Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
File: oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft (raw, json)
Hash identifier: guxr5jVhudbXo4+uVFPHSoX+3MqByY/sXMsLHVn607w=
Subject key identifier: C3:56:FC:90:8E:9F:F1:8C:41:06:C7:81:D8:96:6D:6B:3E:16:9D:6E
Authority key identifier: A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
Certificate issuer: /CN=a10c73530bb684fd569dfc432704675704183429
Certificate serial: 0194BC051AA1B7202629228993A1DF4EFE7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: 80rJ34jhy8u5tGpa5pDpV9ZY_3M.roa (hash: DSVlVBDi+HUemIMmohE8CiZbywAeWePDrOLcKXJaFNc=)
2: Bo2DCZ3LedKQePVNG41vzSLkoCQ.roa (hash: pzfDEO9lxaLpVif2KvuaO7tThrDfxFNMGDYq0ReKCRk=)
3: oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl (hash: IMspQQafC/yX7r+k1JV7+Zr7RtbGRi8Zdpdrn0LBlcE=)
4: tQHm6gRKkUvPz21vjU2IF_-eGGI.roa (hash: 8D5Tob/91gW7C82s8iNYRkfg6Lt+4WCiU7kh/WhsZZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:1a:a1:b7:20:26:29:22:89:93:a1:df:4e:fe:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a10c73530bb684fd569dfc432704675704183429
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=c356fc908e9ff18c4106c781d8966d6b3e169d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3f:01:97:35:bc:73:c3:53:2e:0a:55:a0:8b:
4d:a1:f2:ce:c6:d5:a8:af:dc:36:4e:17:6c:0c:aa:
9a:ce:fe:54:07:97:b1:22:bb:e9:5b:a9:d1:51:60:
0d:74:bc:c1:b5:0e:1a:31:a2:cf:58:37:de:d7:a7:
4a:7b:12:be:5b:19:dd:7e:32:3b:9d:50:fb:4f:e9:
9d:0b:11:d5:b9:b5:90:92:8a:68:81:f5:bd:9d:63:
0e:9d:47:0e:db:6a:6a:4c:8a:d4:88:74:2a:2d:ec:
e0:80:74:0f:bd:61:55:24:c9:f6:f8:e7:73:40:2e:
c1:31:d9:3f:30:fc:71:ee:c6:8e:3a:1e:8b:a1:5d:
ca:97:4a:d0:b3:ee:02:a5:39:5a:62:2f:2b:a2:a6:
41:62:bb:d8:0b:fc:14:27:78:b9:e7:1a:58:ca:fe:
df:a8:d5:75:99:d1:6c:6e:83:29:79:24:d9:0e:c4:
19:11:36:e7:cc:d3:9c:10:52:24:d4:b3:8d:21:f5:
ca:a9:0b:2d:8d:5d:f6:6d:85:d8:17:28:f8:17:25:
e3:6e:57:eb:ef:7e:0a:42:6a:41:56:94:be:bd:25:
9e:a8:4f:ce:ef:29:99:69:5e:50:e4:69:65:30:38:
f7:72:08:ed:30:b9:81:a3:03:eb:c4:cf:47:91:66:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:56:FC:90:8E:9F:F1:8C:41:06:C7:81:D8:96:6D:6B:3E:16:9D:6E
X509v3 Authority Key Identifier:
keyid:A1:0C:73:53:0B:B6:84:FD:56:9D:FC:43:27:04:67:57:04:18:34:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oQxzUwu2hP1WnfxDJwRnVwQYNCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ed17c8-abd4-414f-bc30-7d08291a7662/1/oQxzUwu2hP1WnfxDJwRnVwQYNCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f6:54:29:19:be:31:73:b6:27:b3:7a:c6:d1:1c:e4:af:df:
