Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
File: 0y0esOyO9aIwRXqXAueqOWhYGAw.mft (raw, json)
Hash identifier: YbmRcHjZAfDc+JDr27qkmSJShKdva2BNqqGdbFA6iDs=
Subject key identifier: 20:23:09:40:08:48:5A:01:57:29:AC:F8:EC:AB:72:A5:FF:FB:28:E1
Authority key identifier: D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
Certificate issuer: /CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Certificate serial: 0194BD17AA629E866A15EE4471A98332045A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
Manifest number: 0839
Signing time: Fri 31 Jan 2025 16:00:32 +0000
Manifest this update: Fri 31 Jan 2025 16:00:32 +0000
Manifest next update: Sat 01 Feb 2025 16:00:32 +0000
Files and hashes: 1: 0y0esOyO9aIwRXqXAueqOWhYGAw.crl (hash: xjiewk8EdTvtJszJd8FHztqL/uOHzOTS0HxwmiSLeaw=)
2: sK3ZBrWvjwd-LkmXtEXI8mmDAIM.roa (hash: OKskFb0lNjQYUF2WZOv8rV/0FbI0umbg74GYmLaJ8S4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:aa:62:9e:86:6a:15:ee:44:71:a9:83:32:04:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d32d1eb0ec8ef5a230457a9702e7aa396858180c
Validity
Not Before: Jan 31 16:00:32 2025 GMT
Not After : Feb 1 16:00:32 2025 GMT
Subject: CN=2023094008485a015729acf8ecab72a5fffb28e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:af:da:ba:e6:55:2b:20:f3:f1:06:4b:38:
91:7e:a9:a8:f9:a7:0e:73:37:b9:81:79:a2:9f:39:
25:11:37:a6:95:9d:23:9d:e2:57:04:bd:58:d7:05:
bc:bc:8b:32:a4:f9:d1:cf:55:60:49:f2:e2:09:5f:
37:60:be:31:d5:44:1a:86:07:1d:86:47:89:ed:a4:
b1:ea:74:05:dd:ca:6d:8a:50:dd:4b:02:6e:4f:04:
ce:80:7c:d1:34:a5:8c:16:a6:4b:0f:c7:ab:bb:9c:
26:ff:c1:8a:f8:13:7f:1e:b0:a2:9d:fe:7f:1a:0f:
3e:f7:6c:10:1b:b2:ea:59:a3:6f:ba:77:7b:b4:2e:
83:84:4a:ac:64:14:a0:a3:92:a3:df:bb:5a:cc:8f:
2d:97:5f:9a:9d:54:c2:e3:43:af:a7:85:f2:8b:6f:
60:47:32:db:7f:a7:38:b2:df:09:12:f7:ef:57:df:
28:a9:ba:54:28:69:25:b0:37:80:f6:2b:47:a6:b6:
27:b6:06:34:42:43:09:6a:0a:72:83:4c:1c:8c:bc:
14:5e:39:dd:b1:40:fc:b9:61:44:cc:58:78:7b:c4:
d7:0d:fb:d4:76:af:e3:3b:7c:ad:64:30:ef:25:45:
ea:44:e5:9c:6e:a8:00:88:0f:ed:35:7b:7d:e3:81:
b5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:23:09:40:08:48:5A:01:57:29:AC:F8:EC:AB:72:A5:FF:FB:28:E1
X509v3 Authority Key Identifier:
keyid:D3:2D:1E:B0:EC:8E:F5:A2:30:45:7A:97:02:E7:AA:39:68:58:18:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0esOyO9aIwRXqXAueqOWhYGAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/51d445-f070-4ca9-a02b-2e1f9be95573/1/0y0esOyO9aIwRXqXAueqOWhYGAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5e:af:10:39:77:78:9b:24:bc:22:0e:d2:b6:e5:48:76:bc:
65:68:9d:b2:6b:d4:4f:55:83:6c:e7:c6:ad:0c:1f:3e:47:59:
7d:65:4a:bd:13:df:81:d3:d8:57:0d:08:5b:18:b2:b5:4c:bc:
05:c4:66:ca:d0:04:df:9d:68:69:fe:c4:cc:8f:01:28:ae:92:
80:ae:db:5c:09:cf:b3:18:c2:74:78:66:08:28:67:52:91:2e:
3a:3f:2e:d6:d0:ee:24:23:58:30:90:52:42:03:65:cf:c5:bf:
72:ec:4b:29:d0:c2:55:e5:95:3a:a9:9c:52:b7:37:b2:99:35:
e0:77:52:a1:e1:b8:3b:02:19:85:ea:56:e5:96:4e:ad:0c:bc:
46:c5:44:68:96:1f:08:11:bf:ea:80:8b:7c:95:13:6d:a2:e5:
f6:ba:e4:5b:0d:d8:02:41:0f:24:ce:57:4b:c8:f7:e9:aa:38:
da:af:de:4b:98:4a:4b:e4:93:8c:7d:f2:82:56:b6:c5:69:17:
2b:7e:55:ac:d2:52:5e:5e:49:0c:83:86:53:ff:f9:8e:7c:26:
2e:1f:16:5b:ef:5b:1e:7c:97:3c:77:6a:37:b7:97:48:a8:d7:
de:28:37:f8:a1:bd:e0:12:b6:1b:06:54:f2:55:a4:f1:2d:23:
32:a3:2b:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F6pinoZqFe5EcamDMgRaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMmQxZWIwZWM4ZWY1YTIzMDQ1N2E5NzAyZTdhYTM5Njg1
ODE4MGMwHhcNMjUwMTMxMTYwMDMyWhcNMjUwMjAxMTYwMDMyWjAzMTEwLwYDVQQD
EygyMDIzMDk0MDA4NDg1YTAxNTcyOWFjZjhlY2FiNzJhNWZmZmIyOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX+v2rrmVSsg8/EGSziRfqmo+acO
cze5gXminzklETemlZ0jneJXBL1Y1wW8vIsypPnRz1VgSfLiCV83YL4x1UQahgcd
hkeJ7aSx6nQF3cptilDdSwJuTwTOgHzRNKWMFqZLD8eru5wm/8GK+BN/HrCinf5/
Gg8+92wQG7LqWaNvund7tC6DhEqsZBSgo5Kj37tazI8tl1+anVTC40Ovp4Xyi29g
RzLbf6c4st8JEvfvV98oqbpUKGklsDeA9itHprYntgY0QkMJagpyg0wcjLwUXjnd
sUD8uWFEzFh4e8TXDfvUdq/jO3ytZDDvJUXqROWcbqgAiA/tNXt944G1DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAjCUAISFoBVyms+OyrcqX/+yjhMB8GA1UdIwQY
MBaAFNMtHrDsjvWiMEV6lwLnqjloWBgMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmIt
MmUxZjliZTk1NTczLzEvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81MWQ0NDUtZjA3MC00Y2E5LWEwMmItMmUxZjliZTk1NTcz
LzEvMHkwZXNPeU85YUl3UlhxWEF1ZXFPV2hZR0F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ16vEDl3
eJskvCIO0rblSHa8ZWidsmvUT1WDbOfGrQwfPkdZfWVKvRPfgdPYVw0IWxiytUy8
BcRmytAE351oaf7EzI8BKK6SgK7bXAnPsxjCdHhmCChnUpEuOj8u1tDuJCNYMJBS
QgNlz8W/cuxLKdDCVeWVOqmcUrc3spk14HdSoeG4OwIZhepW5ZZOrQy8RsVEaJYf
CBG/6oCLfJUTbaLl9rrkWw3YAkEPJM5XS8j36ao42q/eS5hKS+STjH3ygla2xWkX
K35VrNJSXl5JDIOGU//5jnwmLh8WW+9bHnyXPHdqN7eXSKjX3ig3+KG94BK2GwZU
8lWk8S0jMqMrmQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:50 2025 by rpki-client