Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
File: cJSkJVlekjxLU7nAAKqPGa2SPyA.mft (raw, json)
Hash identifier: GYHEbNdU2LOK42ZgeucDQfd6spM9inoRKw+2QS5dvII=
Subject key identifier: AB:C3:03:7E:FA:B5:75:9D:12:B5:4E:06:77:9C:D0:6E:9E:8B:B1:6F
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Certificate issuer: /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial: 0194BC050EC347D4D0342FF92CFDD704B65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
Manifest number: 103F
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: ErcDe0XtLYd6d7uV6p9EKzdm4nk.roa (hash: 9p84KRKbOU/bcvDuyS4jKGMGlhWUqv7TM1ev7aRzlJY=)
2: GgOjLst_2cOjWFXXQ04HdoXttH4.roa (hash: z2Rfj6acoKtcXjm6dwLXQBUNElg6LrojkoNiCuSKCms=)
3: RUbC7Anwng13DAmADxwjexI1dI4.roa (hash: z1iIQJGzT3kqShcPysOpmjaiqY2qZ/jm3snobkdy6yE=)
4: cJSkJVlekjxLU7nAAKqPGa2SPyA.crl (hash: CoMN8kzptqzIT6jMI/A9Q4WAByZ2AxWUywweXWiJVhM=)
5: rSaIHtGhDT0jOkbwk5w9J-_5svc.roa (hash: DVoLZl1ZXv/1pFpFxvGq3uqDR2CUE2IcgixTkQGHWKU=)
6: vINa56fCeVCDS4vUdZniQRFScnk.roa (hash: OwhrDcsFYw40/6cM2acw4utCu4f6bHdMKEDQWjzNqYc=)
7: xMXgcnXxdQd2sNC4GoZAZpbxmo4.roa (hash: ntcfKusbnH6G9LFWYHB/n9gMG8BQt0xnq4XPHB5frGQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0e:c3:47:d4:d0:34:2f:f9:2c:fd:d7:04:b6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=abc3037efab5759d12b54e06779cd06e9e8bb16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:2f:ab:1c:eb:0a:c4:04:17:59:70:1b:7d:
97:4c:ac:27:60:98:ba:0d:3c:b4:52:cc:e3:61:84:
6c:c8:7c:35:c9:bd:83:f2:22:72:64:45:ca:23:34:
c5:bb:2a:9b:b0:6d:cf:a9:18:2f:97:9d:ba:dd:ed:
90:30:89:60:b4:60:e7:ec:29:17:0f:be:55:32:fa:
80:81:df:56:67:28:f3:ee:78:cd:b3:2e:a4:22:ce:
ed:12:80:ef:88:ab:3d:02:76:e7:f2:73:a5:21:38:
da:c5:ea:9f:29:f1:2d:74:d6:b1:69:0f:c0:b8:e8:
6a:06:96:51:b5:30:83:ff:91:39:2d:67:bc:90:3a:
a5:c9:35:72:20:48:c0:f8:72:19:92:3b:73:3f:5d:
32:f5:c5:44:26:f2:4e:2a:d9:66:f0:ae:3e:ad:14:
67:8c:d8:06:54:06:78:f1:86:2b:78:c1:c6:af:30:
4a:6e:fb:97:63:d3:76:9f:c4:ca:c0:82:3f:57:7d:
48:fb:92:e4:ef:b1:69:46:72:c6:f5:52:f2:e0:07:
d9:bd:fe:31:b6:f4:28:40:c7:fb:97:ae:30:5e:cb:
25:32:3e:6b:d5:63:5b:36:2b:00:ce:7d:bd:5c:a8:
cf:bb:6d:1b:59:9f:88:23:23:09:44:5d:5c:3e:da:
9c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C3:03:7E:FA:B5:75:9D:12:B5:4E:06:77:9C:D0:6E:9E:8B:B1:6F
X509v3 Authority Key Identifier:
keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cb:b7:3d:ef:5b:78:fd:c5:45:b8:63:d2:8f:09:7a:a5:c8:
90:fc:c8:85:db:d3:be:8f:78:65:1d:a2:0a:7e:5a:8a:da:03:
6e:97:be:6f:f9:74:de:a5:72:2a:e0:af:53:b1:51:9a:77:3a:
86:5c:1d:a8:68:c7:c5:42:d5:5b:c5:8d:3f:84:ae:ff:3c:d8:
e1:8d:d2:47:4e:2e:0c:bf:ab:48:77:d0:e3:3e:61:cd:b0:a1:
2f:52:63:6c:4d:20:4b:28:be:3a:27:b4:52:14:51:e0:6b:c2:
49:58:b8:dd:98:9b:c4:7b:9e:8d:9a:07:f5:64:85:c0:3f:54:
7e:2f:af:90:8b:49:6f:a3:64:64:d2:ae:cb:62:c2:4e:05:39:
88:34:c5:5c:b1:86:64:4b:27:fb:e8:61:f3:a8:5a:00:9b:da:
a5:87:19:ea:93:a1:f8:ba:47:1f:e4:1e:22:28:9a:3e:9b:bb:
db:34:5e:d5:e7:20:2c:4e:d2:71:80:28:c6:12:77:e9:bc:ba:
e3:f9:26:f0:91:96:da:4c:c6:35:90:1b:49:05:ee:0f:88:f2:
53:0b:b4:5d:fc:60:03:bd:fa:83:2a:07:20:3f:d7:c6:b7:71:
18:ba:62:ed:a4:50:95:84:34:45:61:ee:2f:bb:92:34:5e:0c:
80:d8:3e:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8BQ7DR9TQNC/5LP3XBLZcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOTRhNDI1NTk1ZTkyM2M0YjUzYjljMDAwYWE4ZjE5YWQ5
MjNmMjAwHhcNMjUwMTMxMTEwMDM1WhcNMjUwMjAxMTEwMDM1WjAzMTEwLwYDVQQD
EyhhYmMzMDM3ZWZhYjU3NTlkMTJiNTRlMDY3NzljZDA2ZTllOGJiMTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfAvqxzrCsQEF1lwG32XTKwnYJi6
DTy0UszjYYRsyHw1yb2D8iJyZEXKIzTFuyqbsG3PqRgvl5263e2QMIlgtGDn7CkX
D75VMvqAgd9WZyjz7njNsy6kIs7tEoDviKs9Anbn8nOlITjaxeqfKfEtdNaxaQ/A
uOhqBpZRtTCD/5E5LWe8kDqlyTVyIEjA+HIZkjtzP10y9cVEJvJOKtlm8K4+rRRn
jNgGVAZ48YYreMHGrzBKbvuXY9N2n8TKwII/V31I+5Lk77FpRnLG9VLy4AfZvf4x
tvQoQMf7l64wXsslMj5r1WNbNisAzn29XKjPu20bWZ+IIyMJRF1cPtqcTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvDA376tXWdErVOBnec0G6ei7FvMB8GA1UdIwQY
MBaAFHCUpCVZXpI8S1O5wACqjxmtkj8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUt
Nzc3MzczZTYwNTVlLzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85NjMxNzAtNThiZS00NmJiLWE1ZGUtNzc3MzczZTYwNTVl
LzEvY0pTa0pWbGVranhMVTduQUFLcVBHYTJTUHlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8u3Pe9b
eP3FRbhj0o8JeqXIkPzIhdvTvo94ZR2iCn5aitoDbpe+b/l03qVyKuCvU7FRmnc6
hlwdqGjHxULVW8WNP4Su/zzY4Y3SR04uDL+rSHfQ4z5hzbChL1JjbE0gSyi+Oie0
UhRR4GvCSVi43ZibxHuejZoH9WSFwD9Ufi+vkItJb6NkZNKuy2LCTgU5iDTFXLGG
ZEsn++hh86haAJvapYcZ6pOh+LpHH+QeIiiaPpu72zRe1ecgLE7ScYAoxhJ36by6
4/km8JGW2kzGNZAbSQXuD4jyUwu0XfxgA736gyoHID/XxrdxGLpi7aRQlYQ0RWHu
L7uSNF4MgNg+dw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:38:30 2025 by rpki-client