Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
File: oODFkETIfj4t-hPL-ZAjruAS76A.mft (raw, json)
Hash identifier: HiuEXk/zkrnUGnNigaYzYo7ZiMf/oYsjMT3b5+CEUbc=
Subject key identifier: FB:57:CB:FC:3C:87:3C:82:C3:A3:D8:FF:05:FA:2C:39:F2:B6:D3:77
Authority key identifier: A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
Certificate issuer: /CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Certificate serial: 0194BC0524F0D44BC3DCB94921D464BE5282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: THn-YaWLx96HuhrNbGtVod7EkgM.roa (hash: rsUPsLC3jm8thXVYAO+m9Ea1wFzIeFwCIPJOkL/61EY=)
2: oODFkETIfj4t-hPL-ZAjruAS76A.crl (hash: NDigjbNVc/qzjOUdQPKXJt6gDxzAg7ph8ERtVyMhCOg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:24:f0:d4:4b:c3:dc:b9:49:21:d4:64:be:52:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0e0c59044c87e3e2dfa13cbf99023aee012efa0
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=fb57cbfc3c873c82c3a3d8ff05fa2c39f2b6d377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:57:a5:ad:6d:40:c1:07:48:0f:48:64:06:
b7:11:94:7f:74:4c:8e:0f:01:40:08:88:23:6d:a6:
13:48:26:f5:f0:27:67:d0:08:25:53:ad:50:b0:a1:
f8:0e:6a:d2:36:16:79:2c:b9:ee:96:43:4b:ad:b5:
c4:a8:f1:c6:97:51:33:5a:eb:a9:b9:a3:d5:75:35:
8b:cb:3b:31:13:e4:3f:9d:fe:0f:82:74:ba:30:1f:
18:2a:a6:8d:44:ac:0a:38:98:d4:d2:5e:6d:bd:91:
52:d5:18:35:ef:c6:4b:3c:e6:25:8a:90:47:cb:b2:
4b:6f:a2:69:5e:6b:aa:f3:3a:69:69:59:c0:0d:7d:
9c:50:d3:e5:14:f3:70:06:89:92:67:9d:84:66:a9:
55:e4:b5:f2:1a:63:90:91:51:d1:40:0f:5c:1b:4b:
44:0d:9e:12:da:4b:b5:7d:f4:e1:89:d7:8d:95:bc:
6d:3e:ed:9e:a2:99:6b:00:a7:85:2f:34:0f:3a:41:
1a:10:5d:90:23:63:e8:91:04:00:e1:e3:db:06:75:
20:de:6a:8e:ef:3a:d2:5d:af:69:30:ba:55:9f:4d:
1f:79:6b:7c:3c:d8:e5:f8:2e:70:79:59:ae:ea:70:
c9:98:67:71:f4:2a:01:f4:a7:b8:86:d5:d4:2a:aa:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:57:CB:FC:3C:87:3C:82:C3:A3:D8:FF:05:FA:2C:39:F2:B6:D3:77
X509v3 Authority Key Identifier:
keyid:A0:E0:C5:90:44:C8:7E:3E:2D:FA:13:CB:F9:90:23:AE:E0:12:EF:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oODFkETIfj4t-hPL-ZAjruAS76A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/b1592d-3a23-4f40-81c8-1600b742b5dd/1/oODFkETIfj4t-hPL-ZAjruAS76A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:38:7d:4d:37:d9:c1:f0:5f:4b:99:ca:30:ca:a0:cc:37:72:
cc:e7:58:b9:0f:a5:46:50:ae:60:73:25:e3:5e:c4:18:6c:82:
