Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
File: Oeh-8DzxcaQLor7InmiLudOCWHM.mft (raw, json)
Hash identifier: dS/HVkSM0ynb6y+b0ApxnN7t4DR2mDHIdAj6LkQ4qHE=
Subject key identifier: 86:1E:98:A9:5D:4A:FE:56:03:3C:DF:07:8E:5D:54:93:BC:C6:25:F1
Authority key identifier: 39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
Certificate issuer: /CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Certificate serial: 01962ECF4E131894F1F96238204325137263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
Manifest number: 14E8
Signing time: Sun 13 Apr 2025 11:00:59 +0000
Manifest this update: Sun 13 Apr 2025 11:00:59 +0000
Manifest next update: Mon 14 Apr 2025 11:00:59 +0000
Files and hashes: 1: Oeh-8DzxcaQLor7InmiLudOCWHM.crl (hash: hJtexPYXIkmdiwNoCWWvPJmU5DAXzsiA28Nz4JHY528=)
2: n5SYr_9AWl7ry045zaGcqL0nDKk.roa (hash: T+InoEanLxjmmolVeMM0w1zQ5q4vdK0ebBhDTbrVjAU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:4e:13:18:94:f1:f9:62:38:20:43:25:13:72:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39e87ef03cf171a40ba2bec89e688bb9d3825873
Validity
Not Before: Apr 13 11:00:59 2025 GMT
Not After : Apr 14 11:00:59 2025 GMT
Subject: CN=861e98a95d4afe56033cdf078e5d5493bcc625f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:21:0a:f6:67:22:43:31:2d:00:7a:9d:a5:66:
0a:53:67:31:46:7b:26:60:ea:33:42:98:fd:79:0a:
38:74:5b:80:6c:b2:b5:54:f3:bf:c5:ca:d1:b5:56:
8c:51:66:0c:53:98:3f:7a:b3:eb:78:80:fc:be:46:
b3:d7:79:78:5c:71:72:02:3a:de:62:12:c4:6c:38:
2f:1e:b1:d2:2b:2a:48:cf:96:18:fb:7d:22:ad:a9:
56:08:a2:81:8f:93:5b:31:52:c2:75:e1:d6:9c:d8:
68:10:6d:18:08:b4:2b:3d:27:ec:e6:67:2a:61:84:
80:20:4b:51:3f:fe:ab:fc:e4:f4:87:94:f1:5e:de:
c8:38:8a:bd:29:b3:4e:32:09:0b:d1:41:92:c6:d3:
bb:39:da:7a:13:69:60:cc:1d:b1:6a:a3:bd:1e:85:
ea:a1:aa:ff:8c:9b:52:ef:42:55:69:a7:dd:f2:6a:
49:7e:10:9d:05:d1:65:ee:46:af:63:65:7d:8a:70:
9f:4c:58:39:80:63:c0:ec:84:5d:98:3d:c5:aa:c1:
26:a0:6e:b0:81:27:29:d2:bf:20:8a:2f:07:01:18:
1d:3c:88:9f:27:39:00:ad:2d:40:9d:ba:93:68:9c:
cd:6a:f3:3d:a9:06:db:c0:1d:73:19:db:f7:e4:c9:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1E:98:A9:5D:4A:FE:56:03:3C:DF:07:8E:5D:54:93:BC:C6:25:F1
X509v3 Authority Key Identifier:
keyid:39:E8:7E:F0:3C:F1:71:A4:0B:A2:BE:C8:9E:68:8B:B9:D3:82:58:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oeh-8DzxcaQLor7InmiLudOCWHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/51a60c-cf63-443d-9e02-04dd56f70fe3/1/Oeh-8DzxcaQLor7InmiLudOCWHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:95:3a:83:c3:98:41:ac:79:91:20:34:13:c6:cd:4d:50:e6:
26:b0:3e:50:1e:54:fe:1b:19:c8:44:c2:dc:ce:9a:ba:44:c0:
96:8a:d1:62:ed:38:30:5e:02:14:65:02:5b:b0:47:a3:b1:55:
70:a6:12:f0:18:ab:63:71:35:f2:ea:78:85:9e:14:ee:34:98:
4d:14:61:d7:bc:74:51:7f:aa:28:aa:56:bb:55:ab:41:a9:6c:
fe:e7:78:50:cd:2e:f3:a3:8e:64:ba:ea:18:3e:d7:53:3d:5b:
98:31:0b:94:b6:ff:17:50:b1:6f:46:78:70:3d:e9:74:9c:82:
60:e7:3a:5b:8c:7a:55:70:d1:0d:2d:11:24:2c:41:a0:42:2e:
f5:89:4b:18:40:b8:c1:5e:dd:43:d4:ba:0a:5a:d8:73:1a:59:
f3:19:a6:1e:15:d5:a0:e0:1e:0c:92:54:57:0f:86:18:74:05:
1b:5d:c7:45:e5:59:6a:2f:29:b2:87:19:ad:c6:f5:eb:21:b7:
c0:5e:e8:89:42:cd:d9:45:74:7d:17:54:e2:a2:08:17:7c:c8:
d9:8f:56:da:3a:02:3f:8c:62:95:d5:a1:7c:8a:25:f9:9a:2d:
07:f0:f8:96:33:06:b8:65:ad:a0:3f:d1:a7:c1:1c:e7:29:f5:
a4:7c:48:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuz04TGJTx+WI4IEMlE3JjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZTg3ZWYwM2NmMTcxYTQwYmEyYmVjODllNjg4YmI5ZDM4
MjU4NzMwHhcNMjUwNDEzMTEwMDU5WhcNMjUwNDE0MTEwMDU5WjAzMTEwLwYDVQQD
Eyg4NjFlOThhOTVkNGFmZTU2MDMzY2RmMDc4ZTVkNTQ5M2JjYzYyNWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yEK9mciQzEtAHqdpWYKU2cxRnsm
YOozQpj9eQo4dFuAbLK1VPO/xcrRtVaMUWYMU5g/erPreID8vkaz13l4XHFyAjre
YhLEbDgvHrHSKypIz5YY+30iralWCKKBj5NbMVLCdeHWnNhoEG0YCLQrPSfs5mcq
YYSAIEtRP/6r/OT0h5TxXt7IOIq9KbNOMgkL0UGSxtO7Odp6E2lgzB2xaqO9HoXq
oar/jJtS70JVaafd8mpJfhCdBdFl7kavY2V9inCfTFg5gGPA7IRdmD3FqsEmoG6w
gScp0r8gii8HARgdPIifJzkArS1AnbqTaJzNavM9qQbbwB1zGdv35MnbSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYemKldSv5WAzzfB45dVJO8xiXxMB8GA1UdIwQY
MBaAFDnofvA88XGkC6K+yJ5oi7nTglhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2VoLThEenhjYVFMb3I3SW5taUx1ZE9DV0hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MWE2MGMtY2Y2My00NDNkLTllMDIt
MDRkZDU2ZjcwZmUzLzEvT2VoLThEenhjYVFMb3I3SW5taUx1ZE9DV0hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy81MWE2MGMtY2Y2My00NDNkLTllMDItMDRkZDU2ZjcwZmUz
LzEvT2VoLThEenhjYVFMb3I3SW5taUx1ZE9DV0hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJU6g8OY
Qax5kSA0E8bNTVDmJrA+UB5U/hsZyETC3M6aukTAlorRYu04MF4CFGUCW7BHo7FV
cKYS8BirY3E18up4hZ4U7jSYTRRh17x0UX+qKKpWu1WrQals/ud4UM0u86OOZLrq
GD7XUz1bmDELlLb/F1Cxb0Z4cD3pdJyCYOc6W4x6VXDRDS0RJCxBoEIu9YlLGEC4
wV7dQ9S6ClrYcxpZ8xmmHhXVoOAeDJJUVw+GGHQFG13HReVZai8psocZrcb16yG3
wF7oiULN2UV0fRdU4qIIF3zI2Y9W2joCP4xildWhfIol+ZotB/D4ljMGuGWtoD/R
p8Ec5yn1pHxIAw==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net