Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/e5e0ce-4a06-4341-a367-763f5ba2eab1/1/OAQJN7AY47QGl-ghUbWIsoCdrmA.mft
File: OAQJN7AY47QGl-ghUbWIsoCdrmA.mft (raw, json)
Hash identifier: pjIzze5HRQA97s42UfyPy57KVRHzryOu/3ePlMygYnI=
Subject key identifier: 3F:77:E4:E6:54:6D:04:84:A1:49:66:15:FB:EE:97:53:9E:18:71:67
Authority key identifier: 38:04:09:37:B0:18:E3:B4:06:97:E8:21:51:B5:88:B2:80:9D:AE:60
Certificate issuer: /CN=38040937b018e3b40697e82151b588b2809dae60
Certificate serial: 018F4BD928B07CAC2DD118678D93F6FCAEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OAQJN7AY47QGl-ghUbWIsoCdrmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/e5e0ce-4a06-4341-a367-763f5ba2eab1/1/OAQJN7AY47QGl-ghUbWIsoCdrmA.mft
Manifest number: 115B
Signing time: Mon 06 May 2024 03:01:13 +0000
Manifest this update: Mon 06 May 2024 03:01:13 +0000
Manifest next update: Tue 07 May 2024 03:01:13 +0000
Files and hashes: 1: ERBlLCTAki0B_U4e5rOBl7JHyIE.roa (hash: 22NhhOb/lDaBy20YQTPjdx6w35XCSgnTD2ZDVBtX6Lw=)
2: OAQJN7AY47QGl-ghUbWIsoCdrmA.crl (hash: EbDSwmQiuVmnEgg3MUV4Ud3wSB61qWjFiRRXTcl/9t4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4b:d9:28:b0:7c:ac:2d:d1:18:67:8d:93:f6:fc:ae:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38040937b018e3b40697e82151b588b2809dae60
Validity
Not Before: May 6 03:01:13 2024 GMT
Not After : May 7 03:01:13 2024 GMT
Subject: CN=3f77e4e6546d0484a1496615fbee97539e187167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:08:dd:4e:09:03:86:1e:6c:56:55:9d:33:
1b:80:42:75:98:6d:16:01:f6:df:35:f6:f0:b9:13:
ff:35:16:7a:a7:62:31:88:08:51:ab:c2:fb:13:b9:
a7:c6:1d:fe:80:b6:25:1b:60:92:4c:45:8f:6a:fa:
cb:a4:29:c7:1a:48:ce:55:8a:ed:9c:4b:4b:14:6c:
9c:de:fa:f7:50:be:15:22:73:59:08:38:0b:6b:48:
57:26:90:03:65:dc:2b:de:71:b6:93:c1:12:e8:77:
21:6d:ed:07:1c:52:4a:dc:f1:82:7a:ca:a1:07:97:
08:62:51:27:87:c6:b4:52:17:25:22:a1:2f:d6:a2:
f2:cc:39:55:bc:1c:70:a6:f8:12:d6:e3:ff:ae:f2:
43:55:c6:50:21:6c:46:b0:e7:53:4f:01:99:90:f4:
86:c0:85:81:9f:a3:b7:7e:c6:52:b9:3f:8a:43:05:
f6:ff:ca:af:0a:bb:a1:49:98:d6:80:17:44:ed:99:
67:95:30:06:4a:74:c0:57:26:96:dd:ab:42:42:c0:
c2:3b:3f:96:f6:7f:09:4d:25:a8:85:04:5d:68:32:
98:ec:65:e0:00:97:d1:f8:01:10:0a:57:38:96:02:
a7:5c:2f:59:be:68:7a:cc:30:05:15:ed:89:c2:51:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:77:E4:E6:54:6D:04:84:A1:49:66:15:FB:EE:97:53:9E:18:71:67
X509v3 Authority Key Identifier:
