Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
File: Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json)
Hash identifier: 3iZf23EPL/ppYJSURDC1tn/3H35GvRsOdzXz9uav/UM=
Subject key identifier: 80:5C:B1:11:B7:0F:EC:2A:1E:AC:C8:48:FE:82:AC:E0:7C:6A:C4:DE
Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Certificate serial: 0194BC729F8055408AE87D35FB08324220A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
Manifest number: 0D7C
Signing time: Fri 31 Jan 2025 13:00:15 +0000
Manifest this update: Fri 31 Jan 2025 13:00:15 +0000
Manifest next update: Sat 01 Feb 2025 13:00:15 +0000
Files and hashes: 1: 1-YME93lc1AWh4-bMqvVDZYenQg0.roa (hash: Euu0W5ctvY2bfvnvaMrD1zBWGCi2DVPvkYQ6p9zTjts=)
2: 6VWS3n4RTMZt4qfwQYtPtcl8wvQ.roa (hash: RPjYIX2A8yzZM6wOJ08qMOe4higCfakhv6DT1FMUwcY=)
3: B-5_egLdEl752iv9qxYdq8eosj8.roa (hash: Cdvp7KAkC+/9T90gVhhsMGICo5DVTrNIRp6EnoCK4JA=)
4: HdvJhluj0mmgaFdPVm0s0ofNMQM.roa (hash: p1LONhiWBtnwDM/uG7ENsu+2YSQKoESJAbc98yta6C4=)
5: PG5DPUzHhisMDmHNMi2OiyC4Krk.roa (hash: 5vgSE6xpOM3tTVvShPg0nfAqcYxZUDm3VYRogPEs1nM=)
6: QWifAQ3dSu8nhEAeOh_F1BphWro.roa (hash: itO7AV5EF/O+Sl0fYRa8cl6eA4q/nRa0iBG6sGElFQI=)
7: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: IeOWa9Ky/5yrdwEA2B64r6tctv3ByPq2oyuc10EGA/s=)
8: YDfEJ1iUjKpfcgb3p-AJ6kyYq9Y.roa (hash: JVT9CJbbA+vdIrvWETQHH3MkG5jcGr/5MxzuGejEyf4=)
9: cWGszmobGgkTRu82roBLKR9vgkE.roa (hash: bXFzT/7+8yagPIwyKl0fdIxc7uJ/wfFRRzbV8w0a7yI=)
10: flrC_8zXbr01pJXgtmy__huZXOA.roa (hash: vzxZLPURPSKJVHe6QAWg0rqm4QhuQOuF7VBOWspThjA=)
11: nGntDaqcmONxUi1sd87UMvT9x4I.roa (hash: JUPdqbOgdaD6LXB1MI+aJwuym5PZcQO3ILLdGvRsfU8=)
12: p_iHNwwqh2be0OjT5JQIUHp4Uvs.roa (hash: iKYw9dWKEOaAlzn5AmL4rdC2+rWU6FDA6bFijDgxb2w=)
13: sFVwAvso2RiBjXQQC5X8xPsYJBs.roa (hash: +5oPRTUTMFR48JZpxxq3OBMXLIXgfURgzHz46nSWc5o=)
14: wrjsV9Plh-M37H4LnSQtWzZ1gnQ.roa (hash: rjU+UzGtqBvLsIIcsGOyIUWY5DaFnE1B9GlLdLm0Pcc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:9f:80:55:40:8a:e8:7d:35:fb:08:32:42:20:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca
Validity
Not Before: Jan 31 13:00:15 2025 GMT
Not After : Feb 1 13:00:15 2025 GMT
Subject: CN=805cb111b70fec2a1eacc848fe82ace07c6ac4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:c6:9b:a7:75:ed:a8:26:47:60:e5:ec:42:
6e:42:f4:45:33:9b:87:63:d3:0e:77:c9:bf:aa:fb:
00:f8:65:1d:8f:05:17:23:bc:56:fa:3e:73:3e:4b:
fa:6a:39:f9:bc:a8:ce:4f:fd:29:cb:6c:a0:04:d6:
bf:7a:4e:c5:8a:ab:2d:5b:1b:8b:c3:9d:0a:c4:07:
a6:49:d5:9b:76:a1:da:69:3a:cd:dc:e7:6f:1f:6b:
58:e3:76:71:cc:ff:d1:bc:73:d2:af:8e:07:1b:e8:
42:66:47:31:7a:71:b7:82:e3:a1:3b:cb:82:98:60:
e3:58:df:14:c7:fa:c5:9b:16:a1:da:b2:db:d1:7b:
94:5a:b9:2b:54:91:d5:52:95:1e:37:68:3f:72:0e:
3f:7a:8b:1e:f0:ab:30:3c:29:ca:9a:ee:73:8f:18:
c1:6e:6d:c0:58:6e:42:e7:db:81:8d:91:1c:af:32:
b6:7a:bb:24:b5:96:f7:ec:ec:17:fd:ef:b7:59:cf:
cc:64:7b:3f:a5:06:37:75:38:59:3e:c0:4a:11:49:
02:9d:45:c4:4e:d9:f4:55:8f:da:ff:81:e4:30:f5:
cc:6b:1a:3d:4f:00:8a:ac:f8:9b:c8:b6:fd:73:6d:
b8:69:1b:fa:10:b2:cc:33:e3:a9:92:3a:c5:9b:f9:
fb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5C:B1:11:B7:0F:EC:2A:1E:AC:C8:48:FE:82:AC:E0:7C:6A:C4:DE
X509v3 Authority Key Identifier:
keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:35:99:46:a8:2b:ea:91:fc:dc:24:60:a1:17:16:52:88:22:
a6:ea:52:87:22:c5:8b:10:bc:52:54:99:ee:56:cc:93:6a:33:
0a:45:a1:18:f2:84:cd:f7:02:43:13:e8:44:78:bd:e7:c4:43:
27:d0:b8:5c:bc:66:4d:15:47:80:cc:42:98:d3:01:27:21:e5:
51:bb:f0:4b:a4:f1:45:58:4e:51:ad:47:ed:8d:10:a5:ed:88:
27:1a:5f:47:62:b4:be:20:cf:5d:48:86:68:b0:44:98:30:ef:
18:22:dc:b1:fa:ba:12:3b:9c:f6:c5:64:8a:d0:95:9a:41:a4:
99:7b:f6:d2:75:a7:46:a4:da:83:09:5c:b0:ff:55:82:5c:f4:
34:4f:b0:9a:aa:e0:c5:f2:41:43:79:6c:27:38:bc:f1:70:e4:
fe:99:b5:27:ac:5b:7d:b9:89:b8:7a:f3:ee:7d:bb:63:1a:81:
34:3e:aa:c8:45:fe:7e:9d:9c:7e:7b:7a:21:58:87:3c:6f:3f:
11:a8:74:b6:5a:5c:f4:74:f4:0c:5e:fa:1f:84:ee:91:0c:97:
ff:6a:f2:89:82:de:f3:69:80:e7:56:b6:b2:4e:87:4d:d0:10:
03:e9:41:54:de:8c:b1:0d:b9:67:da:6b:b1:ad:9f:c6:02:38:
00:64:7e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:32 2025 by rpki-client