Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json)
Hash identifier: QeZeXOTXAd/+OszYxTERxoXMk5DZxsURFDqbCnJLoSg=
Subject key identifier: 8C:10:07:02:8F:7B:68:15:02:10:8B:A5:98:90:8C:94:8B:36:4E:11
Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9
Certificate serial: 0194BCA9B842739E08C46AE81FE3A3472EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
Manifest number: 0A8D
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: 249gTQMSJSpG-EMBCDNkFZo6KfY.roa (hash: FM2w6rRpmRNy4pkvq/ltjXR9cpyAy1qnATg+Or8+D7c=)
2: 6TauPTrrYu2XtkFKKlQ2u7VDDno.roa (hash: n6010YujWfquA7qOkV2BHT4bCszagBkp571M6qN6nZc=)
3: 790iVL4e4fee91oD970D0-w9Sb4.roa (hash: BsO1v80PoevYr29+BJ5jHFvk2e9qzzdheuF5aYuPG6s=)
4: 8iIYolCxGRxz8TNi8KfyB6eNhzo.roa (hash: qCapP64kycDhbf/1rZ0laRWKXpyjDof/0V3kjvsJoMk=)
5: A8kvmU8mAkaJxiKEyTXgwsEm7XM.roa (hash: D8+3fx4gYQaNHQapnvOFft5PFT5iwq9PguobVpgPBm8=)
6: Csnk3a3ep1Kuhq_uYIPFt9oEx54.roa (hash: pQI4ia2pZhXHZ1e6yhDMKY3ec6GDJA8BN0tKEQGAjHE=)
7: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: Hw3eOdhP1+GLchlFdYuKhkuWDN+ulOxmbKhefIKSSEE=)
8: DqIwBz09GVkZK_gZ5I10qjJf_ys.roa (hash: c0iRzQrUBzV64ZvugD7r5Tge4OFGYDIQjIm+fC8puK4=)
9: ECqrLMrFfD90pszf7knR2cpQyh0.roa (hash: Q3DUlwJygjUeoWaRH5s8fB7GS7FOmUc/yzv3gDOfLYQ=)
10: GDKqvDV3tg8euG7iA-40pDu81dg.roa (hash: DIPUgYEMtsUW2SsY0gpVq2Amy3DeiC7nGWJEdov3OAc=)
11: Gv5HrL2f33_QVcVgXo5CsM0Vaho.roa (hash: LEWORZbggYg+nZNcCLA8VUA/7SebS6hs8+TL4nNmjcg=)
12: LOhM-SBOjXIyMVDOM7rBYZ-RO5M.roa (hash: i/6kUT0z6uvrrviCjMXCQqOufeEg6EipC16MEaUFpFM=)
13: TPKhJ6iPLAZIsgGhlDM9QxRsHPk.roa (hash: z0IRo5PxSUnSd8wOnL5dq3lEYmycGU7B265DtPJnaBE=)
14: Tfg3jqM-y4B9_0O830RjMgiNMwI.roa (hash: KhUTb4LC7xdbTloQRmriQdzEeWTgLwDx3/uTjpbvQFU=)
15: V2Ei32pldnvEfX7-MOV98CBbvqs.roa (hash: pkd2u2AiMIDj1vMjt09XptY7JsRn5R0rojUcZBXfHoY=)
16: aw9onhWyE0X_G2dqIAr21daa77Y.roa (hash: x+QX04yDVmZf+2LdMkeQARN3ELWJN+aDlPdYgim8Xno=)
17: bunFK9av8RfknnXIgouVNVSj7lg.roa (hash: oaHs1Qr4+X8d39BaWoE1d0HAMovpW6wQdYQeMQErL34=)
18: dYTB5uFARs2s4EvY2l6JyFsQr8s.roa (hash: GAn94IfRAoXkQ0mUCSIrD+5VLnBxIQTLNyCWkmlcU4o=)
19: e8JWpozjp2CQVeh0fKR2of1rmnU.roa (hash: cncyccKFGSSxuzQyK2QlQLGesHp6P7TKw/dYGMrOaLM=)
20: hmab6__F2XjPI4pz-S7ZDMsGfQ8.roa (hash: VKioes1rRTD3dBB9IXmj0I4YiJbzOl3bkffS8nKiVMw=)
21: kK9iFD86F2TbKF1-MK7LXjXrS2w.roa (hash: qP4mb8DT5u0ulqTppD9Fz+HOfaj4p6ZrC8wxXFNUrXI=)
22: lgBmfJ4pdpPhLUFGbohh0OwY1ME.roa (hash: x8hNwusXBAvn6wxypmaX2FEwzDRNl0nacxt9bBpq2Fc=)
