Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
File: jOc1Ep93eiW_hHJyBr-XjZodsgA.mft (raw, json)
Hash identifier: q1z57m0cW0Hjl6J1aL3sEHwdaIrj33JWnq/z0VLrcz0=
Subject key identifier: 27:43:D3:0F:32:A9:27:E4:D1:09:33:FE:48:70:68:94:B4:65:3C:CA
Authority key identifier: 8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
Certificate issuer: /CN=8ce735129f777a25bf84727206bf978d9a1db200
Certificate serial: 0194BC04BA20B9207FE01EC472EDFAC0A9CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
Manifest number: 0A02
Signing time: Fri 31 Jan 2025 11:00:13 +0000
Manifest this update: Fri 31 Jan 2025 11:00:13 +0000
Manifest next update: Sat 01 Feb 2025 11:00:13 +0000
Files and hashes: 1: 7nFNN3l5GD-t-2xZtD0Zf8RWyQ4.roa (hash: vqDVEIya4bFoWJhti8KO9chSYpm+4SzzmfR2K9/w2/k=)
2: czoe1RLJsx9dA2fYE94xeHxNmO4.roa (hash: BpNazVz7pSpyIXBvYFGh8xCscfLMGwTUrkPmKZ9aKwA=)
3: jOc1Ep93eiW_hHJyBr-XjZodsgA.crl (hash: JyCAkxhpXC+4DqXKqXXQDO3fu2/AfAB4xvVqViafJPI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ba:20:b9:20:7f:e0:1e:c4:72:ed:fa:c0:a9:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce735129f777a25bf84727206bf978d9a1db200
Validity
Not Before: Jan 31 11:00:13 2025 GMT
Not After : Feb 1 11:00:13 2025 GMT
Subject: CN=2743d30f32a927e4d10933fe48706894b4653cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3e:15:89:dd:99:c9:37:2f:72:e1:a6:45:04:
ac:39:cf:4e:13:76:42:de:c2:ac:f1:4f:66:df:3f:
03:23:6a:83:b0:e7:c4:7e:b3:0f:6c:e4:64:ae:7e:
1a:38:96:51:85:e7:5f:ce:28:f5:a5:43:7d:af:6f:
b4:86:00:52:37:f3:bf:27:7a:bb:5e:45:75:34:5e:
64:c9:58:e9:b9:d2:58:ea:6b:b3:85:98:72:7b:b2:
0b:ee:c0:ae:5c:8f:f8:6a:60:42:4b:d6:e9:1c:a3:
47:c3:4a:80:6b:a0:7e:d3:2e:f7:88:79:59:eb:04:
11:4b:4a:6b:74:6a:df:f8:49:ab:50:ca:38:df:6c:
7c:9c:03:9e:95:17:03:a1:f7:dd:e6:fa:5f:8c:5b:
37:96:45:9c:7e:38:02:52:e1:84:5a:03:ee:b4:54:
7f:9a:66:47:ba:0d:72:ff:44:df:c5:e2:92:d5:5a:
e3:5a:39:ab:56:e4:aa:99:62:d7:a8:0d:c8:a6:83:
f1:65:a9:e0:65:48:b6:c0:e8:ad:37:3e:2c:a0:e3:
39:69:41:94:aa:a5:57:95:85:34:a3:66:26:96:20:
de:ee:44:4f:2b:5e:35:9c:78:c8:ea:5a:89:2e:f9:
5a:78:06:23:98:ab:58:ac:43:03:ab:1f:fc:cc:51:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:43:D3:0F:32:A9:27:E4:D1:09:33:FE:48:70:68:94:B4:65:3C:CA
X509v3 Authority Key Identifier:
keyid:8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:af:d7:2d:ab:a0:19:ef:1e:97:c1:5e:49:3b:d6:f2:56:e3:
