Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft
File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json)
Hash identifier: Cx5oPEb72uBNzW1BjiyvJPQS29ANNYrcwFlxqPnFZn0=
Subject key identifier: 9C:C0:C8:B0:9D:42:19:37:CB:B6:57:F4:27:6A:BA:12:BC:22:A0:E9
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 0194BC3C79C17D5CBA0AB47F84A3C43B6B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft
Manifest number: 0A22
Signing time: Fri 31 Jan 2025 12:01:07 +0000
Manifest this update: Fri 31 Jan 2025 12:01:07 +0000
Manifest next update: Sat 01 Feb 2025 12:01:07 +0000
Files and hashes: 1: 1-POXxYDt7Dx_Xn--bakvl-9pseo.roa (hash: dNDNUAiUbV+epjYiTNeffEC/Hr9nrD8OPyaHypk9Vrw=)
2: 4y5bYwDTL_VoolV8ldmGobMyCDM.roa (hash: 4h98m+CB5/drT3uAhhO5RYW+UxU86GYUGm8LVml6aUE=)
3: 8wknUCvN7dL5Ngyq2oYeYw2qKaA.roa (hash: 2x+7TMLohOium2m4btHhUYg1HhvZTp1KUAyfNFsWp/s=)
4: CREMqHNRtZMAgL_3QQz8QbKg6EI.roa (hash: ad2n+lNuuymsjsALF9GRHKc/gIh74hGgXC7FhHl2DRA=)
5: CYe_FylQBC35YAPXurtpIgFimIQ.roa (hash: DTdje2SGWnkKYzvIScF3Fa/xUC5bG87DDdchy0e9aCI=)
6: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (hash: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=)
7: KD0QGVZZHlzJH2sIzPN3BvCFuEw.roa (hash: 2sHKOaHU+WfcuH7knMpKw3QL927TDsSv0dYawbgXbII=)
8: NxoEIQ2YVafxL2j55w8lOvwqPoA.roa (hash: zWwJ2gpYs2QkfscAUHJn4EONxrlzIfSsglEL8F6Z4EM=)
9: Qe-CvDBFhBHZ8fOjbKuz23oGKeE.roa (hash: EHYNUAhY0OD7mkD4gRmiZGisTP3nLjxgXhPcOI6y/fQ=)
10: RjclhfmYJs-nn3YIpui-vTkLCP4.roa (hash: kHAmt3kfei8Efn3czRaKzPGSzcq/laoel6ixmjuKvgM=)
11: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: /GiHkXtdhr9HEukc6FZ39lAt40uJ2MtXTDq+8y2Cluc=)
12: ecGl7SXxfvzyrf_IROWG6PeXN6I.roa (hash: BeofmFT3DEwetEcQFY4kjdzbj6TWwwJHMUHk5ZEuYcY=)
13: mDxyiD9X-pKoSpMDHewalWK4frA.roa (hash: mOBdq9p0ho/s/u99fQ8BxCqlC+u1XlqpRxkj0tREVjY=)
14: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (hash: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=)
15: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (hash: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:79:c1:7d:5c:ba:0a:b4:7f:84:a3:c4:3b:6b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Jan 31 12:01:07 2025 GMT
Not After : Feb 1 12:01:07 2025 GMT
Subject: CN=9cc0c8b09d421937cbb657f4276aba12bc22a0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:2e:b7:7f:95:d4:67:2b:19:12:34:8c:a3:
48:2d:5e:81:31:4a:38:21:ee:26:ce:f7:d1:69:54:
d3:97:0f:3b:9a:22:d3:9b:4a:0c:00:4e:15:57:f9:
89:04:0c:ca:60:30:8b:6a:27:f4:36:bd:21:e6:b8:
b4:06:d4:94:fb:35:37:00:3d:0d:79:b8:43:e7:7f:
91:12:49:ec:2e:a3:1c:11:b0:11:15:d5:18:df:23:
a0:2c:f5:21:7c:92:34:f8:0c:08:f4:45:7f:98:ee:
32:9e:4a:fa:4d:55:cf:58:99:52:70:f6:84:9d:b1:
b8:37:21:61:c1:a6:8c:86:d3:a0:8d:fb:4e:56:1e:
8b:72:f4:be:98:1a:75:03:78:b9:d6:f4:fb:d6:e4:
14:b0:27:c7:87:fb:a3:c6:25:2f:5e:8b:ce:60:62:
bf:48:27:9e:2b:1d:78:f0:e0:a9:0c:e5:6c:a3:68:
1f:0d:63:b7:31:de:cf:2d:6c:3b:c3:b7:18:f2:cc:
6f:d7:37:b8:66:0b:1e:63:a9:9c:b7:9a:1e:6c:46:
59:85:69:75:16:cf:9c:ee:cd:2b:1c:20:81:a0:65:
40:db:22:9a:1d:f2:e4:85:42:35:0c:43:38:a9:d2:
74:61:7f:5a:33:67:86:ea:a0:10:b7:55:b6:bb:b4:
bc:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C0:C8:B0:9D:42:19:37:CB:B6:57:F4:27:6A:BA:12:BC:22:A0:E9
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e7:cf:01:c2:86:75:d4:54:9d:8e:3a:ce:47:cb:a6:0e:55:
a8:ef:a8:c8:a8:db:c8:d4:e4:36:86:83:9f:fe:be:ab:ed:93:
9b:e7:78:13:7a:9c:2a:4f:cc:7c:f9:aa:0c:70:4b:7b:bd:5c:
92:cb:5d:9a:6b:92:9e:03:6f:cb:af:db:be:97:8a:9a:80:cd:
44:a1:2d:2e:fe:21:51:c9:d5:f2:a4:10:05:a2:ea:ae:d5:64:
64:34:cd:af:f8:8f:e2:a1:bd:fd:79:0e:1f:02:cf:f5:5a:32:
48:cc:b7:25:d6:f1:15:d3:a7:eb:b3:e1:08:3a:ef:1a:5b:7f:
de:3b:e7:7f:46:13:73:ee:f1:f2:aa:ce:77:7b:bc:a0:4c:c1:
ec:17:30:43:7d:e2:e7:b0:c6:0d:7a:22:44:c7:f5:3a:3d:e7:
19:4b:a5:5c:5e:4d:7b:bf:4f:8a:07:5c:91:f8:fd:25:3e:2a:
89:7e:32:2f:a5:ac:99:b3:5d:16:d3:51:2c:a3:fb:3c:7e:22:
43:d5:cd:8e:b9:46:97:8b:19:6c:39:ca:fb:f3:26:dc:db:58:
b6:44:fd:08:b5:7f:36:c0:87:ac:2f:62:7d:1d:48:9a:fe:3e:
0b:0b:ea:2d:97:fa:b1:d2:d8:0e:c1:df:59:82:46:30:f4:91:
ee:94:6c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:35 2025 by rpki-client