Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
File: oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft (raw, json)
Hash identifier: OwS6dM+xSUDlv2AFw1EKSOgjUHz2Lk7smlD+lwI+xe0=
Subject key identifier: 9E:BC:0E:8B:C7:22:43:F3:C0:77:15:12:94:4D:70:C5:89:6F:83:43
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 0194BC04D9C0A5360DC77F9ADF1CB1804CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:21 +0000
Manifest this update: Fri 31 Jan 2025 11:00:21 +0000
Manifest next update: Sat 01 Feb 2025 11:00:21 +0000
Files and hashes: 1: 7C0eLiHaSivPjWvCeJI7OYyeX0w.roa (hash: QECF5Dw9n/dUuIXbwLPUz1r2SDqHk19ywfPN3IJ1Bjo=)
2: YL2mjFkL3ptl5VIC6FUskxqO4nY.roa (hash: jZ9khSDfHMU1HP/GDGXtwMlzTdVqjL0AwmhZP5bokp4=)
3: oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl (hash: bzYYaid7NzejH7nnQSPzNomy1HIR2IDYczcFAA7k3Eg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d9:c0:a5:36:0d:c7:7f:9a:df:1c:b1:80:4c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: Jan 31 11:00:21 2025 GMT
Not After : Feb 1 11:00:21 2025 GMT
Subject: CN=9ebc0e8bc72243f3c0771512944d70c5896f8343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:a0:c6:7c:63:b0:3d:85:51:b1:55:86:6b:
ba:2e:5c:9c:49:e9:70:f0:ca:8a:a2:15:d2:08:c5:
1e:f3:c4:bc:8a:17:ca:83:0f:51:39:18:89:7f:21:
92:bb:cd:d5:cc:94:61:12:32:d2:fd:91:6e:1e:a6:
2e:d8:66:13:8d:b4:53:1c:24:7e:fd:50:ca:48:df:
64:50:bd:d3:1f:cd:fd:12:80:b0:2c:08:f0:d7:92:
e4:35:58:f5:0a:77:4e:d2:4c:cc:58:26:5c:43:83:
03:a3:c2:ce:a0:40:f5:e1:f6:f0:71:b7:df:44:ec:
14:30:ff:00:9c:c0:a3:9f:8d:ee:8e:64:c3:e5:5a:
51:ea:dd:6b:37:92:93:ad:3e:1b:8d:b4:8b:08:56:
3d:b5:d9:fe:9c:e4:85:9e:6f:7c:0c:3a:6f:5c:89:
ac:b5:80:fb:9f:ae:03:29:0c:fd:45:7c:9f:c4:7d:
a8:dc:0c:c7:48:e9:13:f8:8b:3d:75:0d:20:54:6e:
77:71:9f:46:58:72:7a:3e:71:99:27:d1:d2:df:b1:
84:69:3a:8e:7e:f3:31:68:c5:c3:0a:dc:f2:e0:f5:
63:d4:1b:54:19:4d:b6:74:d8:b7:63:76:58:79:04:
55:25:af:d7:52:a3:4e:ce:b8:fe:05:0b:55:9c:73:
64:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BC:0E:8B:C7:22:43:F3:C0:77:15:12:94:4D:70:C5:89:6F:83:43
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:08:7b:aa:27:2f:f2:41:bb:41:38:3f:29:1c:39:6b:ca:24:
d4:29:9c:23:3f:d5:f3:c8:2d:ed:46:be:9b:63:17:b1:7c:b7:
ed:c0:c8:fb:c3:43:39:df:3e:80:6b:af:6d:61:c9:b7:cf:31:
b0:7e:70:27:6a:73:4f:27:a9:7b:9c:8b:73:d6:b1:ce:51:16:
9b:0b:f8:42:c9:bc:d8:da:23:02:69:af:c9:85:bf:71:7c:fa:
1d:85:50:74:64:21:ff:f3:44:3f:1a:d6:10:0d:eb:42:a5:56:
7a:7f:60:f7:ec:22:cc:b8:cd:12:af:a7:05:fe:78:d1:76:53:
82:19:46:29:08:b2:10:bc:66:61:87:ec:db:dc:ce:56:48:8b:
0f:1d:88:be:a3:0a:f9:41:f6:45:2c:9a:22:3d:20:4b:b4:20:
f0:05:7e:f3:f5:b9:05:09:ab:7a:bb:fb:22:f2:6a:b0:5d:b4:
2a:0c:f3:82:cf:e0:b1:a4:48:ea:dd:b6:d8:7d:0e:14:4f:a3:
a1:6e:09:b4:a7:ae:49:a7:1e:15:cc:da:6d:1d:da:f2:74:07:
d5:39:17:d4:3d:d8:13:be:2d:21:a0:0d:38:0e:29:6d:44:31:
56:3c:5b:26:a6:28:ea:a8:8c:d7:fe:1e:b7:17:6e:44:0b:f5:
99:65:61:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BNnApTYNx3+a3xyxgEzoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwNjM5YWRmMWUwYjg0YjlmZjY0ZTRmOGViZTYzOGViYmY1
ZDI3YjkwHhcNMjUwMTMxMTEwMDIxWhcNMjUwMjAxMTEwMDIxWjAzMTEwLwYDVQQD
Eyg5ZWJjMGU4YmM3MjI0M2YzYzA3NzE1MTI5NDRkNzBjNTg5NmY4MzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumegxnxjsD2FUbFVhmu6LlycSelw
8MqKohXSCMUe88S8ihfKgw9RORiJfyGSu83VzJRhEjLS/ZFuHqYu2GYTjbRTHCR+
/VDKSN9kUL3TH839EoCwLAjw15LkNVj1CndO0kzMWCZcQ4MDo8LOoED14fbwcbff
ROwUMP8AnMCjn43ujmTD5VpR6t1rN5KTrT4bjbSLCFY9tdn+nOSFnm98DDpvXIms
tYD7n64DKQz9RXyfxH2o3AzHSOkT+Is9dQ0gVG53cZ9GWHJ6PnGZJ9HS37GEaTqO
fvMxaMXDCtzy4PVj1BtUGU22dNi3Y3ZYeQRVJa/XUqNOzrj+BQtVnHNk1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ68DovHIkPzwHcVEpRNcMWJb4NDMB8GA1UdIwQY
MBaAFKBjmt8eC4S5/2Tk+OvmOOu/XSe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjIt
ODEzYzVhYWI3ODNlLzEvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wYzM2M2MtMmQwZS00YmNhLWE5ZjItODEzYzVhYWI3ODNl
LzEvb0dPYTN4NExoTG5fWk9UNDYtWTQ2NzlkSjdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAh7qicv
8kG7QTg/KRw5a8ok1CmcIz/V88gt7Ua+m2MXsXy37cDI+8NDOd8+gGuvbWHJt88x
sH5wJ2pzTyepe5yLc9axzlEWmwv4Qsm82NojAmmvyYW/cXz6HYVQdGQh//NEPxrW
EA3rQqVWen9g9+wizLjNEq+nBf540XZTghlGKQiyELxmYYfs29zOVkiLDx2IvqMK
+UH2RSyaIj0gS7Qg8AV+8/W5BQmrerv7IvJqsF20Kgzzgs/gsaRI6t222H0OFE+j
oW4JtKeuSaceFczabR3a8nQH1TkX1D3YE74tIaANOA4pbUQxVjxbJqYo6qiM1/4e
txduRAv1mWVhNw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:35 2025 by rpki-client