Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
File: ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft (raw, json)
Hash identifier: W4/MLAtpfPrk3uzhkXEirGDelFCArAvAoJLZ/7TrJug=
Subject key identifier: E9:A8:58:99:5D:D6:63:43:9B:5E:A7:F0:25:58:75:FE:15:AE:F9:F9
Authority key identifier: A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
Certificate issuer: /CN=a20cc67154b403145d139469886127ab629eb928
Certificate serial: 0194BD85458BD41F0022181DF572C49537DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
Manifest number: 0E9D
Signing time: Fri 31 Jan 2025 18:00:15 +0000
Manifest this update: Fri 31 Jan 2025 18:00:15 +0000
Manifest next update: Sat 01 Feb 2025 18:00:15 +0000
Files and hashes: 1: 13rU8nhg31f282Ufq4fY9epK_mk.roa (hash: 71Un032C55jpwedQZGjeiCXgaYcH9RkzCt+gCgI2Wak=)
2: DDq525mddfr-xwBo8-T-YcAlqlM.roa (hash: vbBu7r+JS7z7+nPsGEJDbq+t4cp8fYea0z6mgr+ClXE=)
3: ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl (hash: 85mPqJPEBRWUb/YrMqe8kit0LobbMfe6bcRxp+bZWQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:45:8b:d4:1f:00:22:18:1d:f5:72:c4:95:37:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a20cc67154b403145d139469886127ab629eb928
Validity
Not Before: Jan 31 18:00:15 2025 GMT
Not After : Feb 1 18:00:15 2025 GMT
Subject: CN=e9a858995dd663439b5ea7f0255875fe15aef9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:fb:f9:b6:b0:a1:33:c3:47:ba:c6:f9:8d:
58:d3:ad:64:97:0e:e1:61:dc:0b:42:0b:6c:88:96:
78:7a:24:69:9c:28:2c:c8:b1:f9:b4:08:f6:f6:06:
da:53:0f:e9:07:1b:6b:ee:f0:bd:21:a7:90:29:61:
f9:17:4f:d8:34:b0:64:58:0a:3e:7f:4d:8b:67:4e:
d7:c5:f6:29:e0:10:c4:28:1e:b7:7f:a6:e8:b2:86:
ce:b1:18:da:c3:31:39:78:64:2c:14:25:01:c2:f6:
b4:90:a3:36:cb:ac:51:29:b4:fe:3b:5b:ea:8f:d6:
d9:fd:64:a3:85:36:04:05:09:7c:61:83:7d:3f:98:
1f:33:31:ba:3c:ec:59:75:49:98:a6:c8:5a:2f:2a:
6a:ae:dd:c3:a0:bf:6a:00:c5:2c:d8:8d:96:6a:9f:
ef:5e:0c:10:11:f5:f4:86:c5:fb:30:37:f1:9d:88:
2a:1b:5f:04:21:4f:83:89:ac:8c:58:0a:1f:3a:ed:
06:7f:46:44:14:81:0b:ff:8f:39:c1:f0:e9:56:98:
92:4e:ce:8f:fe:f4:b8:35:8c:6e:c0:80:23:97:e7:
b2:a5:27:52:d4:d1:0d:c4:73:cd:65:31:5d:75:50:
10:23:15:78:e6:9a:11:ed:d9:50:48:14:08:4a:83:
7b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:A8:58:99:5D:D6:63:43:9B:5E:A7:F0:25:58:75:FE:15:AE:F9:F9
X509v3 Authority Key Identifier:
