Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
File: 0z4TEAje9wWkF_DUDRSKNvJaGjk.mft (raw, json)
Hash identifier: ED5qhblWvlqpzZs+znigr4ZsXpHY7LvR4ieghmTq+JY=
Subject key identifier: 39:E8:DA:09:DE:01:56:B7:4C:C4:F6:AE:CC:87:92:65:7F:CC:34:D7
Authority key identifier: D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
Certificate issuer: /CN=d33e131008def705a417f0d40d148a36f25a1a39
Certificate serial: 0194BC3C3A344C9F0B6BFF9B069DE0A201EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 12:00:51 +0000
Manifest this update: Fri 31 Jan 2025 12:00:51 +0000
Manifest next update: Sat 01 Feb 2025 12:00:51 +0000
Files and hashes: 1: 0z4TEAje9wWkF_DUDRSKNvJaGjk.crl (hash: wSrs75PBFChm/1kmPs9EHQMmHqJUSVamfUPAZyskL84=)
2: A2oqQd54ayoxJnfGY2DGuTLyEzs.roa (hash: cZ73AwWXPJWCopyDomwFy40Gv6sNmCFfCzUBeTVXsq0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3a:34:4c:9f:0b:6b:ff:9b:06:9d:e0:a2:01:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d33e131008def705a417f0d40d148a36f25a1a39
Validity
Not Before: Jan 31 12:00:51 2025 GMT
Not After : Feb 1 12:00:51 2025 GMT
Subject: CN=39e8da09de0156b74cc4f6aecc8792657fcc34d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:24:62:38:a9:cd:e7:92:4b:eb:ae:1e:4a:9b:
f2:e8:bb:f4:26:cf:fe:f5:cc:32:9e:78:67:18:64:
f5:7f:f2:ee:85:58:8d:d2:bf:1e:c6:c9:44:9d:86:
32:19:67:02:04:01:33:f1:26:2d:48:d5:fd:20:42:
b3:ec:03:83:b6:dc:e4:79:7f:da:cc:32:2d:91:d4:
e4:cf:ab:ce:2a:79:00:2b:c2:4c:27:77:ef:b6:c5:
18:6a:5c:ca:0c:a7:98:e8:c9:35:e2:45:47:8b:79:
84:0f:2b:e4:7f:7e:f7:66:20:06:81:70:d7:94:3e:
4b:af:63:48:a7:e5:8a:3b:8f:c6:51:ac:12:da:81:
76:e4:b0:6b:15:5d:42:7e:d8:f9:86:c5:11:56:12:
b6:98:dc:59:ab:dc:c0:ea:ba:a3:1a:28:03:bf:8f:
a4:9d:74:79:48:c2:d7:eb:2d:40:04:32:fb:c7:7d:
29:5f:0c:91:58:24:98:cb:1c:a8:cb:3f:18:e5:bd:
70:ea:1e:7c:1c:34:33:bb:34:87:05:19:44:54:c2:
90:26:4d:01:b7:f8:3b:dd:55:f1:f0:e1:01:98:be:
c8:9c:0d:b9:f3:24:28:05:c3:af:b6:77:c3:d2:33:
4f:e0:9a:44:54:e9:9e:7b:32:70:10:ce:79:68:8d:
de:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E8:DA:09:DE:01:56:B7:4C:C4:F6:AE:CC:87:92:65:7F:CC:34:D7
X509v3 Authority Key Identifier:
keyid:D3:3E:13:10:08:DE:F7:05:A4:17:F0:D4:0D:14:8A:36:F2:5A:1A:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0z4TEAje9wWkF_DUDRSKNvJaGjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/546dd9-aa48-445e-be60-0907ad34cb9f/1/0z4TEAje9wWkF_DUDRSKNvJaGjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:c2:fd:79:c9:47:ca:19:b9:a5:b9:79:4f:44:9a:9b:79:f1:
21:5b:12:a9:a8:0e:8f:38:77:92:51:f9:b1:38:b8:62:3d:dc:
66:a1:1f:ac:94:f0:57:9f:d1:73:c8:0b:f6:3e:f9:ae:75:b0:
6e:3f:82:39:68:f9:aa:fc:d3:1b:bd:ae:f9:b8:94:87:dd:4c:
e8:5a:52:43:95:1d:83:8e:c3:d3:c2:29:4b:5b:00:d2:9c:a2:
43:e7:f0:3d:3d:71:2e:d9:35:4e:02:55:36:6a:38:99:98:f6:
94:f3:cd:4b:49:b6:fa:ba:05:4d:45:e2:af:16:12:2b:7a:9b:
6a:08:f7:3b:fc:84:7c:53:2e:b5:b7:40:ee:cc:be:9b:59:00:
69:14:38:9a:75:b1:d7:b4:5c:c3:63:a7:7e:0d:09:d1:c0:41:
f6:29:1a:74:86:2a:09:3a:08:56:cb:2a:a2:5d:7f:d4:62:ae:
63:9c:96:8b:e6:04:f6:7c:14:f7:31:06:62:7b:6e:13:fd:a6:
6d:e3:fe:06:48:b9:4e:cb:7b:ef:fa:bf:dc:74:5a:29:70:c8:
47:22:3d:f3:36:cb:de:51:b3:e2:73:14:f4:d0:a2:e4:0c:ed:
8d:45:af:20:af:5e:f0:98:b6:91:35:ac:5d:49:00:91:0e:8b:
bc:44:8c:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PDo0TJ8La/+bBp3gogHvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzM2UxMzEwMDhkZWY3MDVhNDE3ZjBkNDBkMTQ4YTM2ZjI1
YTFhMzkwHhcNMjUwMTMxMTIwMDUxWhcNMjUwMjAxMTIwMDUxWjAzMTEwLwYDVQQD
EygzOWU4ZGEwOWRlMDE1NmI3NGNjNGY2YWVjYzg3OTI2NTdmY2MzNGQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iRiOKnN55JL664eSpvy6Lv0Js/+
9cwynnhnGGT1f/LuhViN0r8exslEnYYyGWcCBAEz8SYtSNX9IEKz7AODttzkeX/a
zDItkdTkz6vOKnkAK8JMJ3fvtsUYalzKDKeY6Mk14kVHi3mEDyvkf373ZiAGgXDX
lD5Lr2NIp+WKO4/GUawS2oF25LBrFV1Cftj5hsURVhK2mNxZq9zA6rqjGigDv4+k
nXR5SMLX6y1ABDL7x30pXwyRWCSYyxyoyz8Y5b1w6h58HDQzuzSHBRlEVMKQJk0B
t/g73VXx8OEBmL7InA258yQoBcOvtnfD0jNP4JpEVOmeezJwEM55aI3eRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDno2gneAVa3TMT2rsyHkmV/zDTXMB8GA1UdIwQY
MBaAFNM+ExAI3vcFpBfw1A0UijbyWho5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NDZkZDktYWE0OC00NDVlLWJlNjAt
MDkwN2FkMzRjYjlmLzEvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC81NDZkZDktYWE0OC00NDVlLWJlNjAtMDkwN2FkMzRjYjlm
LzEvMHo0VEVBamU5d1drRl9EVURSU0tOdkphR2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmsL9eclH
yhm5pbl5T0Sam3nxIVsSqagOjzh3klH5sTi4Yj3cZqEfrJTwV5/Rc8gL9j75rnWw
bj+COWj5qvzTG72u+biUh91M6FpSQ5Udg47D08IpS1sA0pyiQ+fwPT1xLtk1TgJV
Nmo4mZj2lPPNS0m2+roFTUXirxYSK3qbagj3O/yEfFMutbdA7sy+m1kAaRQ4mnWx
17Rcw2Onfg0J0cBB9ikadIYqCToIVssqol1/1GKuY5yWi+YE9nwU9zEGYntuE/2m
beP+Bki5Tst77/q/3HRaKXDIRyI98zbL3lGz4nMU9NCi5AztjUWvIK9e8Ji2kTWs
XUkAkQ6LvESMUA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:35 2025 by rpki-client