6b:f0:1d:35:5c:2a:1f:10:fb:42:f1:ef:0c:0a:b8:d3:ef:0a:
68:f9:c2:12:ad:2e:eb:fa:26:87:53:ee:50:03:f5:bf:0d:61:
71:40:bd:4c:51:c9:ca:f3:4f:57:21:2e:32:e0:14:e1:f3:df:
59:0b:c8:27:7c:b4:fe:26:07:84:8b:44:e4:32:ce:42:35:f8:
9d:4d:34:39:8c:68:83:6a:47:45:4a:36:1a:a8:cd:6e:d1:5e:
56:b7:1e:e5:a6:59:01:38:66:39:e3:0c:00:6c:4e:2e:78:aa:
23:36:79:1d:20:12:2d:cf:a4:49:73:42:fb:6d:9e:7c:5d:eb:
54:6a:75:15:6d:d8:9b:cb:81:db:58:f9:82:81:f2:ae:da:be:
98:1a:15:28:9c:85:5c:dd:f9:e1:1f:3d:b9:5b:31:0a:36:db:
99:be:71:07:ed:21:d0:65:13:36:3e:0f:9f:22:a5:f1:2e:06:
5c:19:11:37:00:a4:3f:27:1d:dd:71:02:cc:4e:49:a2:54:78:
87:48:7a:dc:51:bc:ea:74:2b:9f:69:b3:22:42:9c:9e:91:4b:
f6:fe:95:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BSTw1EvD3LlJIdRkvlKCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZTBjNTkwNDRjODdlM2UyZGZhMTNjYmY5OTAyM2FlZTAx
MmVmYTAwHhcNMjUwMTMxMTEwMDQxWhcNMjUwMjAxMTEwMDQxWjAzMTEwLwYDVQQD
EyhmYjU3Y2JmYzNjODczYzgyYzNhM2Q4ZmYwNWZhMmMzOWYyYjZkMzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5lXpa1tQMEHSA9IZAa3EZR/dEyO
DwFACIgjbaYTSCb18Cdn0AglU61QsKH4DmrSNhZ5LLnulkNLrbXEqPHGl1EzWuup
uaPVdTWLyzsxE+Q/nf4PgnS6MB8YKqaNRKwKOJjU0l5tvZFS1Rg178ZLPOYlipBH
y7JLb6JpXmuq8zppaVnADX2cUNPlFPNwBomSZ52EZqlV5LXyGmOQkVHRQA9cG0tE
DZ4S2ku1ffThideNlbxtPu2eoplrAKeFLzQPOkEaEF2QI2PokQQA4ePbBnUg3mqO
7zrSXa9pMLpVn00feWt8PNjl+C5weVmu6nDJmGdx9CoB9Ke4htXUKqosdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtXy/w8hzyCw6PY/wX6LDnyttN3MB8GA1UdIwQY
MBaAFKDgxZBEyH4+LfoTy/mQI67gEu+gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb09ERmtFVElmajR0LWhQTC1aQWpydUFTNzZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iMTU5MmQtM2EyMy00ZjQwLTgxYzgt
MTYwMGI3NDJiNWRkLzEvb09ERmtFVElmajR0LWhQTC1aQWpydUFTNzZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9iMTU5MmQtM2EyMy00ZjQwLTgxYzgtMTYwMGI3NDJiNWRk
LzEvb09ERmtFVElmajR0LWhQTC1aQWpydUFTNzZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDh9TTfZ
wfBfS5nKMMqgzDdyzOdYuQ+lRlCuYHMl417EGGyCa/AdNVwqHxD7QvHvDAq40+8K
aPnCEq0u6/omh1PuUAP1vw1hcUC9TFHJyvNPVyEuMuAU4fPfWQvIJ3y0/iYHhItE
5DLOQjX4nU00OYxog2pHRUo2GqjNbtFeVrce5aZZAThmOeMMAGxOLniqIzZ5HSAS
Lc+kSXNC+22efF3rVGp1FW3Ym8uB21j5goHyrtq+mBoVKJyFXN354R89uVsxCjbb
mb5xB+0h0GUTNj4PnyKl8S4GXBkRNwCkPycd3XECzE5JolR4h0h63FG86nQrn2mz
IkKcnpFL9v6VZw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:49 2025 by rpki-client