Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
File: up0w5gNb6Lg4YGHycUgccH4Ezis.mft (raw, json)
Hash identifier: 9uHdaO5QsjMnq8ycU0W5c2t2E5MW5GzhFob8S945RnY=
Subject key identifier: BD:2B:5A:2D:7F:2B:A1:27:0D:DE:6C:75:E5:43:91:3C:46:4C:FE:ED
Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Certificate serial: 0194BCE0C5B7C0FAE4BA134D875700FF728C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
Manifest number: 1439
Signing time: Fri 31 Jan 2025 15:00:34 +0000
Manifest this update: Fri 31 Jan 2025 15:00:34 +0000
Manifest next update: Sat 01 Feb 2025 15:00:34 +0000
Files and hashes: 1: 400_RzqZ2Zkj4RgRtQM0ieiw_70.roa (hash: cWGkkjGCyiI5yIlZYg8oK4kWIOo/BCALf4PQ/6MHr2Y=)
2: 4Wfz_EQvo6SYko68k4TSfAN47sU.roa (hash: ox9v/ftMGhy9fG8TSa40dOcstxMI1IJ6bYGEOLCjJzU=)
3: 6_4Hwc6tzBdm4l-R8mlGWEV4N9s.roa (hash: UHiP2cXYQ7lCrtkLIonRIJ0zFlvgCt2dpLZRN8ietd0=)
4: AJ6fmQiDz0GXs7lMqGohkie4ct4.roa (hash: r9hxOjQfXyLSDYE4VLoR0q1v13yTVS1W/Vgz5ZPmFVM=)
5: ATThoTvJNJF4N5lVg-wyxhidePQ.roa (hash: 8ezRICXjiYRUY5WiWzKJgIUwL+aryWeybUmLAWnMagE=)
6: FFOy7JzcrItrCcqIMOBP12gCuvA.roa (hash: 4feRGc55ccbj4QRPLSWi7NCE31nGpgj09ILORHtqr7E=)
7: IJorGzUf120CRI-mpVXAgOI_TJQ.roa (hash: DW42FlDi+SRpZXtqB1CINfiZYcz4yxFQLUYN4vDCN7c=)
8: OoklI3kvpUu2QON6vzr_znMlb4o.roa (hash: RZHqfGmBHtCF9GP4Ad5GiS/4m5qbDE50y9ANbpznwhg=)
9: QEvUN67KDbFaOfZj9g3vC9rUQm8.roa (hash: zUZsUbWINgqv3RegkdqlIa9Hhl7pusc0/yFVE36iNwo=)
10: QKPU8lHD1Ls8ijbvjjabsAgLzUg.roa (hash: /fSYXi8WIkq4YrB09WT2QnZLo4NqtBeyd9xE217JYvw=)
11: R2PawQq0aEUNn_27xWpTtnBVRIM.roa (hash: wgajC5DOyIsq57Qvm++dcs3T7mB2PJ+qFxFBFbbVsAw=)
12: RDOul7gyH90sNWuWnbwP87u8wBY.roa (hash: o6ZEueWl1RLQaWWUlM9zZ0WWrPg/eDS24KItGKwAdKc=)
13: SGqQT2BA7nvZeypVaggMahgg5Ag.roa (hash: rpRHSpS91VJQoigSTO7lxay+A/xm/jPFJyoswIPhH6c=)
14: UHKWf0IFUDq4891IQbRTHXY2rfo.roa (hash: khzJ2vmoGD7A0nhnzsOiCPmcx8Ixl6GoeAYAbQaOA34=)
15: VrGGCYFwhGi4BPeG9vQveoaFfLM.roa (hash: edTPl3MGZDPIQA5qIWNLHzc/W7A7u7n891N+syJZyK8=)
16: XOgRPDn4EAwuDOtKWrXwVLKxYbQ.roa (hash: 49AORPQzSmZAZLgFWXR4a6bM5aE+rKu1rS5QrLIREg4=)
17: f22Rg9MgZynKKLpI74qpWeFqUQg.roa (hash: nzoA/aYd6ivHr6t+Z/FKBabLT0D3aCpU8WEfvxU6+0Q=)
18: fYISzZWRzG7_wtxIDhjyXHPM4P4.roa (hash: G+ywPlLAl4RvDHTdYmvn2UIgfVxBZaWwGMa191aRbWk=)
19: gR6HPRWa_I93ATF_6lEGpZdtVD0.roa (hash: akW6B3OCvdeceBU9Nhi1NU2MjvgHwNjLQ7OLUdvvzL4=)
20: mAo26VPj0zSn83SBRVoaCRdhIg4.roa (hash: C7ffNHQiA5Pk5uSBOSpDLGUyZWz38AAFh4I1f40dGgU=)
21: oWrtd0aFvC95N4Z6gxyZZ1SWrJs.roa (hash: AlvH9oYmiwAzp0Z4dOdOt5RLv8lOGK9l5kvoT65TGlA=)
22: qvRavzCJNzlbWaxfB4-Csl1ipM8.roa (hash: TD2WbwBpamsZuvWzJKbhtgXUy7eDy6Fj193ZH7DB3bY=)
