Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File: oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier: 1WaSX3AjaUnm9A2XdNV8TXqYnHoz5P/GYR9a0Tv3wIY=
Subject key identifier: C6:DE:8E:6A:8D:91:3F:27:2B:87:2B:B9:5B:81:13:D5:54:45:A8:49
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 0194BCE071608FC657DBB3FE870B9C1960BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number: 063D
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: KGkiu_v0VLQmN7S0ksdeT71QkrU.roa (hash: JLkvT5B6nB370rTNimZvN5bMsuGtWZVcc7r812WnkMQ=)
2: KNUQ7DDU2baaPPVNDmRvLm-9Uqw.roa (hash: y7ygx++W/kXlD3JbB4xfsy1iAiffOMC9/nRL3EOds2U=)
3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: 7NvcQNGcdON31ssXldnA1t4ZM4IvzB6/H4msXpOmD1Y=)
4: qPIbjSN2yzTtuHjuLt4WE39NKes.roa (hash: tATEM+JFA1bxRwxg9JQmVMVUQWh9DxygoWoynUU65ks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:71:60:8f:c6:57:db:b3:fe:87:0b:9c:19:60:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=c6de8e6a8d913f272b872bb95b8113d55445a849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:43:9f:4e:a9:08:e0:cd:05:4e:65:5c:79:bb:
fb:a9:a5:75:2e:31:b9:93:35:59:b4:ab:2d:ab:53:
8c:e5:46:eb:4a:f7:54:85:eb:13:56:e8:2b:5c:4b:
e9:14:d1:55:97:6d:23:06:f0:bb:e7:78:57:8d:4f:
25:46:f3:ba:38:63:4c:65:03:a0:9d:c5:8c:60:88:
b3:30:71:41:c9:48:66:42:a2:1b:1b:28:85:f0:4d:
d2:5b:6a:69:9a:c2:3e:b7:6a:81:8b:8e:eb:ce:93:
91:df:38:eb:bb:d1:4e:6d:a1:f0:29:83:0c:d8:a4:
55:48:2f:d6:c1:03:9d:0a:c3:75:74:f0:57:2b:38:
c3:d0:56:f5:d3:ab:29:e3:1a:b6:f4:31:62:90:cf:
2c:af:a4:00:12:7a:eb:59:e6:d1:17:38:50:29:ea:
9c:aa:9a:cf:92:fb:a2:10:e3:1d:0f:2c:93:4a:fb:
c9:cd:86:89:c9:3c:41:d8:dd:86:e9:86:09:b5:93:
d3:86:f2:96:85:2e:fb:d7:87:81:f3:d8:71:de:82:
4e:8f:66:f6:09:16:c8:e1:c1:9e:d4:b1:52:e6:37:
a4:c9:80:12:87:53:81:ed:f0:36:cb:02:02:5e:27:
8a:df:24:c4:45:51:93:ad:d5:a1:32:76:8c:02:33:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DE:8E:6A:8D:91:3F:27:2B:87:2B:B9:5B:81:13:D5:54:45:A8:49
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:9c:d9:9f:ab:00:c2:ca:fd:8b:e5:41:92:f6:15:26:94:a2:
ee:96:60:79:77:7a:15:0f:82:0c:ac:03:0d:e9:55:20:39:f9:
5a:18:d8:8a:1e:a0:ab:ed:a3:c3:ee:b7:27:5e:23:4c:fd:d0:
79:cd:03:29:bb:b0:87:1f:cf:72:6c:d1:53:d7:8f:ce:da:13:
72:35:2b:54:d4:0a:ec:df:69:47:78:3d:2f:58:c9:2f:36:73:
6f:ab:94:5f:bd:ee:32:2c:78:a8:cc:55:da:f1:d9:42:81:96:
fe:e7:46:a4:8e:a5:b4:95:5f:c8:0e:00:a8:f4:e4:81:81:4d:
c8:20:99:12:22:08:58:b7:42:44:d1:8d:d6:bf:b7:a3:da:ba:
61:2a:18:3b:a7:ac:20:41:9f:a7:84:2b:f9:be:9f:69:a7:ea:
78:89:32:0f:55:6c:63:53:ad:34:3d:4f:16:5c:55:d3:64:2b:
57:aa:20:61:9b:0f:b9:21:a1:96:20:8e:42:8a:a8:30:a4:0a:
77:c0:9d:c0:62:5e:9d:46:a4:4a:aa:ab:25:3e:9b:04:e8:a9:
b8:48:d5:0d:ca:0c:e6:a3:52:11:79:94:30:70:7f:7f:ca:a7:
a4:6d:30:6e:54:5f:76:35:58:fa:f9:38:0d:7e:ee:87:c8:38:
b7:21:13:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HFgj8ZX27P+hwucGWC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExODE2NGQ5OTYxYTE2ZDJlZmY3NzNmNTAyNzgyMWU5ZDJi
ZDM3NDAwHhcNMjUwMTMxMTUwMDEzWhcNMjUwMjAxMTUwMDEzWjAzMTEwLwYDVQQD
EyhjNmRlOGU2YThkOTEzZjI3MmI4NzJiYjk1YjgxMTNkNTU0NDVhODQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00OfTqkI4M0FTmVcebv7qaV1LjG5
kzVZtKstq1OM5UbrSvdUhesTVugrXEvpFNFVl20jBvC753hXjU8lRvO6OGNMZQOg
ncWMYIizMHFByUhmQqIbGyiF8E3SW2ppmsI+t2qBi47rzpOR3zjru9FObaHwKYMM
2KRVSC/WwQOdCsN1dPBXKzjD0Fb106sp4xq29DFikM8sr6QAEnrrWebRFzhQKeqc
qprPkvuiEOMdDyyTSvvJzYaJyTxB2N2G6YYJtZPThvKWhS7714eB89hx3oJOj2b2
CRbI4cGe1LFS5jekyYASh1OB7fA2ywICXieK3yTERVGTrdWhMnaMAjMIzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbejmqNkT8nK4cruVuBE9VURahJMB8GA1UdIwQY
MBaAFKGBZNmWGhbS7/dz9QJ4IenSvTdAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iOGVkMmQtMzU0NS00NTk5LTk3ZTUt
MTUyMzgwM2ZhZGFmLzEvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9iOGVkMmQtMzU0NS00NTk5LTk3ZTUtMTUyMzgwM2ZhZGFm
LzEvb1lGazJaWWFGdEx2OTNQMUFuZ2g2ZEs5TjBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJzZn6sA
wsr9i+VBkvYVJpSi7pZgeXd6FQ+CDKwDDelVIDn5WhjYih6gq+2jw+63J14jTP3Q
ec0DKbuwhx/PcmzRU9ePztoTcjUrVNQK7N9pR3g9L1jJLzZzb6uUX73uMix4qMxV
2vHZQoGW/udGpI6ltJVfyA4AqPTkgYFNyCCZEiIIWLdCRNGN1r+3o9q6YSoYO6es
IEGfp4Qr+b6faafqeIkyD1VsY1OtND1PFlxV02QrV6ogYZsPuSGhliCOQoqoMKQK
d8CdwGJenUakSqqrJT6bBOipuEjVDcoM5qNSEXmUMHB/f8qnpG0wblRfdjVY+vk4
DX7uh8g4tyETxg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:39 2025 by rpki-client