Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
File: do0jVpP2hnxbOBPaHzb-EHvR14I.mft (raw, json)
Hash identifier: bdLvopYO40DbH5AcWZLOmZDA8GzpWLtDYTdPSyKrj9I=
Subject key identifier: 4E:EF:0F:03:AE:73:BD:F7:A0:ED:CB:F5:43:3B:8E:E1:0D:F8:D9:93
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Certificate issuer: /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial: 0194BC0520C69DD56A02A95BBBF049A6A3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
Manifest number: 0B01
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: KH_j-0tZP7kZGa_RGAqb8KjeOKE.roa (hash: nJQFit94GD/cIbI8GNPP+c6lmHYIPdofJMVeQt5hkQ4=)
2: do0jVpP2hnxbOBPaHzb-EHvR14I.crl (hash: 0tZ3oaL4ROa7u2mYhE3uObUOcKaA14KFlZyGNWo5vI8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:20:c6:9d:d5:6a:02:a9:5b:bb:f0:49:a6:a3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=4eef0f03ae73bdf7a0edcbf5433b8ee10df8d993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:66:59:20:06:cd:84:2f:b1:c1:27:87:78:ce:
43:1d:fb:2d:22:ba:85:e4:b6:bf:5a:86:aa:e4:cc:
0b:da:d2:f0:b1:4d:0e:42:63:5e:41:b1:0f:2c:a3:
d7:93:0b:7b:e0:98:da:e7:9d:52:98:0d:9e:07:45:
02:c2:3d:1a:10:44:69:02:a8:63:b0:a7:cb:92:ac:
60:34:9a:b9:8d:cf:29:bb:d0:bd:a9:74:c5:3d:76:
d3:9d:1e:52:ce:f6:19:a4:7e:8c:72:6b:19:b2:d4:
b3:2e:29:4d:46:69:59:05:43:ca:e2:f2:69:53:a4:
cb:7a:ed:c7:aa:98:9f:cc:59:4a:78:c2:e2:5b:8a:
61:d7:b2:0a:77:10:2f:e5:63:b6:37:9a:30:86:02:
65:e2:c3:0c:2d:db:7e:12:d7:a6:5f:22:33:0c:19:
3c:c5:ae:1f:a5:6d:79:1f:f2:de:6d:e3:6c:03:27:
f7:c9:8e:a3:7a:e4:a6:cd:e1:33:08:b2:94:25:94:
c7:a2:75:8d:c5:e8:bb:f8:c8:d9:07:45:49:0c:b5:
d6:f9:a4:43:dc:c3:cf:1d:4e:43:cf:93:70:fd:b0:
78:bb:34:31:2b:d7:5c:e4:51:c0:b2:72:2b:7f:ce:
fb:e0:80:7c:21:cf:b8:b1:85:3c:60:8b:4c:36:81:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:EF:0F:03:AE:73:BD:F7:A0:ED:CB:F5:43:3B:8E:E1:0D:F8:D9:93
X509v3 Authority Key Identifier:
keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:85:08:47:51:df:ac:16:9e:83:fa:72:34:eb:75:b5:7d:99:
76:d6:dd:a3:5f:15:80:c8:ee:bd:12:72:45:1a:4d:7a:4f:75:
99:97:2a:90:7a:89:8a:40:24:5c:4f:c1:b3:01:0f:b6:18:4a:
23:b3:57:05:11:4d:16:85:6d:9d:59:1d:b7:a5:1f:4a:33:7b:
c0:c9:cf:c3:4e:5a:78:e7:d9:1c:7f:27:50:f2:1f:e5:bd:d5:
29:d5:15:8c:d3:b0:f2:1f:8f:4f:97:c9:16:c6:e3:9f:09:de:
cd:0c:14:b4:fa:53:67:fe:5d:d7:58:20:51:f9:f6:04:1b:b6:
de:d3:da:4c:6f:e1:02:51:d1:34:de:63:51:aa:95:c4:26:f2:
49:cd:13:ae:6b:1e:38:e1:f0:62:eb:d9:5b:a2:e8:83:ee:0a:
8e:a7:b3:bb:ee:a8:92:5d:81:48:90:e4:3f:2d:d2:2b:90:cb:
01:0d:99:98:55:8a:cb:98:02:6d:8d:73:e1:88:5e:fc:7c:98:
4a:0e:d5:db:51:c7:f8:09:be:5d:94:35:29:94:8a:28:de:a4:
c1:6d:97:5a:57:a7:0f:06:85:81:ba:13:91:cf:36:91:86:00:
ac:06:e1:d5:fe:fc:7e:60:13:b7:1a:d0:29:89:cb:55:9c:64:
8b:8c:da:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BSDGndVqAqlbu/BJpqP6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2OGQyMzU2OTNmNjg2N2M1YjM4MTNkYTFmMzZmZTEwN2Jk
MWQ3ODIwHhcNMjUwMTMxMTEwMDQwWhcNMjUwMjAxMTEwMDQwWjAzMTEwLwYDVQQD
Eyg0ZWVmMGYwM2FlNzNiZGY3YTBlZGNiZjU0MzNiOGVlMTBkZjhkOTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGZZIAbNhC+xwSeHeM5DHfstIrqF
5La/Woaq5MwL2tLwsU0OQmNeQbEPLKPXkwt74Jja551SmA2eB0UCwj0aEERpAqhj
sKfLkqxgNJq5jc8pu9C9qXTFPXbTnR5SzvYZpH6McmsZstSzLilNRmlZBUPK4vJp
U6TLeu3HqpifzFlKeMLiW4ph17IKdxAv5WO2N5owhgJl4sMMLdt+EtemXyIzDBk8
xa4fpW15H/LebeNsAyf3yY6jeuSmzeEzCLKUJZTHonWNxei7+MjZB0VJDLXW+aRD
3MPPHU5Dz5Nw/bB4uzQxK9dc5FHAsnIrf8774IB8Ic+4sYU8YItMNoGiJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7vDwOuc733oO3L9UM7juEN+NmTMB8GA1UdIwQY
MBaAFHaNI1aT9oZ8WzgT2h82/hB70deCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG8walZwUDJobnhiT0JQYUh6Yi1FSHZSMTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lMTIwZWYtMTQzMC00NWVhLWI3N2Yt
ZTM3NmI5MjQyZWE3LzEvZG8walZwUDJobnhiT0JQYUh6Yi1FSHZSMTRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9lMTIwZWYtMTQzMC00NWVhLWI3N2YtZTM3NmI5MjQyZWE3
LzEvZG8walZwUDJobnhiT0JQYUh6Yi1FSHZSMTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIUIR1Hf
rBaeg/pyNOt1tX2Zdtbdo18VgMjuvRJyRRpNek91mZcqkHqJikAkXE/BswEPthhK
I7NXBRFNFoVtnVkdt6UfSjN7wMnPw05aeOfZHH8nUPIf5b3VKdUVjNOw8h+PT5fJ
FsbjnwnezQwUtPpTZ/5d11ggUfn2BBu23tPaTG/hAlHRNN5jUaqVxCbySc0Trmse
OOHwYuvZW6Log+4Kjqezu+6okl2BSJDkPy3SK5DLAQ2ZmFWKy5gCbY1z4Yhe/HyY
Sg7V21HH+Am+XZQ1KZSKKN6kwW2XWlenDwaFgboTkc82kYYArAbh1f78fmATtxrQ
KYnLVZxki4zaYg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:36 2025 by rpki-client