cd:a2:dd:41:75:02:28:bf:51:4d:c3:0b:16:66:47:8a:cb:f1:
64:b9:a6:fa:cd:44:14:0b:6a:74:e3:37:cb:39:11:93:5d:36:
46:6f:53:02:59:8b:99:7d:bf:92:30:41:47:5d:6e:94:ad:9a:
15:f0:8c:ed:24:b3:b6:ce:18:ba:34:9b:20:86:4c:e2:a9:42:
59:01:75:68:8e:be:66:eb:fb:09:ed:35:05:52:c7:c5:29:f0:
aa:2b:c8:fa:4a:43:4b:75:83:e0:43:65:a8:bf:76:6b:a3:f8:
87:69:46:95:d6:7f:63:99:08:02:dd:a9:d6:ff:b3:6d:7f:c8:
23:af:89:d1:dd:94:ac:46:8c:ee:a5:1d:98:be:2b:46:8d:fa:
8c:9e:04:fa:f9:2a:80:7c:91:84:f5:a2:6f:e6:d9:0d:ea:89:
76:12:3f:c2:29:d6:fb:5b:29:f4:1f:a4:7a:61:9a:89:68:e2:
8e:3a:4c:a0:4b:1a:ff:df:f8:cc:39:6d:98:d7:fa:6d:b7:1f:
dc:52:12:5e:7d:9c:39:cb:0b:76:2f:a0:8d:ad:c0:ff:63:c8:
ee:10:82:6b:f7:d8:c1:e1:28:6d:a5:74:bf:7a:1e:0d:3b:15:
7a:cd:fb:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BLoguSB/4B7Ecu36wKnPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjZTczNTEyOWY3NzdhMjViZjg0NzI3MjA2YmY5NzhkOWEx
ZGIyMDAwHhcNMjUwMTMxMTEwMDEzWhcNMjUwMjAxMTEwMDEzWjAzMTEwLwYDVQQD
EygyNzQzZDMwZjMyYTkyN2U0ZDEwOTMzZmU0ODcwNjg5NGI0NjUzY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT4Vid2ZyTcvcuGmRQSsOc9OE3ZC
3sKs8U9m3z8DI2qDsOfEfrMPbORkrn4aOJZRhedfzij1pUN9r2+0hgBSN/O/J3q7
XkV1NF5kyVjpudJY6muzhZhye7IL7sCuXI/4amBCS9bpHKNHw0qAa6B+0y73iHlZ
6wQRS0prdGrf+EmrUMo432x8nAOelRcDoffd5vpfjFs3lkWcfjgCUuGEWgPutFR/
mmZHug1y/0TfxeKS1VrjWjmrVuSqmWLXqA3IpoPxZangZUi2wOitNz4soOM5aUGU
qqVXlYU0o2YmliDe7kRPK141nHjI6lqJLvlaeAYjmKtYrEMDqx/8zFELCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdD0w8yqSfk0Qkz/khwaJS0ZTzKMB8GA1UdIwQY
MBaAFIznNRKfd3olv4Rycga/l42aHbIAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak9jMUVwOTNlaVdfaEhKeUJyLVhqWm9kc2dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZGU0YTMtOGYyMC00MDBhLWI4NzYt
Zjc4YzIyMDY1NzVhLzEvak9jMUVwOTNlaVdfaEhKeUJyLVhqWm9kc2dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lZGU0YTMtOGYyMC00MDBhLWI4NzYtZjc4YzIyMDY1NzVh
LzEvak9jMUVwOTNlaVdfaEhKeUJyLVhqWm9kc2dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARq/XLaug
Ge8el8FeSTvW8lbjzaLdQXUCKL9RTcMLFmZHisvxZLmm+s1EFAtqdOM3yzkRk102
Rm9TAlmLmX2/kjBBR11ulK2aFfCM7SSzts4YujSbIIZM4qlCWQF1aI6+Zuv7Ce01
BVLHxSnwqivI+kpDS3WD4ENlqL92a6P4h2lGldZ/Y5kIAt2p1v+zbX/II6+J0d2U
rEaM7qUdmL4rRo36jJ4E+vkqgHyRhPWib+bZDeqJdhI/winW+1sp9B+kemGaiWji
jjpMoEsa/9/4zDltmNf6bbcf3FISXn2cOcsLdi+gja3A/2PI7hCCa/fYweEobaV0
v3oeDTsVes370w==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:07:37 2025 by rpki-client