Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
File: 0VoQmMXIU1yXWPEo2KCC33z4UQs.mft (raw, json)
Hash identifier: D1RmrYbBvY66nMtCnN/tHxH2INegB1gq+APqPcWf4Ao=
Subject key identifier: 64:BC:89:67:96:E1:EC:DE:B8:D8:2E:FE:8D:59:24:12:4F:9A:E8:2B
Authority key identifier: D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B
Certificate issuer: /CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
Certificate serial: 0194BBCEEDEB891091211A500F5F9D1C3CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
Manifest number: 06E2
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: 0VoQmMXIU1yXWPEo2KCC33z4UQs.crl (hash: O6WdXMDREFMx2Nmcoi0wYPDi5vd8fpWNNdlW7hFqUp4=)
2: 7KXXDbOmDOJ4LQN1JyFA-k-Tm80.roa (hash: FyGaqVFk+vnx+I1kj3NwUg/UfIFUtqEhpx9/rpeS44U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ed:eb:89:10:91:21:1a:50:0f:5f:9d:1c:3c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=64bc896796e1ecdeb8d82efe8d5924124f9ae82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:83:8f:af:f4:0d:44:f6:a2:13:32:33:d0:
70:00:c7:1b:cc:c9:9a:ef:f0:d2:cd:a3:b2:b1:79:
11:4d:47:38:3b:68:72:4f:66:dc:45:02:9a:88:35:
f4:8b:09:e6:0c:b9:a2:fa:7b:44:47:ba:71:f9:dd:
a3:fa:6f:ab:3c:ba:e8:86:48:26:7a:8f:05:f5:c8:
c1:88:f2:8a:e6:a1:4a:79:33:34:14:13:fb:f0:c2:
f4:3f:32:fe:ce:af:2e:86:57:48:9f:f8:c7:3c:6e:
95:5a:27:3f:11:cd:98:11:cf:01:22:23:90:6c:4b:
65:27:f9:96:ce:82:83:96:dd:22:70:65:e1:b6:ab:
67:88:ce:e3:f6:a4:e0:7c:89:e8:09:9c:9e:6f:fa:
ef:dd:2b:65:8f:38:f3:23:c7:5e:41:c7:9d:99:1d:
af:14:ea:52:bc:07:f1:1d:01:c7:f7:91:de:c8:ac:
3e:a5:71:f3:72:c3:35:2f:bd:3a:35:50:cb:ab:03:
00:52:e9:54:02:db:d4:ea:71:8f:63:bc:12:fc:97:
2f:5d:45:0c:d4:19:64:fd:29:23:80:e2:82:a2:6e:
ff:eb:a8:ec:75:04:ec:27:0f:2a:09:95:30:7e:05:
10:e0:49:53:ef:15:8a:0b:4b:bc:a9:e5:eb:7b:12:
43:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BC:89:67:96:E1:EC:DE:B8:D8:2E:FE:8D:59:24:12:4F:9A:E8:2B
X509v3 Authority Key Identifier:
keyid:D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:67:a1:f4:df:12:ec:72:6c:e8:8a:72:27:43:4e:49:67:52:
25:55:a1:22:29:e6:d1:42:ec:c9:bc:b7:09:18:60:ca:d4:c4:
9a:fd:40:a1:fa:ca:27:c3:02:16:c5:4e:e6:5a:12:5d:61:6e:
79:39:ee:2a:9a:04:c4:9b:3d:ba:0e:27:98:ee:8b:f3:05:2a:
21:28:f2:50:d5:b9:2c:8a:09:c5:92:86:43:d1:cf:ec:7d:38:
41:ee:ea:9c:27:97:45:3d:c9:4a:1c:36:98:b4:1b:0c:70:84:
44:37:9d:7b:07:a3:53:ac:36:cb:de:c7:fe:96:0f:e6:d4:53:
79:53:70:8c:1f:85:3f:e4:33:fa:29:28:d4:d2:41:23:02:be:
11:73:60:25:99:4e:33:da:40:8c:b6:3d:30:1d:7d:75:83:1b:
02:f1:3f:a1:c0:be:10:c0:5f:ee:b3:80:17:0b:d4:fd:0d:c3:
b0:ac:51:60:26:50:f0:ff:f3:84:28:60:76:af:d3:51:7b:b8:
b3:8c:3f:d9:f7:62:c3:5d:e3:47:92:41:96:c3:82:88:dc:83:
28:d4:a8:78:8e:fc:c7:79:02:e7:9e:01:a2:2a:5a:b6:6b:48:
9b:d5:78:cc:ef:cc:3c:71:22:fc:1e:4c:b7:27:6a:df:6f:82:
b7:b5:e8:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zu3riRCRIRpQD1+dHDzvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxNWExMDk4YzVjODUzNWM5NzU4ZjEyOGQ4YTA4MmRmN2Nm
ODUxMGIwHhcNMjUwMTMxMTAwMTI4WhcNMjUwMjAxMTAwMTI4WjAzMTEwLwYDVQQD
Eyg2NGJjODk2Nzk2ZTFlY2RlYjhkODJlZmU4ZDU5MjQxMjRmOWFlODJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslyDj6/0DUT2ohMyM9BwAMcbzMma
7/DSzaOysXkRTUc4O2hyT2bcRQKaiDX0iwnmDLmi+ntER7px+d2j+m+rPLrohkgm
eo8F9cjBiPKK5qFKeTM0FBP78ML0PzL+zq8uhldIn/jHPG6VWic/Ec2YEc8BIiOQ
bEtlJ/mWzoKDlt0icGXhtqtniM7j9qTgfInoCZyeb/rv3StljzjzI8deQcedmR2v
FOpSvAfxHQHH95HeyKw+pXHzcsM1L706NVDLqwMAUulUAtvU6nGPY7wS/JcvXUUM
1Blk/SkjgOKCom7/66jsdQTsJw8qCZUwfgUQ4ElT7xWKC0u8qeXrexJD2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGS8iWeW4ezeuNgu/o1ZJBJPmugrMB8GA1UdIwQY
MBaAFNFaEJjFyFNcl1jxKNiggt98+FELMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC82YzQwMjEtMGI2Ny00NDg1LWI4MjMt
MGJkZGM4MDcxMWFlLzEvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC82YzQwMjEtMGI2Ny00NDg1LWI4MjMtMGJkZGM4MDcxMWFl
LzEvMFZvUW1NWElVMXlYV1BFbzJLQ0MzM3o0VVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmeh9N8S
7HJs6IpyJ0NOSWdSJVWhIinm0ULsyby3CRhgytTEmv1AofrKJ8MCFsVO5loSXWFu
eTnuKpoExJs9ug4nmO6L8wUqISjyUNW5LIoJxZKGQ9HP7H04Qe7qnCeXRT3JShw2
mLQbDHCERDedewejU6w2y97H/pYP5tRTeVNwjB+FP+Qz+iko1NJBIwK+EXNgJZlO
M9pAjLY9MB19dYMbAvE/ocC+EMBf7rOAFwvU/Q3DsKxRYCZQ8P/zhChgdq/TUXu4
s4w/2fdiw13jR5JBlsOCiNyDKNSoeI78x3kC554BoipatmtIm9V4zO/MPHEi/B5M
tydq32+Ct7XoKA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:06 2025 by rpki-client