23: nEtni_xbFe8uMKn7lNre_DGe-iI.roa (hash: H6QijqDmjL6blsOSOiprWmtN5FAUxeo34Tfbyral+Co=)
24: snhgZyKIl81SdGEMa8SNezN2B-8.roa (hash: q+Juob+GqX3pjwEyROSsOIkH/g4f1ysryJqAil4DeqU=)
25: t8bQyCaG5BN-N4F3Nx30KH5gFqU.roa (hash: moTeQKGuQJjtOuH9bwQLJXR1uXdXDyAyV/k+LcsmXkU=)
26: uHW8s4So2LMq5MxaMXPpI-lhJfA.roa (hash: MnMGvcSAZicv0Yn3QAwx2n0+uUqytuFdlE7u+YN2W7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b8:42:73:9e:08:c4:6a:e8:1f:e3:a3:47:2e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=8c1007028f7b681502108ba598908c948b364e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fd:a6:13:22:1d:56:06:72:8c:de:3e:cf:77:
4c:c6:18:69:b0:14:ee:3e:42:ad:12:98:f0:cc:54:
4f:07:e3:47:24:d1:f9:ea:54:06:c6:5c:77:c0:30:
3f:02:f8:35:02:e3:5a:ee:0c:ec:f1:fb:f7:73:5a:
c7:e4:d4:43:2c:72:0e:40:de:b4:b2:82:8b:58:b0:
b5:cd:f9:0d:7c:7f:ca:60:7e:33:27:a7:56:c2:3e:
57:f7:14:f6:75:40:91:04:30:5d:91:d5:ca:d7:5a:
16:ce:a5:d2:62:9b:5a:f6:10:38:53:50:93:6e:40:
70:3e:58:32:36:66:db:8c:ef:65:13:bb:fd:d0:81:
83:8b:0b:ee:4a:72:48:f9:88:f2:0a:01:57:54:72:
dd:20:95:0c:e5:cf:7f:9b:84:bd:d4:68:93:65:92:
78:f7:77:8a:81:a8:0a:34:d8:98:97:5e:bd:16:56:
0a:83:a1:5c:e2:64:80:70:8c:7e:50:fc:01:22:98:
29:e2:61:bc:66:d0:43:07:ae:e0:c0:75:2e:e0:17:
36:40:e6:e5:40:4f:4c:bc:4c:a7:4a:9c:35:b4:8c:
a6:15:b0:f6:e6:12:a7:f2:ef:1d:ae:82:f4:92:dc:
11:94:1c:da:58:f8:61:0f:b2:77:0d:7a:92:4c:a7:
e0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:10:07:02:8F:7B:68:15:02:10:8B:A5:98:90:8C:94:8B:36:4E:11
X509v3 Authority Key Identifier:
keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ca:30:5d:24:7e:73:00:25:f4:4a:eb:3e:83:db:98:b7:0b:
15:47:d0:82:59:50:90:f3:48:a3:3c:07:5f:50:da:3b:6d:3b:
19:5c:a0:f2:9f:1b:3c:3c:48:9f:7c:bc:f9:fc:45:15:61:3c:
f8:09:09:a3:bd:90:4a:44:6d:93:57:bb:05:c4:0a:ef:dc:55:
ad:5e:47:64:2d:5a:29:45:3b:98:d4:8e:98:e7:3e:cf:1f:00:
9c:eb:ed:39:8e:86:f8:11:6b:2c:89:ed:9d:5e:ab:b2:7b:10:
8e:2e:b7:df:2c:01:d3:ab:df:87:dc:35:d6:3c:53:47:ba:14:
cf:5f:74:bb:d1:15:3c:c7:3e:8a:10:72:61:65:ef:ff:64:ba:
69:97:db:a0:de:55:da:3a:0e:87:26:21:b8:2b:e9:68:a1:6d:
b9:1c:36:2f:ca:1d:d9:b1:55:9a:24:90:07:cb:14:b9:e1:49:
25:20:3d:d8:96:ac:64:03:1e:ec:b8:b5:a4:3a:9c:97:51:96:
22:a6:10:00:0b:f1:d5:8c:75:f4:7a:03:34:89:e1:6f:df:e2:
70:74:9f:ec:c0:33:7e:d5:ed:f4:38:7d:7e:cd:bd:29:8d:61:
9f:1f:5b:8d:17:bf:67:12:d0:a1:4c:9b:c9:13:8b:f4:ee:b7:
cf:46:04:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:12 2025 by rpki-client