Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
File: 2DO_oBS5GS8nAKyvbyedvvigr_I.mft (raw, json)
Hash identifier: avabGFW3+LRo9Etp34wld91hp4j3Oyi+kUVgab5FPgM=
Subject key identifier: 44:8B:F3:04:2B:7F:F6:F4:1F:C6:78:1D:3A:85:65:44:F5:31:A7:7F
Authority key identifier: D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
Certificate issuer: /CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Certificate serial: 0194BD857E74237EA6CD4B86DE20A7A379FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: 27S3B5bkAeUPZSviGFBqae_GVrs.roa (hash: FtgrK78yXbLaYRYFQW7eCsdPhCoXPRCor2OEixezj40=)
2: 2DO_oBS5GS8nAKyvbyedvvigr_I.crl (hash: CBS/nenwhLgw6q+/stQO4PtQE47C5Kajgx6F117SjYA=)
3: 3PsbAjwxXqVGdkZxEvSVP0DD-Zk.roa (hash: Kbp3hT46ETgSSbJWXFTr+GiLfzU6WWPM010iSX06PuI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7e:74:23:7e:a6:cd:4b:86:de:20:a7:a3:79:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d833bfa014b9192f2700acaf6f279dbef8a0aff2
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=448bf3042b7ff6f41fc6781d3a856544f531a77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:de:74:f4:4b:78:56:5e:24:31:f9:08:95:60:
84:93:a1:c8:1d:89:5f:74:b4:89:ce:71:90:2b:59:
aa:9b:73:63:a0:e6:40:a5:74:4b:bc:1b:96:ae:b1:
64:aa:1b:b8:46:40:d9:39:df:6c:8d:02:df:2d:4c:
65:90:8c:ce:ff:f6:e2:ee:01:04:e2:7c:17:0e:ab:
13:12:d5:db:f4:a8:b7:3d:03:76:e6:bd:e4:03:44:
35:02:48:7a:58:10:2a:8e:32:8e:d5:5e:d5:d3:ba:
e9:55:0d:ca:e2:5e:f2:ad:7f:35:66:fa:7c:6b:62:
38:d8:57:aa:9f:56:e7:b0:6d:30:3c:a4:20:1f:13:
1b:3c:c1:75:61:0c:b4:b7:d1:1f:94:1e:be:33:39:
7d:c5:cf:06:e0:af:ea:3e:4f:ee:0b:a7:44:04:ee:
59:11:a6:52:d5:67:34:b5:f7:e3:0d:ad:3b:1c:37:
f4:94:0e:ce:94:8c:26:b6:cc:71:0b:c5:db:ae:f0:
b9:70:06:cd:e8:65:bc:b4:47:d9:05:a5:6e:5c:73:
e3:e0:1f:f6:d9:9f:84:29:0e:9b:ac:17:db:23:bf:
f0:07:72:48:4b:36:98:f0:cc:7c:53:e6:39:8d:aa:
c2:ea:f1:77:63:ec:9c:1b:04:3a:ec:3c:f0:33:da:
b2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8B:F3:04:2B:7F:F6:F4:1F:C6:78:1D:3A:85:65:44:F5:31:A7:7F
X509v3 Authority Key Identifier:
keyid:D8:33:BF:A0:14:B9:19:2F:27:00:AC:AF:6F:27:9D:BE:F8:A0:AF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DO_oBS5GS8nAKyvbyedvvigr_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/411696-93be-46ba-8e91-5c017bd43663/1/2DO_oBS5GS8nAKyvbyedvvigr_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3f:3b:f7:69:d2:3c:a2:74:57:60:b2:2d:bf:72:54:88:24:
