Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
File: 0uuxFmwGDbJd-U8CvS-PnabE3Us.mft (raw, json)
Hash identifier: uAqYwl2QVPzSMfQb6NEr+JC0ywRknQ3v+9mtqB66JYk=
Subject key identifier: AA:EB:C9:8C:53:51:0D:10:61:4F:97:1D:7F:EC:A2:F5:93:40:C0:AE
Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
Certificate issuer: /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Certificate serial: 0194BC3CC77575F16D6D14BD78D2DBD60A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
Manifest number: 0FE5
Signing time: Fri 31 Jan 2025 12:01:27 +0000
Manifest this update: Fri 31 Jan 2025 12:01:27 +0000
Manifest next update: Sat 01 Feb 2025 12:01:27 +0000
Files and hashes: 1: 0uuxFmwGDbJd-U8CvS-PnabE3Us.crl (hash: S81mnJ/jXXAlujdT7uHlgKDhpegAA3JJgeOBojFLVd0=)
2: LdFx4O_axkyLwKBn8hayXhVuuTY.roa (hash: +qJwhkRCeLKYqE6tG+1RNrXKKNfgmZMWphTwQtobs60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:c7:75:75:f1:6d:6d:14:bd:78:d2:db:d6:0a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Validity
Not Before: Jan 31 12:01:27 2025 GMT
Not After : Feb 1 12:01:27 2025 GMT
Subject: CN=aaebc98c53510d10614f971d7feca2f59340c0ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:d9:8e:38:42:4b:d6:4a:55:c6:58:65:c5:
2e:2f:94:c0:a4:0b:7b:0d:06:1c:84:2c:d4:1e:c3:
95:44:f0:61:a4:b4:76:9c:13:39:fb:54:3e:f0:dd:
46:46:9c:fe:9c:d7:9b:25:15:9f:e6:73:69:f6:38:
bb:8d:65:7b:8a:8d:d2:69:08:6a:53:55:f8:cc:16:
ff:c2:d4:00:88:36:04:1b:4d:bd:93:f7:54:b0:a3:
f9:74:0a:87:b9:66:48:fd:c9:15:b5:9d:ab:ec:76:
30:fc:33:68:0c:16:ba:0d:85:de:af:28:39:1a:e0:
b6:03:40:6c:b2:34:53:f8:7a:1a:a1:22:13:38:73:
b2:ea:2e:40:a6:10:ae:8e:fd:b8:84:4f:93:7e:2b:
87:f4:45:43:52:81:86:12:77:1b:5b:94:c6:ad:57:
8d:07:7b:3f:72:23:3e:75:55:ca:67:15:9d:94:4e:
cb:1a:44:59:29:51:02:30:54:25:3b:ef:b9:ee:7c:
10:e4:d9:80:af:cd:b0:d1:3f:c0:cb:b5:54:bf:dd:
d9:c3:15:91:78:c3:4f:7a:a5:69:14:fb:f3:f4:ae:
ef:bd:d3:60:75:63:3a:97:6a:8b:87:8e:0b:3e:c1:
a7:de:df:b0:d3:f4:99:f5:a3:c9:23:35:39:7e:c6:
95:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EB:C9:8C:53:51:0D:10:61:4F:97:1D:7F:EC:A2:F5:93:40:C0:AE
X509v3 Authority Key Identifier:
keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:6f:2b:0e:91:11:d2:21:a5:00:29:3a:d2:eb:93:25:35:f9:
c7:1c:5c:8e:bb:c5:51:ba:5f:98:6c:2b:1f:45:e3:0c:40:0f:
52:89:87:4e:b5:cf:9e:65:79:25:2f:56:86:f7:45:55:92:41:
c3:8c:17:1b:55:a3:0f:93:4b:14:1b:71:94:6b:bf:d0:43:d8:
6f:d7:18:3a:92:4a:07:ce:0a:16:bc:cd:70:ca:f3:36:1e:b7:
df:17:ea:3f:ac:a3:e0:a0:38:ad:e2:13:13:0a:9f:ea:55:54:
3a:5d:59:ac:27:eb:da:79:02:86:d3:f3:39:7d:6a:76:5b:9c:
7b:88:cc:0d:b3:2d:44:b9:9b:3d:90:3a:9b:09:91:c8:22:46:
27:44:18:2d:a9:0b:e1:ea:ac:80:2c:e5:1e:97:cc:3e:b2:31:
c1:3f:31:00:b5:9f:fc:a3:75:f5:86:7d:52:cd:d0:c6:3b:4e:
b4:40:33:a6:cf:47:0d:a7:a4:ee:90:48:c0:3f:51:93:9b:87:
1d:3b:6e:fe:7e:ef:c1:be:87:00:bd:38:21:66:78:a1:e3:92:
4a:fd:ec:87:16:c3:49:d0:f2:37:48:74:24:93:12:47:c9:d7:
24:f3:89:4f:be:d2:bc:89:f8:19:ef:cc:8d:83:7f:76:29:12:
4c:bf:5b:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PMd1dfFtbRS9eNLb1gqVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWJiMTE2NmMwNjBkYjI1ZGY5NGYwMmJkMmY4ZjlkYTZj
NGRkNGIwHhcNMjUwMTMxMTIwMTI3WhcNMjUwMjAxMTIwMTI3WjAzMTEwLwYDVQQD
EyhhYWViYzk4YzUzNTEwZDEwNjE0Zjk3MWQ3ZmVjYTJmNTkzNDBjMGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4nZjjhCS9ZKVcZYZcUuL5TApAt7
DQYchCzUHsOVRPBhpLR2nBM5+1Q+8N1GRpz+nNebJRWf5nNp9ji7jWV7io3SaQhq
U1X4zBb/wtQAiDYEG029k/dUsKP5dAqHuWZI/ckVtZ2r7HYw/DNoDBa6DYXeryg5
GuC2A0BssjRT+HoaoSITOHOy6i5AphCujv24hE+TfiuH9EVDUoGGEncbW5TGrVeN
B3s/ciM+dVXKZxWdlE7LGkRZKVECMFQlO++57nwQ5NmAr82w0T/Ay7VUv93ZwxWR
eMNPeqVpFPvz9K7vvdNgdWM6l2qLh44LPsGn3t+w0/SZ9aPJIzU5fsaVyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKrryYxTUQ0QYU+XHX/sovWTQMCuMB8GA1UdIwQY
MBaAFNLrsRZsBg2yXflPAr0vj52mxN1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mYmQzODItMTBkMC00Njg0LTg4MzYt
ZWVkMWQwOTY3MDc4LzEvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mYmQzODItMTBkMC00Njg0LTg4MzYtZWVkMWQwOTY3MDc4
LzEvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK28rDpER
0iGlACk60uuTJTX5xxxcjrvFUbpfmGwrH0XjDEAPUomHTrXPnmV5JS9WhvdFVZJB
w4wXG1WjD5NLFBtxlGu/0EPYb9cYOpJKB84KFrzNcMrzNh633xfqP6yj4KA4reIT
Ewqf6lVUOl1ZrCfr2nkChtPzOX1qdluce4jMDbMtRLmbPZA6mwmRyCJGJ0QYLakL
4eqsgCzlHpfMPrIxwT8xALWf/KN19YZ9Us3QxjtOtEAzps9HDaek7pBIwD9Rk5uH
HTtu/n7vwb6HAL04IWZ4oeOSSv3shxbDSdDyN0h0JJMSR8nXJPOJT77SvIn4Ge/M
jYN/dikSTL9bxA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:25 2025 by rpki-client