Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7aecac-8c07-4caf-9f8f-ab5eae359ec1/1/_O0D04ABjDmSitVuuZbNJqqv4Q4.mft
File: _O0D04ABjDmSitVuuZbNJqqv4Q4.mft (raw, json)
Hash identifier: QTYB2/EEVyn2ZWt5g68vcXg/MX7fasj0V/VerR+JKYE=
Subject key identifier: 1E:CE:33:83:92:33:18:30:27:B4:43:4A:50:C3:BD:75:BF:C6:99:FA
Authority key identifier: FC:ED:03:D3:80:01:8C:39:92:8A:D5:6E:B9:96:CD:26:AA:AF:E1:0E
Certificate issuer: /CN=fced03d380018c39928ad56eb996cd26aaafe10e
Certificate serial: 019349B1CFBE4C0CB43ACDA5863FFB920F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_O0D04ABjDmSitVuuZbNJqqv4Q4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7aecac-8c07-4caf-9f8f-ab5eae359ec1/1/_O0D04ABjDmSitVuuZbNJqqv4Q4.mft
Manifest number: 04
Signing time: Wed 20 Nov 2024 13:10:09 +0000
Manifest this update: Wed 20 Nov 2024 13:10:09 +0000
Manifest next update: Thu 21 Nov 2024 13:10:09 +0000
Files and hashes: 1: LVMG4oQOiJpMqGecBINuzYM5mW0.roa (hash: kkjxmfsjmVilq4brh2qtPCBtashb/7Mv5igBXyg8qZg=)
2: _O0D04ABjDmSitVuuZbNJqqv4Q4.crl (hash: MCyLMXscWOwTbneLGDjdwfNzBCPt89uYJ0BugouPL5I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:49:b1:cf:be:4c:0c:b4:3a:cd:a5:86:3f:fb:92:0f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fced03d380018c39928ad56eb996cd26aaafe10e
Validity
Not Before: Nov 20 13:10:09 2024 GMT
Not After : Nov 21 13:10:09 2024 GMT
Subject: CN=1ece33839233183027b4434a50c3bd75bfc699fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:38:70:84:7e:6b:84:46:6e:cd:30:3b:be:
35:2d:2f:ca:73:4d:3c:b3:96:c8:ef:e2:a3:c0:00:
44:7f:3b:e1:2f:13:53:33:38:d3:af:0c:e4:e4:54:
2d:6e:10:75:8f:5e:46:2a:5d:56:cc:a9:59:bd:63:
6a:2e:3c:88:ce:5d:31:31:da:05:88:99:31:6d:76:
5a:ef:cb:63:9a:5f:41:42:98:27:d4:17:8f:40:2d:
1b:9f:65:bc:d9:00:d7:3b:4a:31:8d:41:86:62:a6:
f7:66:71:f1:29:5d:98:0d:1f:4a:73:c1:51:7f:88:
10:18:21:12:fd:88:83:aa:79:18:77:95:93:de:4d:
ba:d8:13:42:11:e1:85:77:bb:a7:22:2c:75:20:b9:
c1:a6:c1:f4:c0:58:dd:64:33:f4:80:5a:e6:ef:ae:
30:7d:2c:46:a2:34:61:86:a6:2e:59:77:aa:f9:64:
eb:1f:c1:68:2a:eb:a4:20:c8:82:15:49:e2:2e:cc:
8e:9f:c2:a0:2e:f7:5b:06:69:27:c6:96:4e:60:08:
52:8b:8d:b7:46:7a:85:c0:88:09:20:c0:d4:5f:55:
11:19:e5:fa:46:45:eb:36:e6:0d:70:13:c0:dc:9b:
6e:b6:48:0b:7b:dd:24:51:f7:ca:43:02:26:3d:55:
86:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CE:33:83:92:33:18:30:27:B4:43:4A:50:C3:BD:75:BF:C6:99:FA
X509v3 Authority Key Identifier:
keyid:FC:ED:03:D3:80:01:8C:39:92:8A:D5:6E:B9:96:CD:26:AA:AF:E1:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_O0D04ABjDmSitVuuZbNJqqv4Q4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7aecac-8c07-4caf-9f8f-ab5eae359ec1/1/_O0D04ABjDmSitVuuZbNJqqv4Q4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7aecac-8c07-4caf-9f8f-ab5eae359ec1/1/_O0D04ABjDmSitVuuZbNJqqv4Q4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:32:59:36:64:50:0e:c3:39:96:e0:9b:4b:0b:ac:80:da:97:
ce:d4:c6:64:9e:59:77:3b:31:e4:18:34:2b:aa:3b:bd:6f:6a:
30:3c:4d:98:95:27:ba:7d:f4:d5:b2:68:8e:ff:3a:98:f1:5d:
17:3f:58:45:0f:81:c3:ab:38:07:bb:64:bd:cd:fc:d8:fe:00:
93:7e:b8:d0:c3:c1:f9:7e:e4:5b:10:bd:24:ef:7a:c9:dc:de:
53:4f:f0:2d:33:6c:3a:fc:f0:75:44:0a:59:a7:4a:b4:0a:ec:
cb:3d:d2:44:94:d7:47:4c:6a:b8:b3:63:88:4f:9a:e1:57:4e:
9c:09:90:c5:01:cb:80:4d:5b:57:b4:ed:e1:43:9e:06:39:a8:
f4:e4:41:20:a4:d1:c3:5d:f8:1e:87:70:72:5b:24:da:25:4c:
fc:a9:0d:18:0c:ee:ae:38:40:38:10:44:32:6f:42:c6:36:2a:
d7:53:b8:21:17:b8:b0:de:b9:ee:e0:37:f1:23:03:15:a2:e5:
bd:33:76:94:49:69:05:86:2a:11:02:8a:18:a0:6d:79:f2:74:
b9:a9:7c:42:da:16:2e:58:40:8e:db:ea:f2:84:6b:b2:16:e2:
8b:76:3a:d5:55:a9:a2:ef:eb:ab:7c:d1:fd:02:d0:47:14:d5:
23:8e:f1:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNJsc++TAy0Os2lhj/7kg9JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZWQwM2QzODAwMThjMzk5MjhhZDU2ZWI5OTZjZDI2YWFh
ZmUxMGUwHhcNMjQxMTIwMTMxMDA5WhcNMjQxMTIxMTMxMDA5WjAzMTEwLwYDVQQD
EygxZWNlMzM4MzkyMzMxODMwMjdiNDQzNGE1MGMzYmQ3NWJmYzY5OWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMA4cIR+a4RGbs0wO741LS/Kc008
s5bI7+KjwABEfzvhLxNTMzjTrwzk5FQtbhB1j15GKl1WzKlZvWNqLjyIzl0xMdoF
iJkxbXZa78tjml9BQpgn1BePQC0bn2W82QDXO0oxjUGGYqb3ZnHxKV2YDR9Kc8FR
f4gQGCES/YiDqnkYd5WT3k262BNCEeGFd7unIix1ILnBpsH0wFjdZDP0gFrm764w
fSxGojRhhqYuWXeq+WTrH8FoKuukIMiCFUniLsyOn8KgLvdbBmknxpZOYAhSi423
RnqFwIgJIMDUX1URGeX6RkXrNuYNcBPA3JtutkgLe90kUffKQwImPVWGLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7OM4OSMxgwJ7RDSlDDvXW/xpn6MB8GA1UdIwQY
MBaAFPztA9OAAYw5korVbrmWzSaqr+EOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX08wRDA0QUJqRG1TaXRWdXVaYk5KcXF2NFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS83YWVjYWMtOGMwNy00Y2FmLTlmOGYt
YWI1ZWFlMzU5ZWMxLzEvX08wRDA0QUJqRG1TaXRWdXVaYk5KcXF2NFE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS83YWVjYWMtOGMwNy00Y2FmLTlmOGYtYWI1ZWFlMzU5ZWMx
LzEvX08wRDA0QUJqRG1TaXRWdXVaYk5KcXF2NFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTJZNmRQ
DsM5luCbSwusgNqXztTGZJ5Zdzsx5Bg0K6o7vW9qMDxNmJUnun301bJojv86mPFd
Fz9YRQ+Bw6s4B7tkvc382P4Ak3640MPB+X7kWxC9JO96ydzeU0/wLTNsOvzwdUQK
WadKtArsyz3SRJTXR0xquLNjiE+a4VdOnAmQxQHLgE1bV7Tt4UOeBjmo9ORBIKTR
w134Hodwclsk2iVM/KkNGAzurjhAOBBEMm9CxjYq11O4IRe4sN657uA38SMDFaLl
vTN2lElpBYYqEQKKGKBtefJ0ual8QtoWLlhAjtvq8oRrshbii3Y61VWpou/rq3zR
/QLQRxTVI47xPQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:41:59 2025 by rpki-client