Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
File: b2oouFuReYIHK59PQG1-sJmROjE.mft (raw, json)
Hash identifier: ucGcvqYIGBFSKd3Y2zcFSVlFH3ASDEsaYqt2OcHzom8=
Subject key identifier: 55:44:2E:A2:75:0F:E8:C8:E9:9B:6A:8A:6B:AB:4F:75:4C:29:83:29
Authority key identifier: 6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
Certificate issuer: /CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Certificate serial: 0194BC3C0C3A74120D54D9312104956A9922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
Manifest number: 045B
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: ZwdlOhTaB9mfI0Lixy338yhL9bw.roa (hash: JhlKbHsGhRiWUq0ABUz1j/K5IY2i4ZC4XvyEDFpDUMk=)
2: b2oouFuReYIHK59PQG1-sJmROjE.crl (hash: AXEKa5kwSo8vtX2kHsT/JsrIj1mhKF0np58f8kkFSvM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0c:3a:74:12:0d:54:d9:31:21:04:95:6a:99:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=55442ea2750fe8c8e99b6a8a6bab4f754c298329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:33:a3:0d:41:5c:81:b2:b1:ab:f7:86:55:
8d:b7:a6:24:ac:52:a8:da:2f:f0:34:57:68:78:2c:
32:67:15:42:d7:e0:80:9c:8b:49:44:b0:3c:f4:3e:
e4:2a:37:02:59:10:e6:52:d1:cb:1a:91:f9:09:07:
5a:21:ef:4e:eb:0e:e5:90:c8:02:ea:72:f0:25:9b:
a8:66:ee:db:bf:6b:63:5f:b3:29:1e:e5:11:07:44:
5b:73:17:6f:a7:64:3f:15:d5:14:56:0b:22:56:5b:
29:68:3e:4f:a8:c1:1e:db:26:1e:d1:fe:35:35:58:
47:79:e9:0b:cc:12:45:ee:a7:ee:fd:01:19:d7:4c:
ac:8c:a4:7a:de:79:9a:df:c1:23:df:50:11:a1:74:
f9:fb:d2:1f:ab:dc:5b:05:0c:e0:a6:84:3b:b4:7f:
94:0d:65:44:01:40:bb:31:5f:b6:93:db:af:0c:a0:
d3:b0:cd:85:b7:81:23:6e:4a:d8:d4:89:fb:12:35:
08:89:f1:fc:af:a0:9a:10:c6:3e:f7:88:1d:d5:63:
c8:87:8a:cb:c7:7a:ec:57:6c:02:3b:fc:66:e9:29:
40:02:74:ef:47:cd:ce:1c:bb:5c:bf:6b:e3:75:1d:
33:7f:26:f5:ec:23:bb:64:54:f2:88:01:f3:ba:cf:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:44:2E:A2:75:0F:E8:C8:E9:9B:6A:8A:6B:AB:4F:75:4C:29:83:29
X509v3 Authority Key Identifier:
keyid:6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:44:a3:f0:b3:5c:57:c6:0c:fe:63:b4:99:2c:5b:33:09:b0:
d8:ef:c4:15:9b:f0:87:b0:a6:62:5c:2d:aa:47:49:0f:9a:1f:
f2:e7:18:1e:0b:12:41:b5:26:7a:4b:cf:dc:1b:b3:a3:52:97:
ed:b3:d0:24:2f:8c:41:bb:b7:71:66:48:61:31:de:e5:6d:37:
c1:59:e1:55:e2:33:72:5d:d3:b1:7c:39:01:36:3a:3f:c7:5a:
15:86:9d:dd:bb:54:04:7a:46:c3:63:9e:2d:b6:e8:cf:7c:5a:
71:01:fd:10:03:0c:f7:69:bf:f8:50:ff:3b:25:b2:df:72:85:
df:2a:27:46:29:40:09:59:09:b2:1c:23:d0:e3:2e:fc:24:c8:
be:5b:6b:9a:70:34:99:39:81:09:5d:74:4b:d3:8f:bc:7a:0e:
2b:8e:9b:a7:88:f7:a5:33:ed:2b:2b:3d:52:2e:6d:e7:1a:25:
c5:19:b9:9a:08:7f:a9:d4:62:75:ff:45:fc:36:0a:d1:96:7a:
1d:d4:02:6f:ad:f4:d6:42:49:e3:72:0e:a7:db:16:4a:ab:f5:
95:8d:02:03:ed:11:16:83:6f:b0:c8:90:4a:cd:f5:b6:07:cf:
88:b6:11:57:aa:4e:85:19:28:b5:e5:15:8e:2b:4f:53:d8:51:
81:0e:7b:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PAw6dBINVNkxIQSVapkiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNmEyOGI4NWI5MTc5ODIwNzJiOWY0ZjQwNmQ3ZWIwOTk5
MTNhMzEwHhcNMjUwMTMxMTIwMDM5WhcNMjUwMjAxMTIwMDM5WjAzMTEwLwYDVQQD
Eyg1NTQ0MmVhMjc1MGZlOGM4ZTk5YjZhOGE2YmFiNGY3NTRjMjk4MzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfUzow1BXIGysav3hlWNt6YkrFKo
2i/wNFdoeCwyZxVC1+CAnItJRLA89D7kKjcCWRDmUtHLGpH5CQdaIe9O6w7lkMgC
6nLwJZuoZu7bv2tjX7MpHuURB0Rbcxdvp2Q/FdUUVgsiVlspaD5PqMEe2yYe0f41
NVhHeekLzBJF7qfu/QEZ10ysjKR63nma38Ej31ARoXT5+9Ifq9xbBQzgpoQ7tH+U
DWVEAUC7MV+2k9uvDKDTsM2Ft4EjbkrY1In7EjUIifH8r6CaEMY+94gd1WPIh4rL
x3rsV2wCO/xm6SlAAnTvR83OHLtcv2vjdR0zfyb17CO7ZFTyiAHzus+gwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVELqJ1D+jI6ZtqimurT3VMKYMpMB8GA1UdIwQY
MBaAFG9qKLhbkXmCByufT0BtfrCZkToxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjJvb3VGdVJlWUlISzU5UFFHMS1zSm1ST2pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81MjU1NGMtMzg5ZC00YWVhLWEwMGMt
NzQxZDA4OThkYTRlLzEvYjJvb3VGdVJlWUlISzU5UFFHMS1zSm1ST2pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC81MjU1NGMtMzg5ZC00YWVhLWEwMGMtNzQxZDA4OThkYTRl
LzEvYjJvb3VGdVJlWUlISzU5UFFHMS1zSm1ST2pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUSj8LNc
V8YM/mO0mSxbMwmw2O/EFZvwh7CmYlwtqkdJD5of8ucYHgsSQbUmekvP3Buzo1KX
7bPQJC+MQbu3cWZIYTHe5W03wVnhVeIzcl3TsXw5ATY6P8daFYad3btUBHpGw2Oe
Lbboz3xacQH9EAMM92m/+FD/OyWy33KF3yonRilACVkJshwj0OMu/CTIvltrmnA0
mTmBCV10S9OPvHoOK46bp4j3pTPtKys9Ui5t5xolxRm5mgh/qdRidf9F/DYK0ZZ6
HdQCb6301kJJ43IOp9sWSqv1lY0CA+0RFoNvsMiQSs31tgfPiLYRV6pOhRkoteUV
jitPU9hRgQ57KA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:53 2025 by rpki-client