0a:50:db:4e:8f:28:9a:5d:a2:e1:ea:6e:dd:aa:cf:f2:02:74:
d9:d6:cc:c6:d0:b5:27:6c:6e:0f:55:cc:f6:f4:74:8c:ee:82:
22:69:19:98:52:05:e5:21:1f:d2:d5:e7:d9:68:8c:a3:17:7f:
4d:07:79:b6:71:bb:63:44:03:bf:39:e8:11:a0:ce:22:cd:be:
f7:9e:b1:4e:82:2e:99:44:53:df:52:9a:43:2a:e3:98:04:3b:
4c:5d:04:20:b8:8d:5a:fe:58:d6:36:7d:be:ec:ba:54:78:9b:
4a:03:d2:ba:ef:e6:3c:39:1b:64:73:4b:2b:1a:83:e0:0c:93:
99:5c:09:a7:66:5e:54:fa:6a:8c:23:e9:54:24:2b:0f:3a:4e:
d9:cb:76:2f:ce:b2:b4:ce:b7:25:8f:0d:d6:17:c5:4d:25:a8:
7b:46:69:ad:a3:75:49:29:22:9c:19:4d:c7:75:e2:db:23:e4:
fd:a5:09:0e:5f:da:31:06:c7:d8:d3:b9:41:ee:39:22:e6:b5:
c6:ff:92:3f:84:f4:00:0a:93:fe:2d:0b:3e:e1:f9:99:28:58:
e7:62:71:cc:59:93:28:89:f9:b8:6a:0f:91:fd:80:cd:48:9d:
4a:39:8a:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hX50I36mzUuG3iCno3n9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MzNiZmEwMTRiOTE5MmYyNzAwYWNhZjZmMjc5ZGJlZjhh
MGFmZjIwHhcNMjUwMTMxMTgwMDI5WhcNMjUwMjAxMTgwMDI5WjAzMTEwLwYDVQQD
Eyg0NDhiZjMwNDJiN2ZmNmY0MWZjNjc4MWQzYTg1NjU0NGY1MzFhNzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39509Et4Vl4kMfkIlWCEk6HIHYlf
dLSJznGQK1mqm3NjoOZApXRLvBuWrrFkqhu4RkDZOd9sjQLfLUxlkIzO//bi7gEE
4nwXDqsTEtXb9Ki3PQN25r3kA0Q1Akh6WBAqjjKO1V7V07rpVQ3K4l7yrX81Zvp8
a2I42Feqn1bnsG0wPKQgHxMbPMF1YQy0t9EflB6+Mzl9xc8G4K/qPk/uC6dEBO5Z
EaZS1Wc0tffjDa07HDf0lA7OlIwmtsxxC8XbrvC5cAbN6GW8tEfZBaVuXHPj4B/2
2Z+EKQ6brBfbI7/wB3JISzaY8Mx8U+Y5jarC6vF3Y+ycGwQ67DzwM9qy9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESL8wQrf/b0H8Z4HTqFZUT1Mad/MB8GA1UdIwQY
MBaAFNgzv6AUuRkvJwCsr28nnb74oK/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80MTE2OTYtOTNiZS00NmJhLThlOTEt
NWMwMTdiZDQzNjYzLzEvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80MTE2OTYtOTNiZS00NmJhLThlOTEtNWMwMTdiZDQzNjYz
LzEvMkRPX29CUzVHUzhuQUt5dmJ5ZWR2dmlncl9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATz8792nS
PKJ0V2CyLb9yVIgkClDbTo8oml2i4epu3arP8gJ02dbMxtC1J2xuD1XM9vR0jO6C
ImkZmFIF5SEf0tXn2WiMoxd/TQd5tnG7Y0QDvznoEaDOIs2+956xToIumURT31Ka
QyrjmAQ7TF0EILiNWv5Y1jZ9vuy6VHibSgPSuu/mPDkbZHNLKxqD4AyTmVwJp2Ze
VPpqjCPpVCQrDzpO2ct2L86ytM63JY8N1hfFTSWoe0ZpraN1SSkinBlNx3Xi2yPk
/aUJDl/aMQbH2NO5Qe45Iua1xv+SP4T0AAqT/i0LPuH5mShY52JxzFmTKIn5uGoP
kf2AzUidSjmKDg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:41:15 2025 by rpki-client