Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
File: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft (raw, json)
Hash identifier: RZ80Zqrrs70DQD+zq+DRyTJkywJH1S5Csq9r9OHeqj8=
Subject key identifier: 04:DB:8B:4E:1F:30:85:04:0C:64:0C:72:69:61:EE:44:DF:1F:EA:A6
Authority key identifier: A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
Certificate issuer: /CN=a01012ec845500718cab76c9dd0af010890de26d
Certificate serial: 0194BD17FAC3EE5E184C453C21AC58252AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
Manifest number: 0DCC
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: 94JdYbCitrO6Jgv_ISBvhyruOI0.roa (hash: ALw/2LB5laoxpSR4lEunBO8y3yvQ4uuSEUEx3sv689w=)
2: oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl (hash: ZKLmn05eYX0HqXzltvQ94cF+cAEPpi+kFw487/TM0Eo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fa:c3:ee:5e:18:4c:45:3c:21:ac:58:25:2a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a01012ec845500718cab76c9dd0af010890de26d
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=04db8b4e1f3085040c640c726961ee44df1feaa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:b1:46:5b:53:2f:12:0a:f5:9c:73:66:92:
9a:06:96:00:db:a9:b5:de:ef:5e:9c:6f:a1:7f:eb:
77:e0:0e:29:6c:f5:23:c5:3c:32:8c:06:3c:94:c4:
40:21:b4:3d:98:af:a1:31:5e:5e:66:e9:ca:45:1d:
13:be:24:ec:53:47:0b:3a:bd:11:e3:09:a9:5f:03:
b1:f7:01:40:29:d7:45:ce:2d:86:ba:b1:1b:35:0e:
c4:65:c3:49:42:b0:e5:d3:6a:bd:35:28:5a:a2:81:
c7:d3:8b:d8:50:65:a8:4e:2b:22:27:4e:e0:71:a4:
a4:85:65:e5:2d:60:c6:dd:52:3f:2b:32:0a:2e:e6:
3a:7e:82:39:21:1b:fb:03:2e:3e:48:a0:ce:46:7d:
f7:dc:d3:a8:85:be:ea:a9:7b:8b:af:09:64:9a:52:
c1:d2:d5:a3:e0:e4:82:14:c7:04:4b:55:17:55:a1:
29:21:72:a5:97:b5:b6:ca:52:38:95:0e:0f:5f:e7:
c5:a1:64:54:2e:02:bc:a5:ba:7f:c8:48:3d:78:db:
4f:98:ad:b7:9b:2d:c1:93:f2:80:fa:5b:d1:73:0b:
dd:c0:a6:1e:8b:7c:9f:a3:16:d6:72:6a:e2:9b:9a:
b4:4f:eb:52:d1:8e:27:3b:fa:e3:6a:78:df:81:00:
e0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DB:8B:4E:1F:30:85:04:0C:64:0C:72:69:61:EE:44:DF:1F:EA:A6
X509v3 Authority Key Identifier:
keyid:A0:10:12:EC:84:55:00:71:8C:AB:76:C9:DD:0A:F0:10:89:0D:E2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7b308c-70cd-4f24-b610-7aba569658d5/1/oBAS7IRVAHGMq3bJ3QrwEIkN4m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:40:46:07:38:e8:e3:c7:b0:5d:2f:73:54:a6:8f:29:07:6d:
41:93:e3:d8:58:89:50:11:12:f7:34:a7:cf:02:89:bc:7a:64:
69:42:d8:5d:83:90:ce:06:2e:9f:1c:09:f2:de:5a:b4:ab:34:
c0:23:a2:99:81:ff:c8:54:50:68:90:32:c1:e3:a2:45:34:d6:
84:20:59:0e:2e:ad:c0:35:5c:d2:59:7f:1d:e6:bf:c0:47:1c:
9a:17:34:55:a1:e4:41:e4:32:46:f3:5e:c4:b5:37:51:af:62:
5a:5c:9a:c8:60:41:25:64:47:e6:5e:f6:aa:a6:f2:87:bc:d6:
9d:70:0b:a2:ae:1c:0b:85:91:1c:7b:2e:f4:05:28:6f:c5:f9:
2e:b8:6a:b4:c8:63:9c:17:3f:a7:27:e4:66:4b:58:09:31:c0:
2e:3a:3a:85:61:a4:95:a7:c5:61:3a:55:15:3c:41:ef:45:88:
b1:de:21:f0:30:12:92:70:e4:1a:7b:55:7f:49:de:6c:bd:82:
d7:d3:cf:16:6e:46:03:a5:a1:3d:9e:7e:3c:14:62:a2:05:df:
bb:74:e0:ba:5b:bd:c3:c8:ad:7c:8d:02:e0:9e:e6:8a:24:4c:
c5:f3:11:b8:30:a2:08:54:2a:cf:96:26:73:a4:d1:52:77:2b:
0a:d2:ed:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F/rD7l4YTEU8IaxYJSqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMTAxMmVjODQ1NTAwNzE4Y2FiNzZjOWRkMGFmMDEwODkw
ZGUyNmQwHhcNMjUwMTMxMTYwMDUyWhcNMjUwMjAxMTYwMDUyWjAzMTEwLwYDVQQD
EygwNGRiOGI0ZTFmMzA4NTA0MGM2NDBjNzI2OTYxZWU0NGRmMWZlYWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTqxRltTLxIK9ZxzZpKaBpYA26m1
3u9enG+hf+t34A4pbPUjxTwyjAY8lMRAIbQ9mK+hMV5eZunKRR0TviTsU0cLOr0R
4wmpXwOx9wFAKddFzi2GurEbNQ7EZcNJQrDl02q9NShaooHH04vYUGWoTisiJ07g
caSkhWXlLWDG3VI/KzIKLuY6foI5IRv7Ay4+SKDORn333NOohb7qqXuLrwlkmlLB
0tWj4OSCFMcES1UXVaEpIXKll7W2ylI4lQ4PX+fFoWRULgK8pbp/yEg9eNtPmK23
my3Bk/KA+lvRcwvdwKYei3yfoxbWcmrim5q0T+tS0Y4nO/rjanjfgQDgSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATbi04fMIUEDGQMcmlh7kTfH+qmMB8GA1UdIwQY
MBaAFKAQEuyEVQBxjKt2yd0K8BCJDeJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83YjMwOGMtNzBjZC00ZjI0LWI2MTAt
N2FiYTU2OTY1OGQ1LzEvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83YjMwOGMtNzBjZC00ZjI0LWI2MTAtN2FiYTU2OTY1OGQ1
LzEvb0JBUzdJUlZBSEdNcTNiSjNRcndFSWtONG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0BGBzjo
48ewXS9zVKaPKQdtQZPj2FiJUBES9zSnzwKJvHpkaULYXYOQzgYunxwJ8t5atKs0
wCOimYH/yFRQaJAyweOiRTTWhCBZDi6twDVc0ll/Hea/wEccmhc0VaHkQeQyRvNe
xLU3Ua9iWlyayGBBJWRH5l72qqbyh7zWnXALoq4cC4WRHHsu9AUob8X5LrhqtMhj
nBc/pyfkZktYCTHALjo6hWGklafFYTpVFTxB70WIsd4h8DASknDkGntVf0nebL2C
19PPFm5GA6WhPZ5+PBRiogXfu3Tgulu9w8itfI0C4J7miiRMxfMRuDCiCFQqz5Ym
c6TRUncrCtLtEw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:10 2025 by rpki-client