Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
File: DoMf1wxr03oqddeg6sAxyS2o4YU.mft (raw, json)
Hash identifier: gdv7E05SE4+GVtlQ0ftGJMcA6+8H0pciQSTn+Jqry8g=
Subject key identifier: AC:FD:11:5B:03:B5:F7:19:58:45:00:E0:9B:C9:35:3E:AD:2C:DD:7F
Authority key identifier: 0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
Certificate issuer: /CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Certificate serial: 0194BD85823B6363640AEA3AE0AC026ABD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
Manifest number: 10AD
Signing time: Fri 31 Jan 2025 18:00:30 +0000
Manifest this update: Fri 31 Jan 2025 18:00:30 +0000
Manifest next update: Sat 01 Feb 2025 18:00:30 +0000
Files and hashes: 1: AbAz97rI6RXbeaGg0ju1UGvv4xM.roa (hash: 6SJubAUNhK59Bg5EEa587Nx4giyrDXi2DFXXzhtFznQ=)
2: DoMf1wxr03oqddeg6sAxyS2o4YU.crl (hash: Hh1Txu2SxV9TUZwPFzf+cPPvlDLuRMrMUF11ZU9Hq90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:82:3b:63:63:64:0a:ea:3a:e0:ac:02:6a:bd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Validity
Not Before: Jan 31 18:00:30 2025 GMT
Not After : Feb 1 18:00:30 2025 GMT
Subject: CN=acfd115b03b5f719584500e09bc9353ead2cdd7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:71:a5:10:a0:b2:59:0e:a1:bf:b8:3f:2d:4a:
ec:d0:be:db:01:97:db:83:01:f0:36:89:22:4e:59:
2a:e5:0d:e8:1e:ae:b8:be:ad:8d:7a:10:f1:85:82:
4e:51:90:0f:10:5f:ca:ac:2b:3f:34:8d:28:94:37:
a6:9f:85:e7:4b:87:e5:84:ca:08:2b:9f:d3:ef:33:
28:6c:fc:f0:52:cd:d6:5b:01:56:54:57:f5:04:19:
82:9a:12:33:f3:6f:50:7d:a6:17:ea:47:2a:dc:a0:
28:a9:cc:82:44:49:7f:e1:c7:12:de:71:8c:cf:08:
e0:01:4b:23:69:94:21:8e:21:d2:3e:b8:07:89:30:
98:2f:36:fa:97:d6:ef:a0:5f:1e:fa:5e:1a:df:de:
fd:c5:d6:cb:fd:a6:0e:bf:a4:bf:81:31:b7:7b:e1:
e0:9d:f1:ae:3e:a3:52:87:2b:e9:75:30:67:a8:39:
87:ff:19:67:1b:f2:11:0a:ab:c2:5c:0e:f3:3f:d4:
4e:13:cf:4d:fd:3c:1a:cc:ea:33:15:6d:eb:03:6f:
cb:a0:98:d9:3a:10:28:db:8a:e5:e9:cb:34:58:ec:
9a:ac:c1:00:0b:39:fa:62:d5:3e:bf:18:eb:8a:a2:
47:43:8d:b6:c3:a1:fc:e8:a4:96:18:1b:f9:77:dc:
16:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FD:11:5B:03:B5:F7:19:58:45:00:E0:9B:C9:35:3E:AD:2C:DD:7F
X509v3 Authority Key Identifier:
keyid:0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5a:9d:c7:81:95:06:2a:8a:fb:42:ff:71:1d:08:e5:a8:03:
7f:13:50:e1:10:e3:de:bd:af:31:10:9f:ad:14:b3:a0:f8:f1:
