Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier: /N2emdUKMN3yyGwOsWazeW7azS8LEwqDjrhrxigzfN0=
Subject key identifier: DE:E5:21:DA:BF:5D:63:2F:86:8C:07:DB:1F:10:59:93:6A:3B:4D:76
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer: /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial: 0194BCE0B99475B12D5F9FAE3FE061D64D83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number: 0DA9
Signing time: Fri 31 Jan 2025 15:00:31 +0000
Manifest this update: Fri 31 Jan 2025 15:00:31 +0000
Manifest next update: Sat 01 Feb 2025 15:00:31 +0000
Files and hashes: 1: 1gXM5D3Y0GBi3FbOxC76Tbkj0Qc.roa (hash: GOT5movWxVskxoFlITVT8JKb8WEyioA1Mn3nxWwt5ow=)
2: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: e+fWGjEb3kFPxYP5iI6KiaBrbiAssnNYsnFVQNGT8sg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b9:94:75:b1:2d:5f:9f:ae:3f:e0:61:d6:4d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
Validity
Not Before: Jan 31 15:00:31 2025 GMT
Not After : Feb 1 15:00:31 2025 GMT
Subject: CN=dee521dabf5d632f868c07db1f1059936a3b4d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:61:1c:c6:c9:de:18:c6:bc:7f:e1:af:42:0e:
4b:bf:1d:32:aa:7b:f3:db:eb:55:08:7c:21:1b:4b:
7b:42:e6:6a:d1:92:06:5c:13:08:95:af:59:37:be:
bf:0e:e7:ae:4d:fb:9a:28:b7:40:65:b3:dc:42:8d:
4c:65:63:cf:30:6a:66:3c:8e:80:a3:30:a7:57:9a:
c8:81:19:06:b2:d4:cd:8b:7f:ab:f7:ae:cd:9f:e4:
e8:1e:7e:2b:bc:46:9b:ff:4a:7b:bf:4f:a4:20:18:
5a:95:20:45:e6:ac:73:b4:f8:7c:35:57:88:f3:eb:
25:6f:93:dd:9a:6b:b4:c5:9e:b9:17:f5:4d:9a:8f:
f2:08:e8:a3:bc:ac:2e:11:42:6f:09:42:b3:3f:21:
43:eb:e6:af:f9:ef:ca:74:2b:3c:e4:3a:11:6e:78:
a3:92:4b:4f:8e:4b:ad:ca:40:fd:65:f3:23:aa:58:
82:f0:9f:87:d4:59:b8:bd:58:7f:d4:77:09:90:9f:
22:eb:cd:29:9b:51:d3:94:98:b8:64:85:74:86:ef:
45:e2:bd:62:0a:8c:3c:9b:c5:80:11:ab:48:9d:bc:
60:f2:de:26:e0:0c:67:b0:39:70:3f:21:91:8d:3e:
af:93:9e:77:4d:c0:fd:81:33:3b:ec:2f:d7:dc:95:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E5:21:DA:BF:5D:63:2F:86:8C:07:DB:1F:10:59:93:6A:3B:4D:76
X509v3 Authority Key Identifier:
keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7e:d2:46:33:bd:af:12:a9:59:41:25:87:19:b7:8e:c3:a6:
2a:2c:98:09:b7:7b:2c:40:44:a4:d7:92:d7:ee:20:29:40:29:
2a:0b:25:18:96:f0:32:fb:d8:0e:b6:a2:c4:e5:5b:37:ef:e4:
77:ef:67:b9:a7:57:f4:e4:7c:5f:c3:ba:51:71:cd:dc:ee:aa:
ef:10:5b:f4:1a:e5:88:89:7f:e3:66:e1:e9:e3:df:d5:3a:e4:
e3:d8:fe:d7:93:66:be:dc:58:1e:6e:e3:5d:3f:3e:2a:ba:63:
72:84:d6:6c:99:5a:33:be:8e:88:ed:bc:06:ac:b9:5d:9b:62:
04:d1:3e:b3:b7:37:a3:73:34:25:55:24:2f:ae:12:2d:80:4c:
9d:36:ff:94:2b:33:09:f8:4c:de:f6:8f:8a:94:23:7d:f3:31:
a0:ca:8e:bc:67:ac:a7:c0:ac:a3:5c:79:f6:ec:34:3e:51:48:
b0:80:a4:43:5b:b3:90:72:86:d1:0f:5c:d9:cd:f2:6f:55:5b:
0c:ce:12:a1:78:77:5e:25:50:c2:5a:91:98:61:c2:71:d8:f0:
0e:3d:1a:06:c8:b1:77:eb:b4:41:46:f2:bf:57:37:f6:e5:48:
47:02:32:62:fd:6a:b0:73:49:6a:22:dd:d5:99:0f:7e:f0:93:
33:df:8d:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84LmUdbEtX5+uP+Bh1k2DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTM5ZjFkYjg1OGIxNTVmMjViYzM0Mzc1OWY1YmUyYjcz
NmM4MTgwHhcNMjUwMTMxMTUwMDMxWhcNMjUwMjAxMTUwMDMxWjAzMTEwLwYDVQQD
EyhkZWU1MjFkYWJmNWQ2MzJmODY4YzA3ZGIxZjEwNTk5MzZhM2I0ZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmEcxsneGMa8f+GvQg5Lvx0yqnvz
2+tVCHwhG0t7QuZq0ZIGXBMIla9ZN76/DueuTfuaKLdAZbPcQo1MZWPPMGpmPI6A
ozCnV5rIgRkGstTNi3+r967Nn+ToHn4rvEab/0p7v0+kIBhalSBF5qxztPh8NVeI
8+slb5Pdmmu0xZ65F/VNmo/yCOijvKwuEUJvCUKzPyFD6+av+e/KdCs85DoRbnij
kktPjkutykD9ZfMjqliC8J+H1Fm4vVh/1HcJkJ8i680pm1HTlJi4ZIV0hu9F4r1i
Cow8m8WAEatInbxg8t4m4AxnsDlwPyGRjT6vk553TcD9gTM77C/X3JW5GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7lIdq/XWMvhowH2x8QWZNqO012MB8GA1UdIwQY
MBaAFKOjnx24WLFV8lvDQ3WfW+K3NsgYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi84YzgzY2EtMjI3OC00ZDU2LWJjZTgt
NDUwZDIyOTViYTQ5LzEvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi84YzgzY2EtMjI3OC00ZDU2LWJjZTgtNDUwZDIyOTViYTQ5
LzEvbzZPZkhiaFlzVlh5VzhORGRaOWI0cmMyeUJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK37SRjO9
rxKpWUElhxm3jsOmKiyYCbd7LEBEpNeS1+4gKUApKgslGJbwMvvYDraixOVbN+/k
d+9nuadX9OR8X8O6UXHN3O6q7xBb9BrliIl/42bh6ePf1Trk49j+15NmvtxYHm7j
XT8+KrpjcoTWbJlaM76OiO28Bqy5XZtiBNE+s7c3o3M0JVUkL64SLYBMnTb/lCsz
CfhM3vaPipQjffMxoMqOvGesp8Cso1x59uw0PlFIsICkQ1uzkHKG0Q9c2c3yb1Vb
DM4SoXh3XiVQwlqRmGHCcdjwDj0aBsixd+u0QUbyv1c39uVIRwIyYv1qsHNJaiLd
1ZkPfvCTM9+NnQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:59 2025 by rpki-client