Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
File: _OJaykNP7rb1c6pGOhLGlAvE0Zg.mft (raw, json)
Hash identifier: MLWKE/kpVC5duknHhtUsyj749aTO6ApGUY5gxXF7Jac=
Subject key identifier: A7:9C:E8:95:B9:C7:3D:E9:13:14:48:67:80:A5:DA:58:9D:25:F7:68
Authority key identifier: FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
Certificate issuer: /CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Certificate serial: 0195E1223F706B5CEDECC88ACEE45A203CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
Manifest number: 14C5
Signing time: Sat 29 Mar 2025 09:01:12 +0000
Manifest this update: Sat 29 Mar 2025 09:01:12 +0000
Manifest next update: Sun 30 Mar 2025 09:01:12 +0000
Files and hashes: 1: PIvjtjk0bcL1uBI75s2x-HEScf0.roa (hash: zVKNd6h1T8gwJhJ85/3bttBRHKLXvm4f0amj7KVDyew=)
2: _OJaykNP7rb1c6pGOhLGlAvE0Zg.crl (hash: S84YxRNXWvMLDVSndolNSGJ9ch7drP8n0brfg99fLJY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:3f:70:6b:5c:ed:ec:c8:8a:ce:e4:5a:20:3c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fce25aca434feeb6f573aa463a12c6940bc4d198
Validity
Not Before: Mar 29 09:01:12 2025 GMT
Not After : Mar 30 09:01:12 2025 GMT
Subject: CN=a79ce895b9c73de91314486780a5da589d25f768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:65:6a:8d:d5:7e:6a:a0:a5:6f:d6:4b:b2:
a0:7c:e9:e2:bb:89:45:aa:8c:58:9e:10:63:48:bf:
fd:ab:2f:0f:83:2e:8d:ee:11:78:2c:ec:10:5b:89:
25:20:97:5e:05:c5:2c:43:a2:84:ad:cc:44:3e:fa:
2a:da:8f:3f:dc:72:30:e0:05:94:52:c3:98:78:69:
b1:50:98:a4:bd:36:7e:0b:e2:67:b9:0a:6a:cc:ef:
7c:79:ae:a3:4d:7f:63:c0:cf:a8:c2:ee:35:08:20:
c3:77:c1:05:8e:00:36:1e:26:76:b7:a6:da:d0:78:
7f:21:a6:7b:c7:92:0c:bd:ba:66:03:72:20:45:7b:
98:5f:c5:5c:b7:23:b2:6e:29:af:49:2e:5a:ed:41:
db:ab:ab:b5:d8:c3:a9:a5:ce:b5:23:28:08:e1:a3:
5f:e8:fa:4b:2c:59:87:83:57:5f:60:a7:0f:c4:76:
79:02:d6:2e:48:c3:d5:fc:7a:2d:73:55:3b:89:e3:
b4:f4:6d:93:e2:ba:d7:24:7b:6b:0d:8f:9d:16:3a:
cc:5c:af:e3:82:bf:1c:21:34:f2:ff:36:8f:94:25:
e1:55:9e:34:e8:ae:5f:2d:5b:f1:81:26:9c:3d:79:
8c:39:cb:53:bf:09:9c:a3:87:ad:37:30:23:2e:5c:
55:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9C:E8:95:B9:C7:3D:E9:13:14:48:67:80:A5:DA:58:9D:25:F7:68
X509v3 Authority Key Identifier:
keyid:FC:E2:5A:CA:43:4F:EE:B6:F5:73:AA:46:3A:12:C6:94:0B:C4:D1:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OJaykNP7rb1c6pGOhLGlAvE0Zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0c9dbb-f2ef-4f15-8b2e-643e447444d6/1/_OJaykNP7rb1c6pGOhLGlAvE0Zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:09:5f:19:64:4d:a4:c7:9b:98:95:cc:b4:44:73:56:85:e3:
f1:45:97:aa:4a:15:de:71:23:a3:4d:f0:6e:f0:b4:32:91:46:
de:7d:10:d4:5f:e9:c2:52:69:df:da:58:1c:74:eb:8b:c7:92:
15:0e:7d:f9:06:24:ca:cc:a7:74:23:47:2b:b1:9a:ca:d4:df:
78:53:1c:b4:ae:e8:8a:2e:0b:33:5b:4c:b5:d0:fe:c1:89:db:
f8:3f:e0:a6:49:90:f9:8a:bf:9d:7e:c2:4b:c4:8e:62:68:e4:
e9:93:b3:45:01:32:2f:d5:80:66:68:64:f8:ed:e7:42:5c:69:
9d:fc:7c:4a:06:c1:e8:f5:44:81:ba:21:0f:94:33:8d:9f:37:
9f:ff:73:34:3a:b4:a9:e4:ba:02:65:e5:01:f0:0f:f6:cc:27:
a2:cb:83:b9:01:85:ed:22:92:16:4f:b0:6d:bd:62:12:bf:75:
6e:92:a8:14:57:b3:12:b6:a3:56:75:89:fc:c1:e1:0a:df:67:
40:a0:a9:f0:42:da:4e:72:5c:67:32:6c:e2:c6:f9:7c:56:37:
22:94:3f:3a:91:12:30:29:54:08:ae:a1:ea:9b:42:9c:07:52:
da:d8:6e:9e:a3:ca:33:45:f7:6f:76:2e:71:c9:ef:60:6b:2d:
91:9f:62:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhIj9wa1zt7MiKzuRaIDzLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZTI1YWNhNDM0ZmVlYjZmNTczYWE0NjNhMTJjNjk0MGJj
NGQxOTgwHhcNMjUwMzI5MDkwMTEyWhcNMjUwMzMwMDkwMTEyWjAzMTEwLwYDVQQD
EyhhNzljZTg5NWI5YzczZGU5MTMxNDQ4Njc4MGE1ZGE1ODlkMjVmNzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3llao3VfmqgpW/WS7KgfOniu4lF
qoxYnhBjSL/9qy8Pgy6N7hF4LOwQW4klIJdeBcUsQ6KErcxEPvoq2o8/3HIw4AWU
UsOYeGmxUJikvTZ+C+JnuQpqzO98ea6jTX9jwM+owu41CCDDd8EFjgA2HiZ2t6ba
0Hh/IaZ7x5IMvbpmA3IgRXuYX8VctyOybimvSS5a7UHbq6u12MOppc61IygI4aNf
6PpLLFmHg1dfYKcPxHZ5AtYuSMPV/Hotc1U7ieO09G2T4rrXJHtrDY+dFjrMXK/j
gr8cITTy/zaPlCXhVZ406K5fLVvxgSacPXmMOctTvwmco4etNzAjLlxVOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKec6JW5xz3pExRIZ4Cl2lidJfdoMB8GA1UdIwQY
MBaAFPziWspDT+629XOqRjoSxpQLxNGYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8wYzlkYmItZjJlZi00ZjE1LThiMmUt
NjQzZTQ0NzQ0NGQ2LzEvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8wYzlkYmItZjJlZi00ZjE1LThiMmUtNjQzZTQ0NzQ0NGQ2
LzEvX09KYXlrTlA3cmIxYzZwR09oTEdsQXZFMFpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABglfGWRN
pMebmJXMtERzVoXj8UWXqkoV3nEjo03wbvC0MpFG3n0Q1F/pwlJp39pYHHTri8eS
FQ59+QYkysyndCNHK7GaytTfeFMctK7oii4LM1tMtdD+wYnb+D/gpkmQ+Yq/nX7C
S8SOYmjk6ZOzRQEyL9WAZmhk+O3nQlxpnfx8SgbB6PVEgbohD5QzjZ83n/9zNDq0
qeS6AmXlAfAP9swnosuDuQGF7SKSFk+wbb1iEr91bpKoFFezErajVnWJ/MHhCt9n
QKCp8ELaTnJcZzJs4sb5fFY3IpQ/OpESMClUCK6h6ptCnAdS2thunqPKM0X3b3Yu
ccnvYGstkZ9i5A==
-----END CERTIFICATE-----
Generated at Mon Apr 7 08:18:47 2025 by rpki-client