keyid:38:04:09:37:B0:18:E3:B4:06:97:E8:21:51:B5:88:B2:80:9D:AE:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OAQJN7AY47QGl-ghUbWIsoCdrmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e5e0ce-4a06-4341-a367-763f5ba2eab1/1/OAQJN7AY47QGl-ghUbWIsoCdrmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/e5e0ce-4a06-4341-a367-763f5ba2eab1/1/OAQJN7AY47QGl-ghUbWIsoCdrmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c9:ff:9f:ab:b7:30:03:90:ec:40:a6:cd:94:d9:9c:2b:15:
18:8b:5f:a6:0e:5e:c9:e4:5c:68:d0:5e:2b:35:4c:f4:a9:4f:
36:2e:cd:3f:3c:f5:eb:05:1e:5b:b4:7b:ea:35:a1:85:5c:9c:
74:35:85:11:23:16:06:48:c1:f1:92:b0:09:8b:99:77:62:18:
7c:2e:a7:91:90:e1:aa:b8:6d:69:b6:44:f4:22:37:53:7a:45:
f6:b5:34:20:a2:e6:78:5d:28:75:61:c3:0f:05:c2:56:9a:2b:
e5:37:79:14:aa:71:0c:82:67:fe:11:8a:d6:7f:da:c4:1e:8f:
8c:34:42:04:c9:0d:17:f4:a1:2a:06:67:0e:63:9a:1d:9a:cb:
c7:5a:8a:22:12:2d:fa:a1:bb:87:9a:3f:af:3e:53:8e:34:58:
84:c7:b8:fb:ff:ec:86:9a:88:17:3f:56:a0:ae:34:d7:de:f0:
6f:ee:5d:a6:20:83:24:96:27:a1:da:6b:6d:b0:b0:6c:a5:de:
4d:ed:ba:36:62:3e:e4:4f:25:50:04:bf:e0:6b:cd:c4:37:0a:
e4:06:d6:9b:64:e5:20:a9:45:4e:28:83:5b:1e:68:99:ae:20:
fd:75:a6:cf:86:f6:85:14:7b:43:e9:17:71:c2:14:fe:aa:24:
b3:cd:47:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9L2SiwfKwt0RhnjZP2/K7uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4MDQwOTM3YjAxOGUzYjQwNjk3ZTgyMTUxYjU4OGIyODA5
ZGFlNjAwHhcNMjQwNTA2MDMwMTEzWhcNMjQwNTA3MDMwMTEzWjAzMTEwLwYDVQQD
EygzZjc3ZTRlNjU0NmQwNDg0YTE0OTY2MTVmYmVlOTc1MzllMTg3MTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IgI3U4JA4YebFZVnTMbgEJ1mG0W
AfbfNfbwuRP/NRZ6p2IxiAhRq8L7E7mnxh3+gLYlG2CSTEWPavrLpCnHGkjOVYrt
nEtLFGyc3vr3UL4VInNZCDgLa0hXJpADZdwr3nG2k8ES6Hchbe0HHFJK3PGCesqh
B5cIYlEnh8a0UhclIqEv1qLyzDlVvBxwpvgS1uP/rvJDVcZQIWxGsOdTTwGZkPSG
wIWBn6O3fsZSuT+KQwX2/8qvCruhSZjWgBdE7ZlnlTAGSnTAVyaW3atCQsDCOz+W
9n8JTSWohQRdaDKY7GXgAJfR+AEQClc4lgKnXC9Zvmh6zDAFFe2JwlECrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD935OZUbQSEoUlmFfvul1OeGHFnMB8GA1UdIwQY
MBaAFDgECTewGOO0BpfoIVG1iLKAna5gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0FRSk43QVk0N1FHbC1naFViV0lzb0Nkcm1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lNWUwY2UtNGEwNi00MzQxLWEzNjct
NzYzZjViYTJlYWIxLzEvT0FRSk43QVk0N1FHbC1naFViV0lzb0Nkcm1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lNWUwY2UtNGEwNi00MzQxLWEzNjctNzYzZjViYTJlYWIx
LzEvT0FRSk43QVk0N1FHbC1naFViV0lzb0Nkcm1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcn/n6u3
MAOQ7ECmzZTZnCsVGItfpg5eyeRcaNBeKzVM9KlPNi7NPzz16wUeW7R76jWhhVyc
dDWFESMWBkjB8ZKwCYuZd2IYfC6nkZDhqrhtabZE9CI3U3pF9rU0IKLmeF0odWHD
DwXCVpor5Td5FKpxDIJn/hGK1n/axB6PjDRCBMkNF/ShKgZnDmOaHZrLx1qKIhIt
+qG7h5o/rz5TjjRYhMe4+//shpqIFz9WoK40197wb+5dpiCDJJYnodprbbCwbKXe
Te26NmI+5E8lUAS/4GvNxDcK5AbWm2TlIKlFTiiDWx5oma4g/XWmz4b2hRR7Q+kX
ccIU/qoks81HTg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:29 2025 by rpki-client