Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
File: OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft (raw, json)
Hash identifier: EYV2jCF+YD5gl/ZdCtfwkw2DH6eSEeb9YYV30E+3C7o=
Subject key identifier: BA:14:E1:79:76:B0:1D:FC:17:91:B0:D1:42:B8:1F:32:06:06:97:F2
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 0194BC05121376295EA92500EE0EEA7BAFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
Manifest number: 049E
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: ECy4hcsZKRfHoRJrX40zL9VgZlM.roa (hash: TIqTReRQQT5DAw+Fnvsbl2Gazl66yiKwPvTFj1mKh8s=)
2: OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl (hash: uKCHHdZrobuAj4dT4o/0uSq2WO4uWPCrPz4vEGGBZCQ=)
3: b-pP2DvAvhNxFYiGst38p6kSpEw.roa (hash: OWrgzbHkSLo7aQ27PmujOGuFd28cotewB1lFGD+BaKA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:12:13:76:29:5e:a9:25:00:ee:0e:ea:7b:af:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=ba14e17976b01dfc1791b0d142b81f32060697f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:33:97:e3:0c:f8:9b:42:5e:6e:0f:db:81:
31:a0:b2:43:0e:c7:a1:77:0c:f3:b9:1f:49:4e:26:
50:fe:6a:7c:dc:59:b2:82:13:01:12:df:57:61:03:
77:0f:fd:ec:03:e6:28:a9:76:21:58:1b:91:07:9f:
6a:91:f8:7e:97:67:95:c2:55:06:08:92:fc:9f:99:
ca:24:02:74:56:18:f8:2a:17:74:6a:a5:ae:c3:f8:
a0:b2:0d:3f:9a:48:da:97:b0:39:59:d4:68:d8:93:
cf:26:b1:9b:8a:9a:7e:74:a9:87:a2:b0:45:f8:3f:
19:92:63:a6:38:e4:49:42:3b:66:2b:e4:9a:f8:c5:
44:85:87:83:17:fa:b5:68:26:32:6a:3e:36:a7:f9:
db:b9:53:5e:13:11:e3:a4:48:e3:a0:b2:85:2a:3e:
55:1c:8e:e0:d0:0f:58:e6:67:f9:74:1e:30:f7:d4:
65:22:91:1f:a8:56:f7:10:c2:50:dc:a4:1b:8b:f9:
b2:11:e8:8d:5e:e7:47:30:90:eb:91:53:2a:7f:20:
81:5c:a9:9e:08:49:da:fe:32:bb:60:e6:9b:07:f0:
82:23:c3:3e:2d:e0:19:53:62:5a:90:b5:47:50:b1:
8b:a3:06:80:43:6a:aa:7b:2f:ad:91:a0:09:b6:34:
03:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:14:E1:79:76:B0:1D:FC:17:91:B0:D1:42:B8:1F:32:06:06:97:F2
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:26:9e:52:64:10:14:ac:6d:6b:33:eb:b1:ea:59:d7:30:68:
1f:4e:07:24:bb:a1:eb:79:1e:38:d8:43:87:d9:9f:e4:8a:e1:
fe:59:0d:1d:69:18:e7:09:d7:c3:0c:60:67:df:fe:81:ab:2a:
10:67:cc:02:91:3d:b5:83:c2:b3:1a:12:ea:ff:b5:bd:fe:48:
ef:6c:ab:31:98:e7:2c:e1:09:52:f1:da:6e:b2:08:06:9b:3d:
2b:1c:a0:2c:a5:1b:f2:0b:39:f9:92:7c:27:a6:e3:bc:dd:4e:
b2:3d:e8:39:95:d1:f1:8d:40:3c:fd:91:ad:1c:76:54:fc:b9:
33:0c:2f:84:80:30:77:26:3c:31:8a:14:0e:b5:61:ad:fe:f3:
26:41:d1:ff:b6:08:62:59:79:5f:5f:5b:45:d5:b7:ec:7d:99:
d2:6d:89:44:5d:68:25:48:b8:73:ee:bf:f1:1a:3b:9a:45:b6:
fc:94:b2:df:33:9f:14:42:02:23:df:c5:e8:12:c6:45:f9:4a:
4f:de:51:4f:12:0a:3a:55:35:4c:35:e6:d1:2b:eb:33:bb:bf:
e8:6b:f3:a8:13:f3:00:d0:0c:ef:ca:58:44:84:04:9e:12:06:
30:1f:32:e6:d7:3d:af:ce:79:69:ba:46:90:a5:bf:fb:b0:ed:
5e:7d:4d:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRITdileqSUA7g7qe6//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMGJmMThkNmJiZGIzM2RhODJmZTYxYTI4NjI0YmE3MmUy
MzUwNDAwHhcNMjUwMTMxMTEwMDM2WhcNMjUwMjAxMTEwMDM2WjAzMTEwLwYDVQQD
EyhiYTE0ZTE3OTc2YjAxZGZjMTc5MWIwZDE0MmI4MWYzMjA2MDY5N2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv0zl+MM+JtCXm4P24ExoLJDDseh
dwzzuR9JTiZQ/mp83FmyghMBEt9XYQN3D/3sA+YoqXYhWBuRB59qkfh+l2eVwlUG
CJL8n5nKJAJ0Vhj4Khd0aqWuw/igsg0/mkjal7A5WdRo2JPPJrGbipp+dKmHorBF
+D8ZkmOmOORJQjtmK+Sa+MVEhYeDF/q1aCYyaj42p/nbuVNeExHjpEjjoLKFKj5V
HI7g0A9Y5mf5dB4w99RlIpEfqFb3EMJQ3KQbi/myEeiNXudHMJDrkVMqfyCBXKme
CEna/jK7YOabB/CCI8M+LeAZU2JakLVHULGLowaAQ2qqey+tkaAJtjQD5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoU4Xl2sB38F5Gw0UK4HzIGBpfyMB8GA1UdIwQY
MBaAFDsL8Y1rvbM9qC/mGihiS6cuI1BAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2Yjgt
ZDQ5OTE2YjVmMmI0LzEvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS81ZGRlZTktYzFjNC00YjU3LWI2YjgtZDQ5OTE2YjVmMmI0
LzEvT3d2eGpXdTlzejJvTC1ZYUtHSkxweTRqVUVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAriaeUmQQ
FKxtazPrsepZ1zBoH04HJLuh63keONhDh9mf5Irh/lkNHWkY5wnXwwxgZ9/+gasq
EGfMApE9tYPCsxoS6v+1vf5I72yrMZjnLOEJUvHabrIIBps9KxygLKUb8gs5+ZJ8
J6bjvN1Osj3oOZXR8Y1APP2RrRx2VPy5MwwvhIAwdyY8MYoUDrVhrf7zJkHR/7YI
Yll5X19bRdW37H2Z0m2JRF1oJUi4c+6/8Ro7mkW2/JSy3zOfFEICI9/F6BLGRflK
T95RTxIKOlU1TDXm0SvrM7u/6GvzqBPzANAM78pYRIQEnhIGMB8y5tc9r855abpG
kKW/+7DtXn1NDg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:54 2025 by rpki-client