Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
File: O5feF1Es-ovrw9-AsntHYk70FpE.mft (raw, json)
Hash identifier: ddmUZZS/iQwHYnPPfsI7b8ncwi/22FZmjLkpN3DqRXY=
Subject key identifier: DC:A8:55:D3:B5:38:AE:5D:08:EC:5F:55:9A:7B:E5:43:B1:B0:2D:A8
Authority key identifier: 3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
Certificate issuer: /CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Certificate serial: 0194BC3C44C368420DCFD80BD3F8E3AAF7B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
Manifest number: 08AB
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: 3qIWzYrkrCPP_OpSVUhC7_G6DpI.roa (hash: yygvsOn7SmxlaOZM9baJ/n8umdT0wN2hx2GnupmdeSk=)
2: O5feF1Es-ovrw9-AsntHYk70FpE.crl (hash: x8L5f14K0u0b5IUZZa3Qd1kMp9tK8TgN1Teb8uSuaEQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:44:c3:68:42:0d:cf:d8:0b:d3:f8:e3:aa:f7:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b97de17512cfa8bebc3df80b27b47624ef41691
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=dca855d3b538ae5d08ec5f559a7be543b1b02da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:9a:39:94:ad:2f:53:e2:59:79:39:da:3a:
a3:be:ed:2d:47:64:0e:b3:f8:21:4d:ea:91:d2:3c:
85:ff:11:85:6f:86:02:b4:f0:c4:16:55:85:74:26:
58:ed:7a:37:5a:ed:dc:38:85:b2:62:4a:7f:aa:45:
a1:15:c8:46:b8:12:f0:f2:52:d8:f8:cb:f7:7f:e5:
a8:c1:3b:10:26:37:eb:9f:a8:51:7b:73:2a:61:c5:
24:0a:25:ca:52:8d:ee:9d:5e:27:4d:27:da:22:d0:
74:4c:c4:a7:7e:bd:da:31:1e:5a:ba:71:7d:d1:92:
0e:a7:0c:3a:17:46:14:f1:4e:7a:5f:25:25:79:d5:
5e:d6:73:aa:df:7d:8f:ef:a6:d4:db:6b:66:7d:ff:
1b:c9:22:13:67:65:40:da:8c:94:3b:40:fc:6d:e9:
0d:a5:51:e9:a4:c6:cb:a6:e6:db:28:37:24:fa:23:
6c:25:78:2e:95:ba:93:1d:8d:4a:f7:ee:56:d0:64:
1f:ae:2c:eb:da:f8:0d:00:ec:f0:53:cd:45:a2:65:
80:1d:32:75:5a:c2:c8:9a:8e:a6:6c:81:74:c7:0b:
34:6b:28:06:b2:4c:7c:19:e5:3a:2b:ee:be:71:9b:
14:58:d0:79:00:f4:24:63:6b:d1:7b:c0:ae:4f:be:
6b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A8:55:D3:B5:38:AE:5D:08:EC:5F:55:9A:7B:E5:43:B1:B0:2D:A8
X509v3 Authority Key Identifier:
keyid:3B:97:DE:17:51:2C:FA:8B:EB:C3:DF:80:B2:7B:47:62:4E:F4:16:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5feF1Es-ovrw9-AsntHYk70FpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8a7da4-ba19-4b29-87e0-9155132a179a/1/O5feF1Es-ovrw9-AsntHYk70FpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:22:02:c2:6d:1f:59:ab:bb:ca:ec:ea:17:b8:ad:82:6c:13:
22:0d:88:f2:6d:e8:9f:0c:a9:af:12:c1:28:30:4a:9b:2d:ef:
15:7f:26:72:11:8a:94:e0:fa:f7:c9:24:8d:c3:b5:0f:86:3c:
e2:0a:cc:82:6a:78:54:0f:43:a2:43:10:50:7c:eb:44:89:27:
a8:63:95:5e:75:30:2a:45:a6:79:70:6d:75:ca:db:f3:b9:c6:
15:c2:cf:ca:65:76:be:7e:68:0e:76:d3:97:06:a9:89:63:17:
81:df:81:52:6a:a9:df:dc:46:6e:07:4b:d6:4a:be:0f:0d:43:
6f:e1:1e:8a:a0:00:20:e3:a5:ed:0f:3c:1f:00:ab:19:b9:38:
bc:44:41:dd:f0:ae:d5:83:ba:8b:88:85:7c:18:c2:a9:69:b0:
01:0c:cd:fa:bf:f6:00:5b:52:d9:55:ee:ca:b2:6a:bc:21:01:
65:a7:1a:85:2f:fc:9e:84:80:45:4e:44:9f:9c:e2:f4:63:66:
b8:3e:2d:9e:ab:3a:7a:bb:b6:52:da:c5:49:48:3a:13:73:e9:
23:ab:28:44:8a:6b:f3:5d:ca:fe:7f:05:08:e1:00:5f:38:52:
98:e8:66:cb:52:f7:93:53:6b:f1:88:62:a5:ea:ce:2b:87:47:
41:a4:79:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PETDaEINz9gL0/jjqvezMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiOTdkZTE3NTEyY2ZhOGJlYmMzZGY4MGIyN2I0NzYyNGVm
NDE2OTEwHhcNMjUwMTMxMTIwMDUzWhcNMjUwMjAxMTIwMDUzWjAzMTEwLwYDVQQD
EyhkY2E4NTVkM2I1MzhhZTVkMDhlYzVmNTU5YTdiZTU0M2IxYjAyZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyciaOZStL1PiWXk52jqjvu0tR2QO
s/ghTeqR0jyF/xGFb4YCtPDEFlWFdCZY7Xo3Wu3cOIWyYkp/qkWhFchGuBLw8lLY
+Mv3f+WowTsQJjfrn6hRe3MqYcUkCiXKUo3unV4nTSfaItB0TMSnfr3aMR5aunF9
0ZIOpww6F0YU8U56XyUledVe1nOq332P76bU22tmff8bySITZ2VA2oyUO0D8bekN
pVHppMbLpubbKDck+iNsJXgulbqTHY1K9+5W0GQfrizr2vgNAOzwU81FomWAHTJ1
WsLImo6mbIF0xws0aygGskx8GeU6K+6+cZsUWNB5APQkY2vRe8CuT75rcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyoVdO1OK5dCOxfVZp75UOxsC2oMB8GA1UdIwQY
MBaAFDuX3hdRLPqL68PfgLJ7R2JO9BaRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzVmZUYxRXMtb3ZydzktQXNudEhZazcwRnBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84YTdkYTQtYmExOS00YjI5LTg3ZTAt
OTE1NTEzMmExNzlhLzEvTzVmZUYxRXMtb3ZydzktQXNudEhZazcwRnBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy84YTdkYTQtYmExOS00YjI5LTg3ZTAtOTE1NTEzMmExNzlh
LzEvTzVmZUYxRXMtb3ZydzktQXNudEhZazcwRnBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFCICwm0f
Wau7yuzqF7itgmwTIg2I8m3onwyprxLBKDBKmy3vFX8mchGKlOD698kkjcO1D4Y8
4grMgmp4VA9DokMQUHzrRIknqGOVXnUwKkWmeXBtdcrb87nGFcLPymV2vn5oDnbT
lwapiWMXgd+BUmqp39xGbgdL1kq+Dw1Db+EeiqAAIOOl7Q88HwCrGbk4vERB3fCu
1YO6i4iFfBjCqWmwAQzN+r/2AFtS2VXuyrJqvCEBZacahS/8noSARU5En5zi9GNm
uD4tnqs6eru2UtrFSUg6E3PpI6soRIpr813K/n8FCOEAXzhSmOhmy1L3k1Nr8Yhi
perOK4dHQaR5Hw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:08 2025 by rpki-client