7:e1:27:5d:1b:6c:35:f0:e8:6b:67:f6:89:4d:
1a:b6:7a:a3:11:24:d5:c7:e4:6d:85:ff:1d:62:d1:17:e3:fa:
55:a1:9f:cc:a8:e9:c4:90:fc:ef:cf:38:46:09:fc:77:5b:b1:
82:f8:2f:21:6b:7b:82:2b:b1:64:7b:32:62:cf:ba:1f:80:a1:
24:44:4c:1e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS8BRtixP5JvTwT+xmRfKquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjM4MGI2Njc1YjljY2Q1ZjgxMmUwNjlmZmYxNzU0Nzhm
YjM4YTQwHhcNMjUwMTMxMTEwMDM4WhcNMjUwMjAxMTEwMDM4WjAzMTEwLwYDVQQD
Eyg4YjA4ZGExMTc0MjQxNjMyNjJiZmI4Yzg4ODNjOTgyNTNhNDZjYmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1SWvb7TcKB69ToKo7sIcK2JyUkl
ckVIkOigS+5XM0L5OurgWrSIVdmCNppAeEzeR+muYOrcWnW5vO53hnySb6PHrR0A
hNhR3HBsm/nb8ZkI9Vkm4FS0Bkj7JNrUEIPmZGD0A5gMftDQ01OqrQSMIwvr+Uyh
GshAgxi1gk9n+BmsS0HdYQbsONfBpCZW1NB6WoTnCh4lWdObFI+dV6ZMTGYk+cyp
ayAUvl4wTN0mVHH5RW7Nl20pmLtCmgQdp/IeDrHiMzcGwhUfuWnSg/QUii3ehGas
gUe1pt7U5f72dTcrYUgfYvX7JogSVnkJonvj9sPKp/G/E687UDRMy+OABQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIsI2hF0JBYyYr+4yIg8mCU6RsveMB8GA1UdIwQY
MBaAFPvzgLZnW5zNX4EuBp//F1R4+zikMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fT0F0bWRibk0xZmdTNEduXzhYVkhqN09LUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvZDEwODEzLWZlNjEtNDAzMy1hNDMz
LTVlZTliNjIyNDZkYi8xLzEtX09BdG1kYm5NMWZnUzRHbl84WFZIajdPS1EubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzZjL2QxMDgxMy1mZTYxLTQwMzMtYTQzMy01ZWU5YjYyMjQ2
ZGIvMS8xLV9PQXRtZGJuTTFmZ1M0R25fOFhWSGo3T0tRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfK8
dgkifK8bRIiA+ZuN29JuPq2mcPOSEqqUT0Ag6yAiOt1z2r9nwFdz/O+u+yQWRzF1
lVw5KVEsFdPu9p8N7Wx/YTbRnHR83Bf81usYGJgDbN4aIIHojJ3owzrKXSNHBQzV
ExlTp4K9pBQTplwpig74dHVuYdeQxFfX+2V6YRikZwNhtuUlalp1un/HQ/GyA2/F
/38d+BEDeoGf5XP/QDMo+81mK3c9BsVA4awq0BUGkBxt+IrmaLfhJ10bbDXw6Gtn
9olNGrZ6oxEk1cfkbYX/HWLRF+P6VaGfzKjpxJD87884Rgn8d1uxgvgvIWt7giux
ZHsyYs+6H4ChJERMHg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:14 2025 by rpki-client