9e:0a:7c:08:b2:ab:e8:01:bd:60:17:e0:09:41:83:58:f5:aa:
39:e7:d8:9e:d0:51:e0:69:d1:28:8c:36:50:60:52:2a:0f:c1:
5a:c0:ac:d0:3b:c6:1d:d6:b8:4f:01:3e:15:db:2b:ab:fe:c8:
34:a6:4d:b3:6f:3a:58:9f:5e:ff:15:f2:7c:fd:15:94:38:74:
36:b6:d0:f7:6d:48:73:93:e6:10:65:a0:bc:32:44:e2:d3:58:
1f:56:c3:e5:c1:49:69:2b:3e:93:d2:d3:a4:c6:e8:de:90:3d:
51:88:fa:d5:e4:59:4b:fe:18:b3:e4:f9:87:a3:c4:8d:f9:2d:
44:92:87:dc:77:25:2f:4d:db:9a:51:6b:c3:68:d6:9d:64:44:
a2:3d:d7:dd:a1:53:ab:f6:af:e4:5d:e3:a1:78:d2:c8:0d:f1:
8e:f8:9c:b6:aa:39:56:18:3f:20:18:08:8f:88:08:54:a2:9d:
92:dc:0a:38:9f:71:5a:1a:c9:88:e0:d2:b1:6a:5b:55:c8:70:
d3:7a:73:44:80:85:35:54:ad:bd:d4:61:ea:b1:35:98:1c:fb:
99:ae:9a:57:ba:83:42:d9:47:dd:60:9e:0a:75:92:cd:71:f9:
c8:ff:01:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BRqhtyAmKSKJk6HfTv5/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMGM3MzUzMGJiNjg0ZmQ1NjlkZmM0MzI3MDQ2NzU3MDQx
ODM0MjkwHhcNMjUwMTMxMTEwMDM4WhcNMjUwMjAxMTEwMDM4WjAzMTEwLwYDVQQD
EyhjMzU2ZmM5MDhlOWZmMThjNDEwNmM3ODFkODk2NmQ2YjNlMTY5ZDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2z8BlzW8c8NTLgpVoItNofLOxtWo
r9w2ThdsDKqazv5UB5exIrvpW6nRUWANdLzBtQ4aMaLPWDfe16dKexK+WxndfjI7
nVD7T+mdCxHVubWQkopogfW9nWMOnUcO22pqTIrUiHQqLezggHQPvWFVJMn2+Odz
QC7BMdk/MPxx7saOOh6LoV3Kl0rQs+4CpTlaYi8roqZBYrvYC/wUJ3i55xpYyv7f
qNV1mdFsboMpeSTZDsQZETbnzNOcEFIk1LONIfXKqQstjV32bYXYFyj4FyXjblfr
734KQmpBVpS+vSWeqE/O7ymZaV5Q5GllMDj3cgjtMLmBowPrxM9HkWaqJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMNW/JCOn/GMQQbHgdiWbWs+Fp1uMB8GA1UdIwQY
MBaAFKEMc1MLtoT9Vp38QycEZ1cEGDQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAt
N2QwODI5MWE3NjYyLzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lZDE3YzgtYWJkNC00MTRmLWJjMzAtN2QwODI5MWE3NjYy
LzEvb1F4elV3dTJoUDFXbmZ4REp3Um5Wd1FZTkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/ZUKRm+
MXO2J7N6xtEc5K/fngp8CLKr6AG9YBfgCUGDWPWqOefYntBR4GnRKIw2UGBSKg/B
WsCs0DvGHda4TwE+Fdsrq/7INKZNs286WJ9e/xXyfP0VlDh0NrbQ921Ic5PmEGWg
vDJE4tNYH1bD5cFJaSs+k9LTpMbo3pA9UYj61eRZS/4Ys+T5h6PEjfktRJKH3Hcl
L03bmlFrw2jWnWREoj3X3aFTq/av5F3joXjSyA3xjvictqo5Vhg/IBgIj4gIVKKd
ktwKOJ9xWhrJiODSsWpbVchw03pzRICFNVStvdRh6rE1mBz7ma6aV7qDQtlH3WCe
CnWSzXH5yP8BAw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:47:16 2025 by rpki-client