Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
File: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft (raw, json)
Hash identifier: 5xRhS0Z/2VcMdrjec3Ccuua9GPeHA/OuT9IcynuM8uI=
Subject key identifier: 1B:FE:8A:F1:86:1A:50:0E:50:FF:D4:C6:9A:A1:E1:C3:A3:59:DA:B4
Authority key identifier: D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
Certificate issuer: /CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Certificate serial: 0194BD859F57B870BABCA3EF68246A6BA7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
Manifest number: 0B36
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: 0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl (hash: Pn1uyHJkggjHSj9WCdtRTF8K5mXuqTwNpxABGvcJ/0Q=)
2: Ts2grdh3WhIBgvviR4SebdJHIVA.roa (hash: gCLhNsBpATqkGaeD3Tm7dpZpLjmibJqVgNt4Igote+Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:9f:57:b8:70:ba:bc:a3:ef:68:24:6a:6b:a7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0a10944704d723c8dd9ce730cabf96fe26bab25
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=1bfe8af1861a500e50ffd4c69aa1e1c3a359dab4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:33:b3:a6:74:44:95:55:df:bf:a1:00:f2:
9c:e7:c4:16:dd:9b:23:0c:99:94:2e:0b:f6:82:ff:
24:e7:fb:46:e6:29:cb:cc:89:e4:e6:60:44:39:cd:
d4:90:d5:0f:76:26:17:09:9a:78:94:45:c5:65:91:
6c:0c:99:bd:0e:6f:28:30:da:32:db:2c:45:68:20:
6e:e4:ec:7d:63:c1:63:58:67:71:a8:df:01:e9:af:
2f:94:32:44:5b:91:ea:56:c2:a8:52:74:72:4c:c4:
63:28:12:35:91:84:3c:9a:a8:bd:50:f6:31:16:e8:
41:9b:95:a4:f2:15:2c:30:ca:fb:eb:7f:f0:8a:54:
9e:e3:6a:f6:3e:72:0b:2a:53:88:d0:62:fa:21:13:
65:83:32:6e:cb:2f:c7:94:ca:77:e6:59:09:30:7d:
45:33:0c:25:9f:d9:96:f7:84:93:17:e6:01:85:a6:
59:68:69:8e:d4:18:9e:3e:90:95:06:3c:ca:7e:8d:
84:0c:66:fa:3f:65:ed:52:9c:70:52:00:2c:ae:49:
bf:08:23:d9:2f:a6:75:bc:ec:1d:a9:0a:0f:31:8f:
6e:65:29:ca:4f:19:ad:36:45:06:f2:20:bb:7d:e7:
81:b8:a8:60:ad:ab:ac:b9:94:7b:fa:68:3f:28:de:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FE:8A:F1:86:1A:50:0E:50:FF:D4:C6:9A:A1:E1:C3:A3:59:DA:B4
X509v3 Authority Key Identifier:
keyid:D0:A1:09:44:70:4D:72:3C:8D:D9:CE:73:0C:AB:F9:6F:E2:6B:AB:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KEJRHBNcjyN2c5zDKv5b-JrqyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/f852e5-916f-4d5e-a305-8a0f04505647/1/0KEJRHBNcjyN2c5zDKv5b-JrqyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:0f:9a:a5:d9:19:28:f9:57:64:3b:d2:c7:dd:a6:12:44:6b:
38:67:fb:37:d0:3f:85:e1:84:91:95:b4:cc:84:56:c5:99:a7:
39:89:68:39:4e:f5:36:72:2a:fc:7c:ed:85:78:10:a3:af:d0:
ad:5e:84:d1:d3:23:66:41:8c:43:e4:63:72:a3:5f:79:86:27:
f4:0d:27:45:75:5b:d8:b2:ad:40:b2:3b:c4:19:fe:50:33:1b:
83:2e:e7:54:23:f9:57:96:f6:87:99:13:f5:67:73:45:16:1f:
2b:8f:bc:3c:c9:93:df:f0:db:60:95:5d:e9:d2:dd:c6:41:24:
ef:6a:f1:05:87:1d:3f:a6:a2:c6:d8:be:b6:85:57:d5:19:93:
2b:9c:da:b3:c5:58:c1:71:8e:de:b5:ef:1d:28:75:2d:9b:be:
6f:2d:e1:60:4a:d4:63:21:19:3b:ac:4d:89:57:74:bc:19:f9:
d0:cc:3f:03:21:4d:23:cd:e5:ed:32:8a:e9:2c:59:35:03:d2:
7b:ae:20:f2:2c:68:81:c9:fe:e4:d9:a9:1b:b3:38:d5:36:6a:
c6:47:00:c2:5d:7f:13:4f:87:4e:77:bd:5d:bc:7b:e0:24:73:
11:ac:d2:5a:df:54:eb:f0:36:b4:0f:58:4e:13:08:37:9f:52:
bf:0e:f3:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hZ9XuHC6vKPvaCRqa6fjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYTEwOTQ0NzA0ZDcyM2M4ZGQ5Y2U3MzBjYWJmOTZmZTI2
YmFiMjUwHhcNMjUwMTMxMTgwMDM4WhcNMjUwMjAxMTgwMDM4WjAzMTEwLwYDVQQD
EygxYmZlOGFmMTg2MWE1MDBlNTBmZmQ0YzY5YWExZTFjM2EzNTlkYWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFQzs6Z0RJVV37+hAPKc58QW3Zsj
DJmULgv2gv8k5/tG5inLzInk5mBEOc3UkNUPdiYXCZp4lEXFZZFsDJm9Dm8oMNoy
2yxFaCBu5Ox9Y8FjWGdxqN8B6a8vlDJEW5HqVsKoUnRyTMRjKBI1kYQ8mqi9UPYx
FuhBm5Wk8hUsMMr763/wilSe42r2PnILKlOI0GL6IRNlgzJuyy/HlMp35lkJMH1F
Mwwln9mW94STF+YBhaZZaGmO1BiePpCVBjzKfo2EDGb6P2XtUpxwUgAsrkm/CCPZ
L6Z1vOwdqQoPMY9uZSnKTxmtNkUG8iC7feeBuKhgrausuZR7+mg/KN6WmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBv+ivGGGlAOUP/Uxpqh4cOjWdq0MB8GA1UdIwQY
MBaAFNChCURwTXI8jdnOcwyr+W/ia6slMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEtFSlJIQk5janlOMmM1ekRLdjViLUpycXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9mODUyZTUtOTE2Zi00ZDVlLWEzMDUt
OGEwZjA0NTA1NjQ3LzEvMEtFSlJIQk5janlOMmM1ekRLdjViLUpycXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9mODUyZTUtOTE2Zi00ZDVlLWEzMDUtOGEwZjA0NTA1NjQ3
LzEvMEtFSlJIQk5janlOMmM1ekRLdjViLUpycXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaA+apdkZ
KPlXZDvSx92mEkRrOGf7N9A/heGEkZW0zIRWxZmnOYloOU71NnIq/HzthXgQo6/Q
rV6E0dMjZkGMQ+RjcqNfeYYn9A0nRXVb2LKtQLI7xBn+UDMbgy7nVCP5V5b2h5kT
9WdzRRYfK4+8PMmT3/DbYJVd6dLdxkEk72rxBYcdP6aixti+toVX1RmTK5zas8VY
wXGO3rXvHSh1LZu+by3hYErUYyEZO6xNiVd0vBn50Mw/AyFNI83l7TKK6SxZNQPS
e64g8ixogcn+5NmpG7M41TZqxkcAwl1/E0+HTne9Xbx74CRzEazSWt9U6/A2tA9Y
ThMIN59Svw7zig==
-----END CERTIFICATE-----
Generated at Tue Apr 29 14:21:59 2025 by rpki-client