Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
File: lOb0czAsajyJ33uJMsVryEHLX6w.mft (raw, json)
Hash identifier: FUHLLZJ4+aKBnt2xYpXwmJABL5B853/VsSpex0jihes=
Subject key identifier: C8:88:C3:2C:5B:B5:3C:53:FD:82:4C:EB:34:66:EE:82:55:56:B8:80
Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Certificate issuer: /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Certificate serial: 0194BC04ED230E2DF34580E43F60F47A458D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
Manifest number: 0797
Signing time: Fri 31 Jan 2025 11:00:26 +0000
Manifest this update: Fri 31 Jan 2025 11:00:26 +0000
Manifest next update: Sat 01 Feb 2025 11:00:26 +0000
Files and hashes: 1: TocS328LtH4EypX0JXxV-WS9TT0.roa (hash: bEdaCkmgCoynn5OTjJyCYh6lNgGRH20s+aBGflckEag=)
2: lOb0czAsajyJ33uJMsVryEHLX6w.crl (hash: trBaK5w3YqGS/hzS9SCqgkEdpqJDU6kPOflroXLDlcQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ed:23:0e:2d:f3:45:80:e4:3f:60:f4:7a:45:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Validity
Not Before: Jan 31 11:00:26 2025 GMT
Not After : Feb 1 11:00:26 2025 GMT
Subject: CN=c888c32c5bb53c53fd824ceb3466ee825556b880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:08:f5:60:d8:ff:fa:e7:6d:2f:a2:a1:9a:05:
a9:32:9f:d2:97:19:a7:93:51:18:15:42:a2:c5:12:
b3:7c:74:b6:5c:23:35:92:0a:dd:82:20:d2:07:e6:
c2:e2:a7:e6:a6:5d:cd:b9:8e:d4:95:05:0a:be:62:
9e:14:72:93:ce:c4:a0:b9:3b:b4:56:12:6f:de:ff:
4b:9c:3a:91:b2:78:24:ae:a1:48:ee:96:c0:9e:04:
2a:8c:f7:86:16:76:5b:9c:3a:f2:41:c7:51:29:88:
a3:a4:ee:31:87:0f:24:ab:15:d3:67:2d:c0:e9:76:
48:a9:44:95:ef:09:04:66:15:c7:ba:83:fa:29:4e:
0c:41:47:eb:bc:06:9a:19:59:79:fa:ff:38:b3:f2:
d4:ef:fd:df:4d:74:ab:af:4d:91:55:08:7b:a8:4b:
f3:0a:e0:d4:15:12:a8:c9:ce:1b:b3:fd:1d:28:f2:
95:6d:36:86:ea:05:a1:df:32:33:32:5e:b3:40:37:
c1:58:46:bf:00:81:64:52:91:2a:37:29:5f:03:cb:
c4:8b:5c:12:a1:c6:e5:b1:4f:5b:a3:03:0d:76:db:
9d:60:e8:a7:06:1b:38:13:4c:60:1c:ab:cc:3e:12:
b9:66:f8:fc:de:73:92:8e:7c:2f:1a:0e:b2:e0:22:
c3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:88:C3:2C:5B:B5:3C:53:FD:82:4C:EB:34:66:EE:82:55:56:B8:80
X509v3 Authority Key Identifier:
keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2f:09:d6:37:53:5d:80:56:6b:3e:81:59:5b:34:53:50:b0:
76:18:8d:fe:12:15:d3:21:44:39:2a:ac:c0:e4:51:d1:c0:90:
92:9b:99:77:93:d1:40:08:e8:ae:9b:2d:34:2e:76:a3:f7:13:
