Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
File: C_O8-guoLZPRT4VYcCen53NRGmE.mft (raw, json)
Hash identifier: X+MDl8sKUUjK2Q/Pq7JG3c52IPf68qlolb3D7mlWXHs=
Subject key identifier: 68:CF:C3:4D:24:79:C2:02:C1:2B:79:61:EE:D2:47:B4:D0:94:26:73
Authority key identifier: 0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
Certificate issuer: /CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Certificate serial: 0194BBCE84A2FE19964A644660B4D16CBBE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
Manifest number: 03B0
Signing time: Fri 31 Jan 2025 10:01:00 +0000
Manifest this update: Fri 31 Jan 2025 10:01:00 +0000
Manifest next update: Sat 01 Feb 2025 10:01:00 +0000
Files and hashes: 1: C_O8-guoLZPRT4VYcCen53NRGmE.crl (hash: sU4ohibB4vXFadVUyUoOLof1J1tr5qqTgy6TrQlX3dQ=)
2: UaXU4JRzeuGMG6wdYLOUEK9yfe8.roa (hash: 4U1yrHFJUucJ8q4Do7bByqlbkCfcvDVqW8/VtgVvyc8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:84:a2:fe:19:96:4a:64:46:60:b4:d1:6c:bb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Validity
Not Before: Jan 31 10:01:00 2025 GMT
Not After : Feb 1 10:01:00 2025 GMT
Subject: CN=68cfc34d2479c202c12b7961eed247b4d0942673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2d:f0:f6:f8:c2:a1:2e:1b:b6:f6:b8:51:f2:
03:d8:20:fb:b6:34:81:f5:36:7c:c7:c5:ee:76:72:
59:b1:72:30:4c:8a:53:78:b8:6f:ba:35:b0:d9:37:
4d:c1:ed:9d:ee:61:61:8b:8b:d8:72:55:86:c0:e4:
b3:08:b6:fe:82:ef:8e:d6:28:c4:2d:ce:26:a8:c9:
5a:8a:65:af:f4:86:9b:36:a9:14:cb:25:28:de:02:
b1:f3:a1:83:67:9a:3a:45:f5:3e:9e:19:af:17:ae:
93:b5:91:40:75:d2:44:a3:15:ff:6f:8c:36:03:38:
1a:ab:0c:7c:0a:42:9c:1b:74:6c:31:18:53:5d:7e:
aa:d7:52:02:89:29:1a:77:82:7d:05:f5:a8:ae:3b:
26:98:bd:8f:6d:93:3c:47:35:cc:d7:5e:35:05:7d:
40:56:a5:21:9f:2a:0f:78:c1:a8:da:fb:47:00:8d:
ff:b7:d9:70:7a:27:c1:8d:74:08:2e:ea:f3:ea:eb:
c7:d1:7b:5e:ee:49:37:b4:d7:3e:bc:8b:41:27:97:
2b:f3:f4:72:29:a0:a7:71:41:33:36:44:88:7b:63:
63:a9:12:29:c8:12:2d:50:b3:83:5e:0c:d0:63:bc:
ae:94:b4:3b:05:6c:25:7c:19:90:95:a4:50:d6:52:
81:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CF:C3:4D:24:79:C2:02:C1:2B:79:61:EE:D2:47:B4:D0:94:26:73
X509v3 Authority Key Identifier:
keyid:0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:6b:67:cb:78:fe:bd:6d:9a:51:47:cd:87:c9:2d:40:5a:bd:
45:fc:ee:ad:a7:39:0a:8f:8c:8b:c2:de:12:92:8c:2d:31:c1:
c6:14:ae:b2:02:4c:d4:02:92:db:b3:af:99:ef:1d:50:e9:ec:
44:bb:72:08:b9:98:53:63:35:d3:2a:4d:e0:2d:f6:a9:25:76:
10:36:d0:66:72:20:f9:df:aa:8e:f2:6a:8f:64:9d:3f:7e:6f:
f7:a4:e4:cc:a9:39:bd:8c:4e:9b:33:49:b6:4b:6b:af:02:61:
1d:80:6e:0b:4a:a3:9b:2f:a4:ef:03:1d:55:0b:2e:76:19:a0:
3b:35:60:04:3b:b0:2d:9c:86:a0:a5:2d:d5:c5:5c:6a:9e:fb:
2c:74:e8:50:6f:26:d0:d5:bb:cb:dd:22:6f:ee:59:ea:8d:ae:
04:1b:5b:1c:34:dd:06:7c:db:c0:94:c1:30:67:ef:dd:0f:b4:
ce:11:d9:3a:d7:8a:08:6c:40:cd:83:2e:34:61:c3:8f:10:53:
79:84:87:89:6a:55:17:74:a2:cb:8f:d5:3c:8e:9e:07:cc:65:
fd:53:01:bf:8c:66:0a:ad:04:e3:c5:42:29:09:ee:ad:69:33:
8c:3c:89:9a:93:bc:9d:39:08:06:5b:56:ba:ca:f2:39:2f:f5:
3e:8b:05:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zoSi/hmWSmRGYLTRbLvlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjNiY2ZhMGJhODJkOTNkMTRmODU1ODcwMjdhN2U3NzM1
MTFhNjEwHhcNMjUwMTMxMTAwMTAwWhcNMjUwMjAxMTAwMTAwWjAzMTEwLwYDVQQD
Eyg2OGNmYzM0ZDI0NzljMjAyYzEyYjc5NjFlZWQyNDdiNGQwOTQyNjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC3w9vjCoS4btva4UfID2CD7tjSB
9TZ8x8XudnJZsXIwTIpTeLhvujWw2TdNwe2d7mFhi4vYclWGwOSzCLb+gu+O1ijE
Lc4mqMlaimWv9IabNqkUyyUo3gKx86GDZ5o6RfU+nhmvF66TtZFAddJEoxX/b4w2
Azgaqwx8CkKcG3RsMRhTXX6q11ICiSkad4J9BfWorjsmmL2PbZM8RzXM1141BX1A
VqUhnyoPeMGo2vtHAI3/t9lweifBjXQILurz6uvH0Xte7kk3tNc+vItBJ5cr8/Ry
KaCncUEzNkSIe2NjqRIpyBItULODXgzQY7yulLQ7BWwlfBmQlaRQ1lKB/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjPw00kecICwSt5Ye7SR7TQlCZzMB8GA1UdIwQY
MBaAFAvzvPoLqC2T0U+FWHAnp+dzURphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUt
YTYzMzEyNWI3ZTIzLzEvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUtYTYzMzEyNWI3ZTIz
LzEvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACWtny3j+
vW2aUUfNh8ktQFq9Rfzurac5Co+Mi8LeEpKMLTHBxhSusgJM1AKS27Ovme8dUOns
RLtyCLmYU2M10ypN4C32qSV2EDbQZnIg+d+qjvJqj2SdP35v96TkzKk5vYxOmzNJ
tktrrwJhHYBuC0qjmy+k7wMdVQsudhmgOzVgBDuwLZyGoKUt1cVcap77LHToUG8m
0NW7y90ib+5Z6o2uBBtbHDTdBnzbwJTBMGfv3Q+0zhHZOteKCGxAzYMuNGHDjxBT
eYSHiWpVF3Siy4/VPI6eB8xl/VMBv4xmCq0E48VCKQnurWkzjDyJmpO8nTkIBltW
usryOS/1PosFKw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:18 2025 by rpki-client