Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
File: ova8jxY69JwD2a1p5xa0LFuW7nk.mft (raw, json)
Hash identifier: K9YeDsOEFLXNQQkfsUGcO3VduaXGMglUoo2u2A3hm20=
Subject key identifier: 51:62:93:03:0E:C0:37:28:3F:38:4A:70:63:BF:0C:0E:EB:73:47:42
Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Certificate serial: 0194BC3C3570F9CF58195C745BAF41C6E9A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
Manifest number: 1021
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: 7Bmeidkfn6YfbmewKgjKoXuxpPk.roa (hash: WWQfoyMgy0p6lbikPKbuJ/C2nkuTZ1Iwu382Tvm165I=)
2: ivvK2rH3Da0XFb0CtPI6-c8j9iw.roa (hash: y+fDNhHN305IuCvhhyl0+Ku7rbokWctafP7Dlneuvb8=)
3: ova8jxY69JwD2a1p5xa0LFuW7nk.crl (hash: 1Dzvuesv6TwxJ5czDGUu656niInCiwCHm47L8/Uwkss=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:35:70:f9:cf:58:19:5c:74:5b:af:41:c6:e9:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=516293030ec037283f384a7063bf0c0eeb734742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e6:b3:7d:ff:ce:1b:2f:30:d0:6a:97:60:a3:
de:8f:08:df:b7:d0:6c:81:9f:46:f1:36:16:cf:d8:
65:f2:0f:67:27:1a:d1:fd:2d:66:9f:16:6c:cc:2b:
59:ac:b3:e4:7f:8e:9b:fa:00:62:6a:70:df:11:b7:
82:15:f9:59:e6:d2:2d:ea:b9:f0:7c:08:54:bb:51:
6b:42:3d:50:67:4c:93:67:53:a7:18:0f:39:56:b0:
1e:3c:af:a8:0e:cd:e7:14:a3:aa:97:e9:b2:78:92:
92:9a:9d:ef:fb:c7:af:04:3f:bb:cf:08:c7:ad:83:
e2:12:74:93:a9:ae:eb:13:33:80:8b:3d:b8:af:cb:
1f:73:75:60:4d:d7:35:7e:72:e2:d5:85:be:f6:c9:
73:5c:5b:21:c8:98:ad:55:c5:a4:ce:6a:28:2b:95:
04:b4:e8:87:62:7e:7d:ca:1a:e1:7a:06:32:2f:f9:
de:be:f8:7b:7d:83:05:fa:a7:f5:be:73:11:c1:83:
53:9c:fa:af:ae:df:3b:57:d9:ca:47:d2:a5:29:97:
31:f1:b7:5f:66:9b:d1:dd:33:4e:48:47:13:f0:99:
7d:aa:36:7e:2a:33:5e:8b:00:a6:8d:a9:50:56:e1:
3c:8d:1e:f8:ac:97:6e:e1:56:37:05:f6:53:bd:e8:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:62:93:03:0E:C0:37:28:3F:38:4A:70:63:BF:0C:0E:EB:73:47:42
X509v3 Authority Key Identifier:
keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cc:53:a1:9f:b8:c5:6e:07:2e:ab:72:a8:69:38:17:d7:c1:
e5:7c:89:46:8b:f8:d1:0b:87:b8:a4:02:b8:d6:cb:3b:0b:48:
8d:2a:a9:c7:c8:a8:fe:90:17:7c:69:f1:44:95:73:59:60:fa:
75:dd:b5:ea:42:04:fe:25:e9:af:1e:02:a8:74:5c:18:79:13:
a3:a2:ca:0e:99:9a:28:38:74:0c:6b:3e:b3:4a:56:a8:8b:fb:
81:3b:c7:b9:25:91:0e:a0:63:29:56:62:a3:56:b0:6f:db:6d:
3f:b6:1d:43:c0:31:16:e3:06:b6:65:76:5b:07:15:06:8e:87:
0d:53:fa:aa:d5:0d:b3:a4:9a:6c:da:9e:3a:fb:f6:c0:24:ba:
24:4d:f2:da:7c:ea:7d:2f:04:14:5f:b9:bc:16:57:ff:40:dd:
f9:56:0c:f3:05:01:32:54:db:6a:a5:88:d6:7d:57:22:ff:69:
6e:22:91:66:68:84:46:3c:86:bb:60:cd:2a:28:17:c9:6f:ca:
2e:41:49:9d:5c:a0:66:25:06:cf:3b:0a:ae:d8:7a:44:32:e5:
e2:7b:14:45:95:c6:33:d5:6e:9d:be:09:d9:3e:b9:f0:d6:46:
f2:1c:40:39:c1:75:29:9e:14:f9:3e:55:7f:24:06:09:40:d3:
20:e3:5c:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDVw+c9YGVx0W69BxumhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZjZiYzhmMTYzYWY0OWMwM2Q5YWQ2OWU3MTZiNDJjNWI5
NmVlNzkwHhcNMjUwMTMxMTIwMDQ5WhcNMjUwMjAxMTIwMDQ5WjAzMTEwLwYDVQQD
Eyg1MTYyOTMwMzBlYzAzNzI4M2YzODRhNzA2M2JmMGMwZWViNzM0NzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOazff/OGy8w0GqXYKPejwjft9Bs
gZ9G8TYWz9hl8g9nJxrR/S1mnxZszCtZrLPkf46b+gBianDfEbeCFflZ5tIt6rnw
fAhUu1FrQj1QZ0yTZ1OnGA85VrAePK+oDs3nFKOql+myeJKSmp3v+8evBD+7zwjH
rYPiEnSTqa7rEzOAiz24r8sfc3VgTdc1fnLi1YW+9slzXFshyJitVcWkzmooK5UE
tOiHYn59yhrhegYyL/nevvh7fYMF+qf1vnMRwYNTnPqvrt87V9nKR9KlKZcx8bdf
ZpvR3TNOSEcT8Jl9qjZ+KjNeiwCmjalQVuE8jR74rJdu4VY3BfZTvejoKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFikwMOwDcoPzhKcGO/DA7rc0dCMB8GA1UdIwQY
MBaAFKL2vI8WOvScA9mtaecWtCxblu55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUt
NTA2YmI2YzY3OWNlLzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUtNTA2YmI2YzY3OWNl
LzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMxToZ+4
xW4HLqtyqGk4F9fB5XyJRov40QuHuKQCuNbLOwtIjSqpx8io/pAXfGnxRJVzWWD6
dd216kIE/iXprx4CqHRcGHkTo6LKDpmaKDh0DGs+s0pWqIv7gTvHuSWRDqBjKVZi
o1awb9ttP7YdQ8AxFuMGtmV2WwcVBo6HDVP6qtUNs6SabNqeOvv2wCS6JE3y2nzq
fS8EFF+5vBZX/0Dd+VYM8wUBMlTbaqWI1n1XIv9pbiKRZmiERjyGu2DNKigXyW/K
LkFJnVygZiUGzzsKrth6RDLl4nsURZXGM9Vunb4J2T658NZG8hxAOcF1KZ4U+T5V
fyQGCUDTIONciQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 03:17:59 2025 by rpki-client