Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
File: o6mFw54-kRuYDpOgZkAVfp4FLSM.mft (raw, json)
Hash identifier: 1z8lsB80+gQ0dM3aWTJ638q9/X0+JNWzt5sfZfk3f3s=
Subject key identifier: C9:3A:DC:70:A5:65:C6:ED:E5:BE:16:B9:27:31:78:AF:DF:04:94:45
Authority key identifier: A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23
Certificate issuer: /CN=a3a985c39e3e911b980e93a06640157e9e052d23
Certificate serial: 0194BD179EE11F682B673D779B11BC09216A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
Manifest number: 0F96
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: 3REEAprnZIBusO6q6WWrCX9P-HM.roa (hash: vH8qgeYWcERpU9E7qeOHsrxBazYwgyfC550mI+D0FkE=)
2: PYHZmBGQVm6qfdBJdxdjvraE_TE.roa (hash: 1636pEj+Ysk8BXs8R24x5ID69mQlJkn8VfyV6uxXy1w=)
3: o6mFw54-kRuYDpOgZkAVfp4FLSM.crl (hash: 2OvXoKq0axkS3XZB655B2hEiNU5ANeHnBCYMn04rgjc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:9e:e1:1f:68:2b:67:3d:77:9b:11:bc:09:21:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a985c39e3e911b980e93a06640157e9e052d23
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=c93adc70a565c6ede5be16b9273178afdf049445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:f8:0b:37:45:d1:b0:d7:06:2a:fe:7e:ac:
ce:d3:1e:4d:2e:2e:39:37:d0:36:51:91:54:f9:94:
5d:96:92:86:73:20:f1:b6:17:e1:c6:04:e8:26:73:
12:6e:fd:ba:da:74:72:87:ea:f6:ad:aa:0f:4d:8b:
d0:5e:a9:65:9f:5d:a2:4f:b3:0d:6a:05:0a:24:97:
09:90:84:d8:0f:17:1f:0b:1e:c9:33:17:86:f2:6d:
e4:aa:d9:88:cd:c6:c8:66:58:ad:df:7b:90:58:8d:
ad:4e:42:81:7c:a8:28:62:ed:5d:4d:f6:2d:f2:09:
41:11:11:7c:18:35:45:b2:00:a2:36:bc:7f:5b:14:
f8:c8:4f:42:19:63:67:17:a4:22:ef:c4:e8:ce:91:
0f:de:18:04:78:81:47:d5:01:d1:39:c2:6d:61:05:
53:98:80:03:2c:b4:01:1f:d5:eb:1a:fd:a8:f2:41:
16:87:95:cb:72:69:56:62:d3:4f:71:0e:e0:96:bd:
e2:0d:19:61:7f:ff:61:70:99:40:ee:98:5a:8f:2b:
16:57:58:ed:36:4d:a6:21:ea:0b:8c:4b:9a:a0:a1:
88:f3:49:ca:21:c6:03:ab:53:60:01:7d:57:5f:cb:
89:14:5c:42:2d:f6:42:ed:60:8d:17:03:89:2e:f7:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3A:DC:70:A5:65:C6:ED:E5:BE:16:B9:27:31:78:AF:DF:04:94:45
X509v3 Authority Key Identifier:
keyid:A3:A9:85:C3:9E:3E:91:1B:98:0E:93:A0:66:40:15:7E:9E:05:2D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6mFw54-kRuYDpOgZkAVfp4FLSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0fdf9e-f53f-467d-bc8c-3a563c210a55/1/o6mFw54-kRuYDpOgZkAVfp4FLSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f3:d7:92:a5:97:43:c0:22:41:81:e1:29:dd:44:0a:80:b4:
6a:db:e9:4e:17:35:38:fb:3c:c0:0a:23:68:6e:ae:12:7b:63:
46:b3:b2:a1:66:6e:e9:86:59:79:ab:42:f8:4e:c8:88:c0:46:
4e:ec:2c:5b:c3:18:c0:7f:94:35:43:4a:eb:35:1b:9f:2d:95:
59:de:5a:ce:67:52:cd:16:14:eb:8c:5d:7f:5e:44:d9:e1:11:
f3:3f:09:21:14:ef:98:90:1c:5c:98:10:48:53:db:f7:20:17:
32:b9:0f:44:9e:03:c7:a0:09:5c:1f:db:f2:37:6b:6b:bc:86:
a6:af:c6:22:9e:82:7e:23:e5:b4:8b:ee:15:f4:0d:d2:5d:41:
b1:8b:b9:1d:43:bf:58:ef:2a:7f:bb:04:70:b9:66:0c:3c:af:
73:2f:6b:3e:7c:45:11:46:01:a7:58:ab:b2:16:0c:2d:53:52:
59:10:b3:77:69:e4:d8:8e:7c:86:10:ee:0d:27:60:76:a2:02:
0d:29:8d:eb:66:d4:ac:b5:99:9c:34:25:37:d4:61:8e:d8:d4:
77:09:1c:61:2b:53:23:76:fa:3e:a3:5b:61:c6:4b:77:e7:3c:
20:44:bc:3c:52:b1:fa:27:8d:0e:eb:a2:fb:40:59:da:86:07:
8f:e0:81:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F57hH2grZz13mxG8CSFqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYTk4NWMzOWUzZTkxMWI5ODBlOTNhMDY2NDAxNTdlOWUw
NTJkMjMwHhcNMjUwMTMxMTYwMDI5WhcNMjUwMjAxMTYwMDI5WjAzMTEwLwYDVQQD
EyhjOTNhZGM3MGE1NjVjNmVkZTViZTE2YjkyNzMxNzhhZmRmMDQ5NDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvab4CzdF0bDXBir+fqzO0x5NLi45
N9A2UZFU+ZRdlpKGcyDxthfhxgToJnMSbv262nRyh+r2raoPTYvQXqlln12iT7MN
agUKJJcJkITYDxcfCx7JMxeG8m3kqtmIzcbIZlit33uQWI2tTkKBfKgoYu1dTfYt
8glBERF8GDVFsgCiNrx/WxT4yE9CGWNnF6Qi78TozpEP3hgEeIFH1QHROcJtYQVT
mIADLLQBH9XrGv2o8kEWh5XLcmlWYtNPcQ7glr3iDRlhf/9hcJlA7phajysWV1jt
Nk2mIeoLjEuaoKGI80nKIcYDq1NgAX1XX8uJFFxCLfZC7WCNFwOJLvf/lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMk63HClZcbt5b4WuScxeK/fBJRFMB8GA1UdIwQY
MBaAFKOphcOePpEbmA6ToGZAFX6eBS0jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZtRnc1NC1rUnVZRHBPZ1prQVZmcDRGTFNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8wZmRmOWUtZjUzZi00NjdkLWJjOGMt
M2E1NjNjMjEwYTU1LzEvbzZtRnc1NC1rUnVZRHBPZ1prQVZmcDRGTFNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8wZmRmOWUtZjUzZi00NjdkLWJjOGMtM2E1NjNjMjEwYTU1
LzEvbzZtRnc1NC1rUnVZRHBPZ1prQVZmcDRGTFNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePPXkqWX
Q8AiQYHhKd1ECoC0atvpThc1OPs8wAojaG6uEntjRrOyoWZu6YZZeatC+E7IiMBG
TuwsW8MYwH+UNUNK6zUbny2VWd5azmdSzRYU64xdf15E2eER8z8JIRTvmJAcXJgQ
SFPb9yAXMrkPRJ4Dx6AJXB/b8jdra7yGpq/GIp6CfiPltIvuFfQN0l1BsYu5HUO/
WO8qf7sEcLlmDDyvcy9rPnxFEUYBp1irshYMLVNSWRCzd2nk2I58hhDuDSdgdqIC
DSmN62bUrLWZnDQlN9RhjtjUdwkcYStTI3b6PqNbYcZLd+c8IES8PFKx+ieNDuui
+0BZ2oYHj+CBWw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:40:26 2025 by rpki-client