Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
File: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft (raw, json)
Hash identifier: fSi17BiDJt9UApTScHWJ/8Lvb60NnIkKXfytRBXiy7w=
Subject key identifier: 6E:2C:02:C1:A8:7C:1D:E0:A9:A1:89:71:63:3E:02:24:E4:18:EE:F0
Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
Certificate issuer: /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Certificate serial: 0194BCA96F659F82CFD3EF4BB64DDD3BDD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:08 +0000
Manifest this update: Fri 31 Jan 2025 14:00:08 +0000
Manifest next update: Sat 01 Feb 2025 14:00:08 +0000
Files and hashes: 1: P3AaYGSGMDc5V6XvnMWc4NJ8Sbg.roa (hash: chczXDm1de+BLC6EnaRddxxMZYpPZHccFuKW2GUWjQY=)
2: rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl (hash: +vztpBcMnn2tiU0T3eJP7T0hoLDRke2agMW1u2afHC8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:6f:65:9f:82:cf:d3:ef:4b:b6:4d:dd:3b:dd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d
Validity
Not Before: Jan 31 14:00:08 2025 GMT
Not After : Feb 1 14:00:08 2025 GMT
Subject: CN=6e2c02c1a87c1de0a9a18971633e0224e418eef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:f3:7e:a2:bc:26:81:57:28:48:77:61:06:
f4:6c:f8:26:0d:56:cf:6b:9d:d7:37:94:a3:e1:62:
5b:05:f0:03:96:e8:99:54:6d:34:9c:68:05:99:a2:
bd:50:d5:71:5c:c3:17:c2:21:b1:fd:26:cc:07:38:
48:7c:ee:5f:c0:e3:2c:40:08:fd:c5:1a:c2:45:ad:
31:28:58:5c:ce:f1:58:27:83:75:14:cc:6a:0c:66:
99:ee:24:e9:9b:1a:80:dd:72:14:3d:61:f7:2f:95:
d5:bf:f3:04:d3:0f:ec:51:76:6b:54:ca:2f:40:ae:
6b:5b:cf:1e:ea:29:21:1b:17:d4:9b:01:6a:a7:ab:
16:40:7e:77:41:ff:27:4a:3c:ac:49:81:79:e6:85:
38:56:a3:1a:23:56:a0:6a:84:c3:9d:d1:cb:3c:74:
45:b3:26:c6:7a:38:9b:8e:b9:d3:fa:25:93:fa:ad:
2f:57:73:0e:01:5f:4b:5b:2a:cd:50:80:bd:7c:ba:
31:ac:54:f7:09:0f:f4:90:9f:28:23:05:6d:ca:1e:
7d:45:af:c0:73:ff:87:de:36:91:26:16:0a:fa:e3:
5a:9e:00:bc:d4:32:ea:dd:6a:83:dc:44:f2:57:99:
f0:48:5e:15:2a:0b:95:a2:09:79:96:3a:b8:4f:94:
4d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2C:02:C1:A8:7C:1D:E0:A9:A1:89:71:63:3E:02:24:E4:18:EE:F0
X509v3 Authority Key Identifier:
keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:8f:06:7c:61:be:01:73:fc:ed:e9:e5:52:4c:76:e7:05:45:
20:47:a8:b0:b3:d9:91:d5:40:c6:75:9c:52:4a:26:36:2e:2e:
7f:3d:49:ae:95:eb:89:3c:cf:ed:0a:db:9a:58:a7:d7:d9:c5:
81:8d:a0:0b:19:5f:fc:b9:57:ae:6e:0a:47:ac:55:95:9c:cf:
f6:4f:58:a9:a6:42:59:c7:1a:b7:53:0c:28:68:c0:a1:ff:27:
a5:c5:9c:1a:00:83:bd:7e:b1:5c:f7:46:75:74:d7:36:b8:a3:
1a:fe:6b:c2:45:a9:eb:e0:ee:c6:08:8b:b3:09:06:a1:b4:4b:
9a:30:05:82:7a:04:f8:03:72:55:e9:19:51:6e:52:17:a4:04:
5b:8d:32:0c:e9:e3:34:86:e0:af:cb:cf:12:29:65:07:d6:d5:
5c:2d:f2:61:95:f1:16:63:af:68:47:db:13:70:b6:30:d5:bf:
a3:45:7a:a7:bb:1a:fb:2b:7b:0e:64:be:40:06:24:18:d6:09:
43:6d:13:09:1e:79:c9:e7:a2:17:ac:93:24:ec:7e:ab:81:b7:
aa:43:99:1a:8e:88:7d:b9:e5:77:81:51:2f:29:d7:dc:13:93:
5a:24:e5:3a:7f:94:3b:72:09:d5:f0:52:4d:7e:68:d8:17:f2:
aa:3f:91:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qW9ln4LP0+9Ltk3dO91mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWZjZTBiOGI2MzdjMTVmMjMxYWVjZmZiNWM4MGE3NGZm
Y2NiMWQwHhcNMjUwMTMxMTQwMDA4WhcNMjUwMjAxMTQwMDA4WjAzMTEwLwYDVQQD
Eyg2ZTJjMDJjMWE4N2MxZGUwYTlhMTg5NzE2MzNlMDIyNGU0MThlZWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAvzfqK8JoFXKEh3YQb0bPgmDVbP
a53XN5Sj4WJbBfADluiZVG00nGgFmaK9UNVxXMMXwiGx/SbMBzhIfO5fwOMsQAj9
xRrCRa0xKFhczvFYJ4N1FMxqDGaZ7iTpmxqA3XIUPWH3L5XVv/ME0w/sUXZrVMov
QK5rW88e6ikhGxfUmwFqp6sWQH53Qf8nSjysSYF55oU4VqMaI1agaoTDndHLPHRF
sybGejibjrnT+iWT+q0vV3MOAV9LWyrNUIC9fLoxrFT3CQ/0kJ8oIwVtyh59Ra/A
c/+H3jaRJhYK+uNangC81DLq3WqD3ETyV5nwSF4VKguVogl5ljq4T5RNjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4sAsGofB3gqaGJcWM+AiTkGO7wMB8GA1UdIwQY
MBaAFKyfzguLY3wV8jGuz/tcgKdP/MsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC80ZDBiMWYtYWM4NS00YTJhLWExYjQt
MDhiMDdlODliNDJhLzEvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC80ZDBiMWYtYWM4NS00YTJhLWExYjQtMDhiMDdlODliNDJh
LzEvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACI8GfGG+
AXP87enlUkx25wVFIEeosLPZkdVAxnWcUkomNi4ufz1JrpXriTzP7Qrbmlin19nF
gY2gCxlf/LlXrm4KR6xVlZzP9k9YqaZCWccat1MMKGjAof8npcWcGgCDvX6xXPdG
dXTXNrijGv5rwkWp6+DuxgiLswkGobRLmjAFgnoE+ANyVekZUW5SF6QEW40yDOnj
NIbgr8vPEillB9bVXC3yYZXxFmOvaEfbE3C2MNW/o0V6p7sa+yt7DmS+QAYkGNYJ
Q20TCR55yeeiF6yTJOx+q4G3qkOZGo6Ifbnld4FRLynX3BOTWiTlOn+UO3IJ1fBS
TX5o2Bfyqj+RRw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:40:10 2025 by rpki-client