Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File: 0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier: uphhFTbtlW0pRiX7Thj8sHI8XKAzjuzfZ/nug1cH57E=
Subject key identifier: 5B:FE:49:E2:FA:D6:45:57:7E:C7:2B:3A:A6:C5:91:58:C6:2D:5E:17
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer: /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial: 0194BCE09AE4E285F50C08A9FA96B58E0881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number: 0F16
Signing time: Fri 31 Jan 2025 15:00:23 +0000
Manifest this update: Fri 31 Jan 2025 15:00:23 +0000
Manifest next update: Sat 01 Feb 2025 15:00:23 +0000
Files and hashes: 1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: tvs8Aiaw0S+eLUBVhl4864mUdy9DJY1YFzl6TON1R8o=)
2: dylc3WZzrjgV2VB-T70ps5y7_v8.roa (hash: CjiSp/7ghqmIWPlGrqN52h+3zV23QhuVF2kvnW7CFVo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:9a:e4:e2:85:f5:0c:08:a9:fa:96:b5:8e:08:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Validity
Not Before: Jan 31 15:00:23 2025 GMT
Not After : Feb 1 15:00:23 2025 GMT
Subject: CN=5bfe49e2fad645577ec72b3aa6c59158c62d5e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:81:08:d1:25:d5:a3:cc:5d:41:3b:ce:1a:d4:
ef:64:b6:b1:40:78:c7:cc:f3:80:b6:98:45:7e:d5:
87:f6:4f:9f:71:d0:b5:9e:af:7c:83:71:d4:a3:73:
c6:3e:7a:fa:a8:7a:2e:e9:4a:04:b2:b1:45:59:64:
ce:62:35:eb:48:dc:1f:67:e7:b2:df:93:35:db:76:
a8:3f:63:31:d6:50:e7:7e:d8:6b:40:82:cf:30:6b:
f9:41:05:fa:12:24:18:5a:16:33:57:66:ca:d9:2b:
03:e2:10:4d:91:cc:e7:75:34:65:52:68:05:8a:d8:
56:95:89:77:b4:d3:f4:ee:6b:ca:f1:e4:46:84:2c:
50:7a:6c:56:50:84:ec:01:b2:0b:fe:d0:c6:77:28:
56:e4:ac:85:c9:d9:a0:a7:16:b3:a3:fc:ca:e3:42:
8e:27:fc:5c:71:51:13:b6:eb:28:bb:98:4a:a0:da:
f3:aa:79:63:02:2e:a4:90:9d:e1:78:36:bc:07:ad:
13:b3:1e:aa:a7:25:1b:a2:40:9d:3f:1d:17:4d:8c:
11:94:c9:e4:5a:0c:f2:9e:d4:b5:43:92:11:a6:15:
e7:f0:a8:9e:e0:9a:0e:f9:22:a2:f8:8a:c3:25:57:
91:93:73:c5:77:6d:d3:53:97:77:66:22:6d:80:95:
c3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FE:49:E2:FA:D6:45:57:7E:C7:2B:3A:A6:C5:91:58:C6:2D:5E:17
X509v3 Authority Key Identifier:
keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:86:ec:5b:9e:6b:53:39:1b:4e:6d:3e:0a:ca:0e:c7:dc:7b:
9f:ed:45:9e:16:30:eb:e4:1e:3d:c6:a1:e8:91:7b:c9:57:38:
5f:15:3f:40:71:91:9d:85:6e:6d:01:69:8f:82:c5:f8:67:72:
bd:b3:33:6d:ba:2a:1d:e5:e3:cf:d1:2a:39:9a:a0:fe:3f:78:
3a:7f:ba:86:a6:e7:6d:ec:79:fc:96:33:a2:72:4a:80:05:a3:
85:54:80:54:01:0a:39:37:19:a0:e8:23:72:3b:72:5a:f2:34:
65:05:ba:9f:0e:a2:7c:9d:28:fa:38:48:28:c8:00:ea:1c:3e:
d8:33:2e:dd:cf:6e:2b:21:94:8c:10:db:76:c9:ab:ef:31:96:
19:1e:f1:d1:b4:c9:d3:9d:29:e9:e9:03:bd:dc:2d:3c:cf:6e:
7c:b6:44:0c:ec:a7:c4:11:a6:ad:79:f4:00:96:f6:e6:23:1f:
d1:09:60:d3:1e:6c:f5:5d:6d:91:c7:29:a6:48:18:a8:86:49:
95:b3:ef:5e:ab:49:22:fd:03:b1:e1:33:01:ec:1f:22:c9:6e:
39:d7:f3:ef:40:a7:00:61:58:06:47:b3:68:b0:17:3b:a1:f4:
d9:62:4c:d4:53:c1:18:7d:e0:0e:f1:bc:d2:97:f8:c6:85:93:
9d:dd:24:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84Jrk4oX1DAip+pa1jgiBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjRmYTgwNzU4NzUzYjI0M2EyMTY1ZWRkZWE3NWRiZWVl
ODI2YzQwHhcNMjUwMTMxMTUwMDIzWhcNMjUwMjAxMTUwMDIzWjAzMTEwLwYDVQQD
Eyg1YmZlNDllMmZhZDY0NTU3N2VjNzJiM2FhNmM1OTE1OGM2MmQ1ZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoEI0SXVo8xdQTvOGtTvZLaxQHjH
zPOAtphFftWH9k+fcdC1nq98g3HUo3PGPnr6qHou6UoEsrFFWWTOYjXrSNwfZ+ey
35M123aoP2Mx1lDnfthrQILPMGv5QQX6EiQYWhYzV2bK2SsD4hBNkczndTRlUmgF
ithWlYl3tNP07mvK8eRGhCxQemxWUITsAbIL/tDGdyhW5KyFydmgpxazo/zK40KO
J/xccVETtusou5hKoNrzqnljAi6kkJ3heDa8B60Tsx6qpyUbokCdPx0XTYwRlMnk
WgzyntS1Q5IRphXn8Kie4JoO+SKi+IrDJVeRk3PFd23TU5d3ZiJtgJXDIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFv+SeL61kVXfscrOqbFkVjGLV4XMB8GA1UdIwQY
MBaAFND0+oB1h1OyQ6IWXt3qddvu6CbEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMt
NzJhMWYzNzcxOWJiLzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9jYTVjMTktZTQ5Ni00OWU4LThiOTMtNzJhMWYzNzcxOWJi
LzEvMFBUNmdIV0hVN0pEb2haZTNlcDEyLTdvSnNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv4bsW55r
UzkbTm0+CsoOx9x7n+1FnhYw6+QePcah6JF7yVc4XxU/QHGRnYVubQFpj4LF+Gdy
vbMzbboqHeXjz9EqOZqg/j94On+6hqbnbex5/JYzonJKgAWjhVSAVAEKOTcZoOgj
cjtyWvI0ZQW6nw6ifJ0o+jhIKMgA6hw+2DMu3c9uKyGUjBDbdsmr7zGWGR7x0bTJ
050p6ekDvdwtPM9ufLZEDOynxBGmrXn0AJb25iMf0Qlg0x5s9V1tkccppkgYqIZJ
lbPvXqtJIv0DseEzAewfIsluOdfz70CnAGFYBkezaLAXO6H02WJM1FPBGH3gDvG8
0pf4xoWTnd0k5g==
-----END CERTIFICATE-----
Generated at Mon Apr 28 09:17:44 2025 by rpki-client