keyid:A2:0C:C6:71:54:B4:03:14:5D:13:94:69:88:61:27:AB:62:9E:B9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogzGcVS0AxRdE5RpiGEnq2KeuSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/dd8878-2941-4c15-b204-8fc33737ceab/1/ogzGcVS0AxRdE5RpiGEnq2KeuSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:00:6d:3a:85:dd:d5:d8:7e:8c:3d:fc:78:f9:2b:52:56:d9:
d7:ee:e8:32:23:20:1c:0a:5a:8c:f7:6a:81:87:9c:5e:65:33:
63:a1:c5:ac:92:a2:6d:3a:f6:ac:26:16:23:78:c6:50:d1:f0:
34:b5:c7:69:cf:9c:ac:44:3b:f4:0e:a6:d4:26:2e:af:51:15:
56:56:86:2c:6a:16:f7:c7:67:c1:e2:9a:bd:f3:f0:f4:fb:9a:
14:e1:9b:9d:85:0e:e1:6d:56:a5:9b:32:6e:03:b7:6d:d5:b4:
d0:90:ee:c4:b0:14:6b:a6:a6:8b:6b:b6:9e:a1:4e:f2:5f:40:
a2:73:55:b4:a5:37:91:d2:37:ba:5b:c3:98:76:fe:e5:4c:ee:
c2:b0:1b:36:25:53:d9:f0:59:de:54:32:9d:81:61:d6:f4:a7:
dd:64:2b:9f:c1:d5:46:e8:63:20:a0:14:23:70:3c:88:d4:5b:
9e:3b:8f:37:9b:aa:11:bc:75:a0:4b:00:cb:25:87:b1:61:0a:
e6:29:ef:fc:ee:2b:44:84:4f:a8:a0:d3:a2:40:bf:ff:9a:0d:
1f:04:cb:93:15:04:f0:fd:05:f1:fc:e6:fe:0d:c1:94:63:cf:
8c:b8:9f:e7:de:e4:18:99:89:c7:1a:91:1f:b0:f0:08:f0:0a:
ab:61:c9:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUWL1B8AIhgd9XLElTffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMGNjNjcxNTRiNDAzMTQ1ZDEzOTQ2OTg4NjEyN2FiNjI5
ZWI5MjgwHhcNMjUwMTMxMTgwMDE1WhcNMjUwMjAxMTgwMDE1WjAzMTEwLwYDVQQD
EyhlOWE4NTg5OTVkZDY2MzQzOWI1ZWE3ZjAyNTU4NzVmZTE1YWVmOWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlD7+bawoTPDR7rG+Y1Y061klw7h
YdwLQgtsiJZ4eiRpnCgsyLH5tAj29gbaUw/pBxtr7vC9IaeQKWH5F0/YNLBkWAo+
f02LZ07XxfYp4BDEKB63f6bosobOsRjawzE5eGQsFCUBwva0kKM2y6xRKbT+O1vq
j9bZ/WSjhTYEBQl8YYN9P5gfMzG6POxZdUmYpshaLypqrt3DoL9qAMUs2I2Wap/v
XgwQEfX0hsX7MDfxnYgqG18EIU+DiayMWAofOu0Gf0ZEFIEL/485wfDpVpiSTs6P
/vS4NYxuwIAjl+eypSdS1NENxHPNZTFddVAQIxV45poR7dlQSBQISoN7dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOmoWJld1mNDm16n8CVYdf4Vrvn5MB8GA1UdIwQY
MBaAFKIMxnFUtAMUXROUaYhhJ6tinrkoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQt
OGZjMzM3MzdjZWFiLzEvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9kZDg4NzgtMjk0MS00YzE1LWIyMDQtOGZjMzM3MzdjZWFi
LzEvb2d6R2NWUzBBeFJkRTVScGlHRW5xMktldVNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgBtOoXd
1dh+jD38ePkrUlbZ1+7oMiMgHApajPdqgYecXmUzY6HFrJKibTr2rCYWI3jGUNHw
NLXHac+crEQ79A6m1CYur1EVVlaGLGoW98dnweKavfPw9PuaFOGbnYUO4W1WpZsy
bgO3bdW00JDuxLAUa6ami2u2nqFO8l9AonNVtKU3kdI3ulvDmHb+5UzuwrAbNiVT
2fBZ3lQynYFh1vSn3WQrn8HVRuhjIKAUI3A8iNRbnjuPN5uqEbx1oEsAyyWHsWEK
5inv/O4rRIRPqKDTokC//5oNHwTLkxUE8P0F8fzm/g3BlGPPjLif597kGJmJxxqR
H7DwCPAKq2HJ7Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:18 2025 by rpki-client