Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
File: Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft (raw, json)
Hash identifier: yH2AsTapNN4/UpBQYGLfVOvjamnM+fEfV/gM1lV5swQ=
Subject key identifier: 13:12:94:75:89:FD:48:E7:AA:86:5D:32:71:91:DF:EE:B9:BA:CA:AF
Authority key identifier: 3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
Certificate issuer: /CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Certificate serial: 0195E15A2519E013414A609E9D02724464C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
Manifest number: 14C0
Signing time: Sat 29 Mar 2025 10:02:16 +0000
Manifest this update: Sat 29 Mar 2025 10:02:16 +0000
Manifest next update: Sun 30 Mar 2025 10:02:16 +0000
Files and hashes: 1: KfvqJ792oMd34Pp7PugqoZjhvkw.roa (hash: S302iUZeOLpzdWoDN+iw2GhCZ0Q0jKKUkWWXOnKtMnU=)
2: Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl (hash: fzGI+vQ6taJsU/d22BF4gbK265svbUTstPXB2wb+7XQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:5a:25:19:e0:13:41:4a:60:9e:9d:02:72:44:64:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aedd3c7273d9ab364a314da481e5ba51f84296f
Validity
Not Before: Mar 29 10:02:16 2025 GMT
Not After : Mar 30 10:02:16 2025 GMT
Subject: CN=1312947589fd48e7aa865d327191dfeeb9bacaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:73:21:a1:3b:5d:15:74:05:f4:4f:ce:f0:1b:
2d:db:0f:b9:8c:c9:63:97:d6:0b:91:fa:17:1f:97:
56:ff:2c:da:46:10:5b:68:30:51:38:90:ca:89:d7:
71:02:e3:bb:4f:16:8b:22:9a:b5:7f:c7:42:db:7c:
12:c2:80:29:4c:3c:7f:ad:6e:8e:2e:6d:ac:18:5c:
b1:99:e6:16:d5:af:cd:d2:bf:29:d4:32:22:5f:ef:
87:0b:d2:e3:9c:9a:24:c0:1f:79:f3:4c:61:b8:9a:
1e:63:5e:29:ee:50:46:76:15:f5:ff:ef:a7:f3:9a:
85:ed:77:d5:e9:54:9f:c2:fb:5b:c5:9b:d1:54:c2:
b4:5a:06:80:1f:41:35:dc:7e:81:3c:13:fd:29:00:
3f:27:a2:24:2a:2d:56:fc:ac:f2:38:60:85:f8:c8:
49:bf:ed:94:3b:97:43:de:12:c0:bc:6d:e0:19:8c:
c0:cc:89:05:07:47:89:e2:21:4c:18:45:1e:3c:31:
13:0f:93:d1:60:86:a6:0e:1e:f8:b8:c6:25:4a:20:
5e:f4:aa:00:a9:96:b5:2e:b6:d7:56:ca:67:62:fe:
d3:9a:28:71:29:8d:0f:c5:b8:a0:dd:8c:fe:e5:6d:
bd:49:ab:fd:c8:a8:f0:95:92:1f:61:2e:86:7e:1d:
b7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:12:94:75:89:FD:48:E7:AA:86:5D:32:71:91:DF:EE:B9:BA:CA:AF
X509v3 Authority Key Identifier:
keyid:3A:ED:D3:C7:27:3D:9A:B3:64:A3:14:DA:48:1E:5B:A5:1F:84:29:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/62c92a-5c23-48d7-bca2-63f04095a4c4/1/Ou3Txyc9mrNkoxTaSB5bpR-EKW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:be:3d:17:fe:92:c8:ab:c5:04:24:7f:e3:3f:02:fb:fd:8f:
87:43:58:f1:4d:e6:2b:b4:e4:55:3e:39:1b:7b:76:bb:2b:b3:
21:89:5b:f4:2d:95:8e:8b:bf:78:d0:ae:fd:a1:46:db:2d:82:
1e:a0:9c:94:f7:be:d9:22:77:1a:ab:6d:76:03:f8:09:c6:9d:
9b:8e:ff:b8:1b:0d:d8:ff:08:b1:85:b5:23:e3:51:7a:aa:a2:
d6:b9:6f:da:b1:aa:27:32:4e:1b:ac:38:f0:1d:70:46:ab:17:
31:6a:24:6e:84:20:3a:31:45:28:29:f4:d1:03:60:23:fb:f7:
25:b6:2f:48:c7:16:6a:eb:b4:bc:5d:6a:2e:8d:23:76:01:c5:
99:1b:27:e7:3e:d4:61:c8:bf:dd:4f:f2:15:4d:e7:82:82:2a:
98:b7:19:ac:2a:d0:7e:96:64:af:be:44:4a:7a:eb:d6:60:bc:
66:a5:b6:df:61:44:44:2b:c6:84:2e:57:ed:19:62:1d:d6:76:
95:4b:a0:f4:e7:a3:c3:9c:bb:ce:1b:41:51:85:0f:79:2f:44:
b2:80:b0:76:6f:77:5a:bf:e0:75:4f:5d:58:70:80:59:2a:b1:
36:c2:85:63:f4:72:17:2a:4c:3f:bf:2d:a0:e7:74:9f:12:b2:
e2:90:28:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWiUZ4BNBSmCenQJyRGTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZWRkM2M3MjczZDlhYjM2NGEzMTRkYTQ4MWU1YmE1MWY4
NDI5NmYwHhcNMjUwMzI5MTAwMjE2WhcNMjUwMzMwMTAwMjE2WjAzMTEwLwYDVQQD
EygxMzEyOTQ3NTg5ZmQ0OGU3YWE4NjVkMzI3MTkxZGZlZWI5YmFjYWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nMhoTtdFXQF9E/O8Bst2w+5jMlj
l9YLkfoXH5dW/yzaRhBbaDBROJDKiddxAuO7TxaLIpq1f8dC23wSwoApTDx/rW6O
Lm2sGFyxmeYW1a/N0r8p1DIiX++HC9LjnJokwB9580xhuJoeY14p7lBGdhX1/++n
85qF7XfV6VSfwvtbxZvRVMK0WgaAH0E13H6BPBP9KQA/J6IkKi1W/KzyOGCF+MhJ
v+2UO5dD3hLAvG3gGYzAzIkFB0eJ4iFMGEUePDETD5PRYIamDh74uMYlSiBe9KoA
qZa1LrbXVspnYv7TmihxKY0Pxbig3Yz+5W29Sav9yKjwlZIfYS6Gfh23cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMSlHWJ/UjnqoZdMnGR3+65usqvMB8GA1UdIwQY
MBaAFDrt08cnPZqzZKMU2kgeW6UfhClvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3UzVHh5Yzltck5rb3hUYVNCNWJwUi1FS1c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82MmM5MmEtNWMyMy00OGQ3LWJjYTIt
NjNmMDQwOTVhNGM0LzEvT3UzVHh5Yzltck5rb3hUYVNCNWJwUi1FS1c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82MmM5MmEtNWMyMy00OGQ3LWJjYTItNjNmMDQwOTVhNGM0
LzEvT3UzVHh5Yzltck5rb3hUYVNCNWJwUi1FS1c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsL49F/6S
yKvFBCR/4z8C+/2Ph0NY8U3mK7TkVT45G3t2uyuzIYlb9C2Vjou/eNCu/aFG2y2C
HqCclPe+2SJ3GqttdgP4Ccadm47/uBsN2P8IsYW1I+NReqqi1rlv2rGqJzJOG6w4
8B1wRqsXMWokboQgOjFFKCn00QNgI/v3JbYvSMcWauu0vF1qLo0jdgHFmRsn5z7U
Yci/3U/yFU3ngoIqmLcZrCrQfpZkr75ESnrr1mC8ZqW232FERCvGhC5X7RliHdZ2
lUug9Oejw5y7zhtBUYUPeS9EsoCwdm93Wr/gdU9dWHCAWSqxNsKFY/RyFypMP78t
oOd0nxKy4pAoHQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:22 2025 by rpki-client