Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
File: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft (raw, json)
Hash identifier: rK2bQAymDQFePTvFNQRhTWad2sZ28OXfNoJBZ4B9ehc=
Subject key identifier: 87:42:8E:86:EE:5C:5D:E9:71:B3:E8:B5:89:D6:4A:70:3B:C2:13:D2
Authority key identifier: F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
Certificate issuer: /CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Certificate serial: 0194BCAA15181B51A52EFF59E3CD90AEC47E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
Manifest number: 0389
Signing time: Fri 31 Jan 2025 14:00:50 +0000
Manifest this update: Fri 31 Jan 2025 14:00:50 +0000
Manifest next update: Sat 01 Feb 2025 14:00:50 +0000
Files and hashes: 1: 1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl (hash: i4jHV4/sZjv0weQYVh580KzpzSjkZptBfvlUGSSCKQ8=)
2: 8UPDPZ7zrsaGxatkNfAWZkBB7mA.roa (hash: 7oRi0Nn02wFQcMPApE5QBhxhFL6uCRyFUmgPVAE/lvc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:15:18:1b:51:a5:2e:ff:59:e3:cd:90:ae:c4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ec1468ee3103fe53b1cf5a9875aecd4e28ad51
Validity
Not Before: Jan 31 14:00:50 2025 GMT
Not After : Feb 1 14:00:50 2025 GMT
Subject: CN=87428e86ee5c5de971b3e8b589d64a703bc213d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c4:2e:f3:df:4b:5f:20:b2:93:da:97:c3:1b:
d9:3c:fb:ce:c4:73:fe:43:00:79:27:36:b4:28:51:
5b:da:ac:b9:8b:77:57:12:48:a0:ed:5c:74:78:ad:
d5:2f:b0:1a:c7:d0:d7:ae:35:4f:9c:db:d4:0f:51:
51:57:9c:5b:23:be:12:de:54:34:02:81:a4:a7:90:
9d:22:23:5b:42:84:e4:a9:0a:8c:62:56:d6:89:72:
27:64:73:38:68:16:c7:85:af:ea:0e:31:84:b1:01:
d6:54:75:18:3a:16:2a:1a:f8:be:f5:35:ce:bf:7f:
bf:c9:8b:fb:bc:5e:c1:b8:05:9c:d1:a9:a4:f8:bc:
c8:3b:e3:e4:57:c9:65:60:b7:ad:b3:fa:cd:7e:b7:
ce:68:ac:f8:c7:73:0d:2f:5f:56:05:24:70:39:1a:
38:46:6e:5d:c2:3e:97:6a:39:83:9f:73:b6:eb:67:
11:79:9f:57:4a:05:ac:1c:ab:aa:de:76:28:f6:c6:
a1:3b:6c:11:1c:71:70:c3:b4:71:d6:38:9e:eb:a9:
47:88:67:92:35:17:f8:35:d7:ef:84:e6:45:55:e0:
b7:fa:bf:21:9d:28:8b:92:5c:79:14:ea:ae:c5:dd:
7d:df:54:c1:f3:32:c0:81:0d:59:5a:01:88:19:ad:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:42:8E:86:EE:5C:5D:E9:71:B3:E8:B5:89:D6:4A:70:3B:C2:13:D2
X509v3 Authority Key Identifier:
keyid:F8:EC:14:68:EE:31:03:FE:53:B1:CF:5A:98:75:AE:CD:4E:28:AD:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OwUaO4xA_5Tsc9amHWuzU4orVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b024bd-2d0c-4572-a49a-5878a8173c44/1/1-OwUaO4xA_5Tsc9amHWuzU4orVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:df:5d:f9:49:b4:ba:8d:0b:2e:e6:f7:c5:cb:10:73:09:fe:
18:fb:42:fa:8a:29:88:d7:b8:6a:b4:06:d6:fc:5d:79:57:71:
d7:7e:43:13:24:f7:c3:70:e4:ba:e5:88:c3:9e:d2:1d:f3:ab:
0a:a8:ff:c8:ff:84:fa:b3:5b:bd:66:b3:41:9c:18:92:49:10:
ed:82:90:6c:2b:26:bf:4f:55:78:e3:13:d0:21:0b:53:2a:2f:
31:28:66:02:36:35:f1:1d:57:11:a6:27:d8:1a:d1:b9:e0:02:
ff:a5:41:4c:c9:95:2f:52:2f:aa:28:a2:47:fe:d4:d5:27:2f:
3f:52:20:55:98:6d:e6:83:a4:9e:13:ef:af:2a:cd:51:f3:6c:
51:3e:8f:c3:aa:f3:c1:3b:2f:67:f2:fc:e3:53:78:4e:7c:90:
5d:b9:56:99:28:18:30:cd:0c:ac:a3:4c:94:7e:7a:b8:12:73:
fb:bf:f2:2b:e4:8e:f1:a3:f4:17:ac:57:b5:b0:de:fd:e5:24:
93:00:06:19:d5:54:46:11:d9:d2:a0:cc:da:97:48:38:77:73:
ac:fd:85:e0:5c:aa:9e:06:6c:29:86:9f:de:f6:f6:9c:64:9e:
79:79:ad:cb:a8:72:7a:ef:20:44:8d:67:37:78:d2:10:a4:0c:
92:d5:a7:5e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZS8qhUYG1GlLv9Z482QrsR+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZWMxNDY4ZWUzMTAzZmU1M2IxY2Y1YTk4NzVhZWNkNGUy
OGFkNTEwHhcNMjUwMTMxMTQwMDUwWhcNMjUwMjAxMTQwMDUwWjAzMTEwLwYDVQQD
Eyg4NzQyOGU4NmVlNWM1ZGU5NzFiM2U4YjU4OWQ2NGE3MDNiYzIxM2QyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8Qu899LXyCyk9qXwxvZPPvOxHP+
QwB5Jza0KFFb2qy5i3dXEkig7Vx0eK3VL7Aax9DXrjVPnNvUD1FRV5xbI74S3lQ0
AoGkp5CdIiNbQoTkqQqMYlbWiXInZHM4aBbHha/qDjGEsQHWVHUYOhYqGvi+9TXO
v3+/yYv7vF7BuAWc0amk+LzIO+PkV8llYLets/rNfrfOaKz4x3MNL19WBSRwORo4
Rm5dwj6XajmDn3O262cReZ9XSgWsHKuq3nYo9sahO2wRHHFww7Rx1jie66lHiGeS
NRf4NdfvhOZFVeC3+r8hnSiLklx5FOquxd1931TB8zLAgQ1ZWgGIGa3o/QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIdCjobuXF3pcbPotYnWSnA7whPSMB8GA1UdIwQY
MBaAFPjsFGjuMQP+U7HPWph1rs1OKK1RMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Pd1VhTzR4QV81VHNjOWFtSFd1elU0b3JWRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZGUvYjAyNGJkLTJkMGMtNDU3Mi1hNDlh
LTU4NzhhODE3M2M0NC8xLzEtT3dVYU80eEFfNVRzYzlhbUhXdXpVNG9yVkUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2RlL2IwMjRiZC0yZDBjLTQ1NzItYTQ5YS01ODc4YTgxNzNj
NDQvMS8xLU93VWFPNHhBXzVUc2M5YW1IV3V6VTRvclZFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs99d
+Um0uo0LLub3xcsQcwn+GPtC+oopiNe4arQG1vxdeVdx135DEyT3w3DkuuWIw57S
HfOrCqj/yP+E+rNbvWazQZwYkkkQ7YKQbCsmv09VeOMT0CELUyovMShmAjY18R1X
EaYn2BrRueAC/6VBTMmVL1IvqiiiR/7U1ScvP1IgVZht5oOknhPvryrNUfNsUT6P
w6rzwTsvZ/L841N4TnyQXblWmSgYMM0MrKNMlH56uBJz+7/yK+SO8aP0F6xXtbDe
/eUkkwAGGdVURhHZ0qDM2pdIOHdzrP2F4FyqngZsKYaf3vb2nGSeeXmty6hyeu8g
RI1nN3jSEKQMktWnXg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:04 2025 by rpki-client