93:03:65:7b:90:0a:2f:17:9d:06:89:3e:8a:6f:d9:53:48:ee:
a6:b2:6b:0a:96:11:78:2d:63:5d:fd:e7:e2:d0:24:60:60:51:
7e:77:95:00:1d:9b:9e:f5:0f:8e:a9:62:00:2f:60:1a:30:dd:
45:04:25:c4:55:79:c4:34:c0:2e:05:38:15:77:86:5d:6d:06:
af:55:97:5c:08:48:f1:8f:ed:07:c8:89:b1:43:47:52:7b:5a:
bf:b8:bf:41:88:45:ec:10:69:58:f6:87:17:d9:cc:72:e3:04:
3f:18:92:b7:9f:79:e1:9c:d3:4f:3e:79:4e:64:85:71:a8:09:
7e:ef:3f:66:f2:ac:3c:64:f8:58:a9:c9:1c:5e:df:f3:00:53:
c0:11:77:55:4a:47:b8:05:5b:9e:a2:e4:1c:79:20:c4:40:c6:
f3:f6:da:c0:01:28:f3:95:5e:e7:0b:67:c4:e0:aa:d5:4b:de:
17:e3:0d:e9:7e:ad:9f:ec:ae:94:d0:7b:cb:72:8d:2a:b7:c2:
5a:28:88:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BO0jDi3zRYDkP2D0ekWNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZTZmNDczMzAyYzZhM2M4OWRmN2I4OTMyYzU2YmM4NDFj
YjVmYWMwHhcNMjUwMTMxMTEwMDI2WhcNMjUwMjAxMTEwMDI2WjAzMTEwLwYDVQQD
EyhjODg4YzMyYzViYjUzYzUzZmQ4MjRjZWIzNDY2ZWU4MjU1NTZiODgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigj1YNj/+udtL6KhmgWpMp/Slxmn
k1EYFUKixRKzfHS2XCM1kgrdgiDSB+bC4qfmpl3NuY7UlQUKvmKeFHKTzsSguTu0
VhJv3v9LnDqRsngkrqFI7pbAngQqjPeGFnZbnDryQcdRKYijpO4xhw8kqxXTZy3A
6XZIqUSV7wkEZhXHuoP6KU4MQUfrvAaaGVl5+v84s/LU7/3fTXSrr02RVQh7qEvz
CuDUFRKoyc4bs/0dKPKVbTaG6gWh3zIzMl6zQDfBWEa/AIFkUpEqNylfA8vEi1wS
ocblsU9bowMNdtudYOinBhs4E0xgHKvMPhK5Zvj83nOSjnwvGg6y4CLDtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMiIwyxbtTxT/YJM6zRm7oJVVriAMB8GA1UdIwQY
MBaAFJTm9HMwLGo8id97iTLFa8hBy1+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE9iMGN6QXNhanlKMzN1Sk1zVnJ5RUhMWDZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wN2U5NDctYTRkYy00OGRmLTkyYzAt
OWExZjBkZGI5ZTcwLzEvbE9iMGN6QXNhanlKMzN1Sk1zVnJ5RUhMWDZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi8wN2U5NDctYTRkYy00OGRmLTkyYzAtOWExZjBkZGI5ZTcw
LzEvbE9iMGN6QXNhanlKMzN1Sk1zVnJ5RUhMWDZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgS8J1jdT
XYBWaz6BWVs0U1CwdhiN/hIV0yFEOSqswORR0cCQkpuZd5PRQAjorpstNC52o/cT
kwNle5AKLxedBok+im/ZU0juprJrCpYReC1jXf3n4tAkYGBRfneVAB2bnvUPjqli
AC9gGjDdRQQlxFV5xDTALgU4FXeGXW0Gr1WXXAhI8Y/tB8iJsUNHUntav7i/QYhF
7BBpWPaHF9nMcuMEPxiSt5954ZzTTz55TmSFcagJfu8/ZvKsPGT4WKnJHF7f8wBT
wBF3VUpHuAVbnqLkHHkgxEDG8/bawAEo85Ve5wtnxOCq1UveF+MN6X6tn+yulNB7
y3KNKrfCWiiIQw==
-----END CERTIFICATE-----
Generated at Tue Apr 29 16:35:27 2025 by rpki-client