a1:3d:32:45:65:e0:4c:bb:13:93:eb:6e:b6:7d:08:ad:3d:b8:
a4:f6:13:b4:00:2a:5d:6a:97:66:c9:81:1b:7d:b5:6f:56:21:
49:9d:29:8e:76:65:49:ff:2d:18:92:e6:e2:de:5b:fc:4f:49:
d1:9c:c3:6e:79:61:e3:ff:53:19:0b:9a:0a:4d:73:7b:12:1e:
d4:a7:54:bf:ea:64:36:3d:6a:1d:60:28:c1:d9:8c:41:d1:11:
6d:82:32:ca:94:a0:f4:8f:e3:a1:9c:5b:e1:d1:7d:69:21:00:
b5:e8:b7:15:a8:e0:0e:15:7d:31:7a:f8:22:24:f5:2b:b5:cc:
bb:02:16:a4:71:70:e5:f1:9d:21:d1:ba:49:98:03:a6:b9:f0:
f7:fa:2f:d3:b3:31:1f:30:8f:ec:78:67:0a:31:22:37:ca:04:
89:a2:68:b2:f2:00:0d:7e:31:d2:30:a1:2c:b1:27:d0:ef:23:
ac:00:51:0c:06:1d:40:04:e3:69:e6:ac:e5:45:05:11:56:2d:
2b:b4:e8:23:d0:9e:04:26:46:fb:b7:44:a8:69:74:ef:33:98:
3b:5d:77:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hYI7Y2NkCuo64KwCar2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlODMxZmQ3MGM2YmQzN2EyYTc1ZDdhMGVhYzAzMWM5MmRh
OGUxODUwHhcNMjUwMTMxMTgwMDMwWhcNMjUwMjAxMTgwMDMwWjAzMTEwLwYDVQQD
EyhhY2ZkMTE1YjAzYjVmNzE5NTg0NTAwZTA5YmM5MzUzZWFkMmNkZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHGlEKCyWQ6hv7g/LUrs0L7bAZfb
gwHwNokiTlkq5Q3oHq64vq2NehDxhYJOUZAPEF/KrCs/NI0olDemn4XnS4flhMoI
K5/T7zMobPzwUs3WWwFWVFf1BBmCmhIz829QfaYX6kcq3KAoqcyCREl/4ccS3nGM
zwjgAUsjaZQhjiHSPrgHiTCYLzb6l9bvoF8e+l4a3979xdbL/aYOv6S/gTG3e+Hg
nfGuPqNShyvpdTBnqDmH/xlnG/IRCqvCXA7zP9ROE89N/TwazOozFW3rA2/LoJjZ
OhAo24rl6cs0WOyarMEACzn6YtU+vxjriqJHQ422w6H86KSWGBv5d9wWqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKz9EVsDtfcZWEUA4JvJNT6tLN1/MB8GA1UdIwQY
MBaAFA6DH9cMa9N6KnXXoOrAMcktqOGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG9NZjF3eHIwM29xZGRlZzZzQXh5UzJvNFlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85OGE2NjEtNDRmNS00YTA1LWFjYWEt
ZTY3NTgyZjIzMDk3LzEvRG9NZjF3eHIwM29xZGRlZzZzQXh5UzJvNFlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS85OGE2NjEtNDRmNS00YTA1LWFjYWEtZTY3NTgyZjIzMDk3
LzEvRG9NZjF3eHIwM29xZGRlZzZzQXh5UzJvNFlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFqdx4GV
BiqK+0L/cR0I5agDfxNQ4RDj3r2vMRCfrRSzoPjxoT0yRWXgTLsTk+tutn0IrT24
pPYTtAAqXWqXZsmBG321b1YhSZ0pjnZlSf8tGJLm4t5b/E9J0ZzDbnlh4/9TGQua
Ck1zexIe1KdUv+pkNj1qHWAowdmMQdERbYIyypSg9I/joZxb4dF9aSEAtei3Fajg
DhV9MXr4IiT1K7XMuwIWpHFw5fGdIdG6SZgDprnw9/ov07MxHzCP7HhnCjEiN8oE
iaJosvIADX4x0jChLLEn0O8jrABRDAYdQATjaeas5UUFEVYtK7ToI9CeBCZG+7dE
qGl07zOYO113CA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:03 2025 by rpki-client