Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
File: sOJbzFUwtvRvPRHLgRPyGaRt_as.mft (raw, json)
Hash identifier: MJcpw1a/lv/3niB4Lsk7ug7IGa36a1imNuoHjUm5ij0=
Subject key identifier: 9F:84:8D:7F:F6:E3:06:7D:93:0B:7C:C9:7E:AF:2D:86:58:28:38:0E
Authority key identifier: B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
Certificate issuer: /CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Certificate serial: 0194BD177D86BEA864B68A3278E650E9131C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
Manifest number: 0BF5
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: 0lerfjDbBomfVzh-fPpNdTuZC_w.roa (hash: K04vSVynMPGD818PT8TEi3joicn16R1AClxmk8kzM/M=)
2: sOJbzFUwtvRvPRHLgRPyGaRt_as.crl (hash: nZecviyDXWcv5Wjd/nhTnXwsJna76Z9UxWcS6yZxWsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7d:86:be:a8:64:b6:8a:32:78:e6:50:e9:13:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0e25bcc5530b6f46f3d11cb8113f219a46dfdab
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=9f848d7ff6e3067d930b7cc97eaf2d865828380e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:15:49:98:81:b5:52:31:90:16:d8:ef:a3:7a:
74:4b:f0:ac:8f:0b:b0:1e:c9:34:ca:32:5a:dd:1d:
21:64:fd:9a:fe:8a:f2:6f:e4:6b:50:3e:78:87:f3:
76:15:00:cd:aa:7c:a3:fe:e5:aa:41:85:5b:a1:4e:
ed:1c:7f:af:c9:be:e4:ee:90:31:ec:dd:31:6d:7a:
5f:a2:bf:a4:2e:dd:f8:b2:8a:90:fe:1a:09:59:23:
93:91:05:b5:75:db:d3:8c:72:39:86:86:f7:8d:9f:
f0:f4:4b:eb:19:4b:a6:c0:ea:0d:8a:23:82:1a:70:
99:1e:f1:5d:71:68:ab:be:da:30:2e:0a:eb:6e:20:
89:13:f8:7e:38:49:ac:b2:cc:dc:13:8c:dc:8e:45:
f4:43:85:c8:91:ed:52:43:f1:fc:22:87:9e:c6:c3:
53:9b:09:09:c8:f5:2c:eb:d9:5d:57:1f:84:12:46:
7f:b6:68:c8:bf:bd:55:d2:36:bf:c8:e0:ec:0e:a8:
95:ce:8c:94:e5:f8:8d:4b:cf:62:ac:a4:40:9b:a9:
96:fc:dd:ef:a6:93:d1:5f:af:11:3e:d0:77:7f:9b:
a9:26:f9:0a:3f:9e:da:69:9c:01:0f:eb:d8:72:88:
96:51:f5:d0:c5:b7:42:7b:e1:88:c7:2c:ff:a0:33:
11:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:84:8D:7F:F6:E3:06:7D:93:0B:7C:C9:7E:AF:2D:86:58:28:38:0E
X509v3 Authority Key Identifier:
keyid:B0:E2:5B:CC:55:30:B6:F4:6F:3D:11:CB:81:13:F2:19:A4:6D:FD:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sOJbzFUwtvRvPRHLgRPyGaRt_as.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3830c8-802f-4846-b6e5-1aadaba80072/1/sOJbzFUwtvRvPRHLgRPyGaRt_as.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1f:c7:c4:5a:3c:8e:bd:a5:58:bc:bf:d6:bb:37:20:39:15:
7c:42:d4:ac:87:2c:2a:2f:f5:c4:53:15:64:5f:c4:b6:98:99:
00:43:f1:45:20:88:a4:cd:4b:61:0f:20:03:53:89:18:3d:73:
95:ed:67:7f:19:73:bf:70:80:b4:b0:a2:a1:63:af:73:c7:46:
4b:e7:f0:36:75:45:19:06:46:4b:ed:ca:f2:2d:4f:19:3a:c9:
86:0b:50:7d:ec:43:24:81:e9:f2:7b:d5:04:6d:cf:d3:9e:1e:
83:55:c3:c8:54:e6:e1:dc:b6:c7:c3:f0:1d:b6:8b:34:7e:52:
73:26:a9:0e:e0:69:c0:a1:cc:79:94:d5:4a:0b:14:15:28:5f:
1a:7f:5c:f9:ed:12:6d:49:da:5f:c2:a1:ab:e7:77:58:f0:2a:
27:63:49:79:50:a7:a5:93:a9:2b:f0:a1:10:4d:c3:c5:84:9f:
b4:df:6f:1a:00:98:6a:45:6a:db:73:ee:60:ad:38:7b:10:76:
ba:72:a6:26:b0:c7:c2:ff:44:59:cc:f8:36:6b:05:3e:9e:a4:
56:5b:fa:b4:5c:87:67:eb:66:24:c7:97:54:eb:50:69:1f:5e:
e6:4c:54:ea:4b:99:8c:d6:7a:33:eb:34:a5:f8:1a:92:93:e9:
98:72:90:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F32GvqhktooyeOZQ6RMcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZTI1YmNjNTUzMGI2ZjQ2ZjNkMTFjYjgxMTNmMjE5YTQ2
ZGZkYWIwHhcNMjUwMTMxMTYwMDIwWhcNMjUwMjAxMTYwMDIwWjAzMTEwLwYDVQQD
Eyg5Zjg0OGQ3ZmY2ZTMwNjdkOTMwYjdjYzk3ZWFmMmQ4NjU4MjgzODBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhVJmIG1UjGQFtjvo3p0S/Csjwuw
Hsk0yjJa3R0hZP2a/oryb+RrUD54h/N2FQDNqnyj/uWqQYVboU7tHH+vyb7k7pAx
7N0xbXpfor+kLt34soqQ/hoJWSOTkQW1ddvTjHI5hob3jZ/w9EvrGUumwOoNiiOC
GnCZHvFdcWirvtowLgrrbiCJE/h+OEmssszcE4zcjkX0Q4XIke1SQ/H8IoeexsNT
mwkJyPUs69ldVx+EEkZ/tmjIv71V0ja/yODsDqiVzoyU5fiNS89irKRAm6mW/N3v
ppPRX68RPtB3f5upJvkKP57aaZwBD+vYcoiWUfXQxbdCe+GIxyz/oDMRTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+EjX/24wZ9kwt8yX6vLYZYKDgOMB8GA1UdIwQY
MBaAFLDiW8xVMLb0bz0Ry4ET8hmkbf2rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc09KYnpGVXd0dlJ2UFJITGdSUHlHYVJ0X2FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zODMwYzgtODAyZi00ODQ2LWI2ZTUt
MWFhZGFiYTgwMDcyLzEvc09KYnpGVXd0dlJ2UFJITGdSUHlHYVJ0X2FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8zODMwYzgtODAyZi00ODQ2LWI2ZTUtMWFhZGFiYTgwMDcy
LzEvc09KYnpGVXd0dlJ2UFJITGdSUHlHYVJ0X2FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFR/HxFo8
jr2lWLy/1rs3IDkVfELUrIcsKi/1xFMVZF/EtpiZAEPxRSCIpM1LYQ8gA1OJGD1z
le1nfxlzv3CAtLCioWOvc8dGS+fwNnVFGQZGS+3K8i1PGTrJhgtQfexDJIHp8nvV
BG3P054eg1XDyFTm4dy2x8PwHbaLNH5ScyapDuBpwKHMeZTVSgsUFShfGn9c+e0S
bUnaX8Khq+d3WPAqJ2NJeVCnpZOpK/ChEE3DxYSftN9vGgCYakVq23PuYK04exB2
unKmJrDHwv9EWcz4NmsFPp6kVlv6tFyHZ+tmJMeXVOtQaR9e5kxU6kuZjNZ6M+s0
pfgakpPpmHKQbQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:14 2025 by rpki-client