Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
File: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft (raw, json)
Hash identifier: asjgMfCJZhW20t8axnyxDN1D572Tfpky9FoXMofYNyk=
Subject key identifier: 77:B2:0B:2B:23:F7:03:A1:53:36:62:6A:30:F9:62:CB:98:51:42:BE
Authority key identifier: A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
Certificate issuer: /CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Certificate serial: 0194BD17966989C9148C43C8402C9AA2BA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
Manifest number: 01B9
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: CmAE8B1t5vtl2bRQPtAcN7cxb3s.roa (hash: EUyII4SPPS8NnneMNy5H1gGoK71/rhaPmoIV02VhFv0=)
2: o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl (hash: SjZMV6+vbNLIks5VvIMc1ievxcX4MP1sKUWZCqpOGKU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:96:69:89:c9:14:8c:43:c8:40:2c:9a:a2:ba:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e5999283aaf2e4395079ea3716ddfc2b130f07
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=77b20b2b23f703a15336626a30f962cb985142be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:d6:e3:ae:cf:63:2a:5b:5c:74:42:72:49:ab:
2b:b7:e6:c8:b2:43:58:31:ee:28:38:00:59:e8:96:
bf:1a:4e:dd:8a:ab:0b:d1:2b:6e:4f:27:13:f9:34:
ea:ff:b1:00:ad:49:e3:ce:e5:8a:cc:e4:21:e2:93:
a8:d4:d1:5d:83:85:03:44:56:42:4d:67:5d:46:88:
c3:31:07:17:07:3d:ac:c8:68:99:32:07:5e:8c:24:
65:52:5d:6e:02:53:08:f2:2a:a7:87:78:5f:0a:9c:
26:99:0a:07:e2:f6:8d:c1:56:3f:3e:fc:d4:2c:9a:
32:85:25:4d:32:04:e1:be:f8:92:e6:8b:61:b4:b2:
22:70:6c:4e:40:97:0f:e6:21:79:e0:56:5a:63:ee:
07:49:81:3f:67:ea:09:f5:dd:c4:b8:79:3d:35:db:
b8:a0:df:ec:d4:6f:34:ed:04:26:1e:53:ae:1a:f8:
bc:cc:0b:f9:69:1f:58:c2:77:6f:10:08:ab:fd:a9:
31:c3:a3:1b:6b:7e:8b:c1:a9:8d:da:83:c8:27:85:
01:06:1f:ed:5f:03:11:d1:2c:16:7c:8e:98:a6:a9:
db:0d:ac:d2:af:cf:3e:30:c5:5f:08:56:25:fe:54:
72:76:86:11:90:14:df:73:a9:52:22:11:e5:db:c1:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B2:0B:2B:23:F7:03:A1:53:36:62:6A:30:F9:62:CB:98:51:42:BE
X509v3 Authority Key Identifier:
keyid:A3:E5:99:92:83:AA:F2:E4:39:50:79:EA:37:16:DD:FC:2B:13:0F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/cd9589-3825-43e6-9552-0307486269d7/1/o-WZkoOq8uQ5UHnqNxbd_CsTDwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:3b:23:80:65:f3:3e:3b:29:d4:82:98:bd:96:2d:8d:20:0a:
2b:6c:ba:fc:80:29:e5:15:43:02:4b:db:c0:a0:ad:67:9f:2f:
11:1e:95:ba:57:eb:c3:ba:d2:40:52:4e:c4:dd:36:41:a3:16:
17:a7:f4:e0:0f:10:db:65:20:1b:4b:a7:3a:61:76:88:d2:81:
07:7f:f5:b5:54:cc:da:1f:c0:37:b2:02:dd:3d:a0:2c:39:4a:
cd:a7:85:88:81:b2:1d:2c:fc:2b:2e:8f:7c:73:da:1a:7f:13:
c6:6b:39:e4:16:71:de:df:21:56:10:cc:dc:9e:72:39:5c:43:
78:80:01:e2:25:e9:90:d0:6a:58:8f:ff:75:75:48:fb:3c:21:
ae:1b:34:30:e4:35:cd:d6:28:1e:e3:40:3b:eb:58:c7:e9:28:
45:62:b3:af:c5:1e:af:18:32:a0:8f:2a:41:29:d0:97:f0:08:
d7:6c:7b:02:11:e3:2f:d7:da:9d:06:7d:52:57:bb:fe:2a:5b:
c1:8a:39:2e:d5:a3:a5:e2:27:63:98:0d:50:ed:79:ff:9b:3f:
a5:92:a7:44:dc:1a:c3:85:5f:aa:6c:3e:97:0e:93:18:71:f8:
71:c0:28:cb:ef:9a:37:90:02:19:72:e5:8f:1b:a7:8b:6c:db:
8e:ba:e3:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F5ZpickUjEPIQCyaorpVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZTU5OTkyODNhYWYyZTQzOTUwNzllYTM3MTZkZGZjMmIx
MzBmMDcwHhcNMjUwMTMxMTYwMDI2WhcNMjUwMjAxMTYwMDI2WjAzMTEwLwYDVQQD
Eyg3N2IyMGIyYjIzZjcwM2ExNTMzNjYyNmEzMGY5NjJjYjk4NTE0MmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtbjrs9jKltcdEJySasrt+bIskNY
Me4oOABZ6Ja/Gk7diqsL0StuTycT+TTq/7EArUnjzuWKzOQh4pOo1NFdg4UDRFZC
TWddRojDMQcXBz2syGiZMgdejCRlUl1uAlMI8iqnh3hfCpwmmQoH4vaNwVY/PvzU
LJoyhSVNMgThvviS5othtLIicGxOQJcP5iF54FZaY+4HSYE/Z+oJ9d3EuHk9Ndu4
oN/s1G807QQmHlOuGvi8zAv5aR9YwndvEAir/akxw6Mba36LwamN2oPIJ4UBBh/t
XwMR0SwWfI6YpqnbDazSr88+MMVfCFYl/lRydoYRkBTfc6lSIhHl28ED8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHeyCysj9wOhUzZiajD5YsuYUUK+MB8GA1UdIwQY
MBaAFKPlmZKDqvLkOVB56jcW3fwrEw8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby1XWmtvT3E4dVE1VUhucU54YmRfQ3NURHdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jZDk1ODktMzgyNS00M2U2LTk1NTIt
MDMwNzQ4NjI2OWQ3LzEvby1XWmtvT3E4dVE1VUhucU54YmRfQ3NURHdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9jZDk1ODktMzgyNS00M2U2LTk1NTItMDMwNzQ4NjI2OWQ3
LzEvby1XWmtvT3E4dVE1VUhucU54YmRfQ3NURHdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADDsjgGXz
Pjsp1IKYvZYtjSAKK2y6/IAp5RVDAkvbwKCtZ58vER6Vulfrw7rSQFJOxN02QaMW
F6f04A8Q22UgG0unOmF2iNKBB3/1tVTM2h/AN7IC3T2gLDlKzaeFiIGyHSz8Ky6P
fHPaGn8Txms55BZx3t8hVhDM3J5yOVxDeIAB4iXpkNBqWI//dXVI+zwhrhs0MOQ1
zdYoHuNAO+tYx+koRWKzr8UerxgyoI8qQSnQl/AI12x7AhHjL9fanQZ9Ule7/ipb
wYo5LtWjpeInY5gNUO15/5s/pZKnRNwaw4Vfqmw+lw6TGHH4ccAoy++aN5ACGXLl
jxuni2zbjrrjkw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:43 2025 by rpki-client