23: s8dlGwwG7APZ3e9v5u6lvgLO1LA.roa (hash: 8xnfXfiigbDRlP2kATr1I4JuafJveXZL4+MTG5Nb4O0=)
24: up0w5gNb6Lg4YGHycUgccH4Ezis.crl (hash: saxLH+aHUwRj0gOdttz8ncpkOiH27KJPW0tVzbNQxNk=)
25: xGjAXSy-rPa7gZ2kCW6E-VgMqD8.roa (hash: AKtFMHlOVM+NFVSI2WpJP3l3MsXbWpJgiU4DhcCI8gQ=)
26: xqd3xWJCW96sJcN2e73CvA4BAEA.roa (hash: laL7IIKjO1uC6O19XqLmeRI4pdgH1HSkOUvvYu+TK5Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c5:b7:c0:fa:e4:ba:13:4d:87:57:00:ff:72:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b
Validity
Not Before: Jan 31 15:00:34 2025 GMT
Not After : Feb 1 15:00:34 2025 GMT
Subject: CN=bd2b5a2d7f2ba1270dde6c75e543913c464cfeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:90:fb:70:64:19:bf:d9:f2:a6:a3:9b:bf:
c8:6e:7a:c4:97:34:4a:ac:2a:e7:a8:0c:3e:75:e8:
b5:4f:70:b4:6c:97:86:81:93:65:52:ec:5f:f5:00:
11:66:51:5c:66:69:11:71:f1:90:15:46:3f:49:10:
e8:96:25:97:a9:1f:6e:e6:27:f4:7c:b2:18:ec:ca:
a4:b6:4b:74:82:49:7e:0a:25:27:74:92:11:66:33:
b4:55:4f:fb:24:9b:6c:6f:3e:2c:38:ff:e9:0f:73:
cf:53:df:b6:21:14:f8:6a:d0:ee:07:28:a1:91:95:
76:eb:84:79:c5:b9:79:ce:ef:cd:3e:97:f1:4b:17:
b0:0a:ee:14:37:1f:de:1b:2e:3e:5a:c0:f3:40:bf:
66:69:7d:79:f6:74:38:bc:9d:22:f6:00:7e:11:5b:
37:47:07:35:d2:bb:e3:bf:c6:da:8a:1f:4a:0c:41:
50:15:54:5d:b2:25:3e:24:04:30:db:27:91:ff:e9:
a2:57:07:a9:16:45:b9:ff:be:50:37:4d:c9:c5:8b:
8a:be:7d:62:c2:f4:2f:94:db:8b:91:9d:5e:bc:d5:
f2:18:32:0f:a1:b6:a2:f0:70:b1:5c:0a:6c:3b:5e:
36:0a:37:b2:c9:dd:e9:e8:81:7a:71:7b:f6:c9:22:
1e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2B:5A:2D:7F:2B:A1:27:0D:DE:6C:75:E5:43:91:3C:46:4C:FE:ED
X509v3 Authority Key Identifier:
keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:69:1b:07:62:a0:99:26:ab:5b:35:cf:ea:c7:ea:3d:dc:45:
3b:14:92:8a:ee:91:5c:16:75:db:dc:68:05:ce:1f:21:ef:98:
9c:84:e4:fd:27:8b:30:ff:6e:69:47:28:92:4a:77:d9:ee:2c:
39:9c:f7:56:e5:f5:6b:b6:e7:b2:1a:9e:d6:da:43:f8:2c:01:
bb:4b:df:89:d9:70:62:b8:04:b9:d4:09:1e:c2:7f:ad:b9:72:
16:47:63:8e:f5:42:0e:11:7e:0c:a7:85:77:58:9d:61:27:d5:
f6:a6:8f:e7:91:ca:20:4d:e6:85:7d:09:90:85:8a:1b:42:ec:
88:d9:02:58:90:69:e4:1d:7d:5a:25:25:16:63:c8:09:36:23:
df:2c:0f:6d:4d:6e:77:2b:8c:12:1f:95:86:b3:54:5d:78:6e:
7f:41:a4:f0:5c:08:b6:95:ab:0b:6c:4b:0f:17:c7:92:04:2c:
bb:15:e4:d8:9d:54:b8:ad:eb:9d:ca:b1:2c:3f:8e:b7:e7:26:
37:7c:a0:05:9f:c7:fb:6a:6b:9f:50:04:46:43:93:2e:12:6b:
c5:91:4a:f4:4c:b3:08:f2:99:cf:2f:4f:d8:a4:17:45:37:be:
93:ec:a6:90:b0:14:e2:93:f1:ff:9c:ef:4d:33:c0:14:bc:8e:
7e:6f:bf:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:32:14 2025 by rpki-client