Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
File: X32laK0Ce54knBPiI9MidpiBop8.mft (raw, json)
Hash identifier: CLgOIGqs7Ttfaxn6oagqQ5USGCkd5vMC3RoFuDh9+lk=
Subject key identifier: D1:FC:82:9E:2D:18:60:C7:70:6B:EE:14:01:19:9E:3C:D4:4D:3B:6B
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 0194BCE0892A69AA50EB2D8F43C0BBA7B0EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
Manifest number: 09A2
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: Dhg938LLNxihNYriqStR3oqs6Jg.roa (hash: Aj+6lvIDsodEZ6I55Us8ZFj5GtVjSmfFFjL8I/MfYqo=)
2: FuntCXoBht24QvgtEtbVZEuCdp0.roa (hash: JUPlc/PvxJjzfETFQC1BU7Iej8ynSg/XdYSUf902Tpo=)
3: OSozPCauqZRrj5FYZCZShQYan60.roa (hash: gJTuyuPcePva2Pf/4Z3V1y7VTQjYV+P6FusXSLPZfSw=)
4: X32laK0Ce54knBPiI9MidpiBop8.crl (hash: 0NgnGikeQ7XwadeqvfOCyACndRDGKOHLY/nEwW96t3c=)
5: XjVu2IyXljFzhSvYma_h3-clfVU.roa (hash: nT21YokFB5zQvbm3JPkkRJDjEHGU38C24xQDpQHQGAI=)
6: ZkkDzXmdTsLG1oQnHCXCpjMrN0c.roa (hash: vhxQZdTakyknsbSaFbQwA3rjVR03VcM9s8jNMsMZ03E=)
7: jUQ_fZXFaYGd4zaZnSgAlOdWse0.roa (hash: TxGng+dp5AKM1yJ/Crw7UDMDcGHP31uzC9AJJeqBDMA=)
8: oSGRjgd5g7uxmIyMg55GeDp1lcQ.roa (hash: yVVI9w+n8DQ5LZ0pU0EZPfP/S8D3Imwu6pg6ds8XII0=)
9: s84uwW_-i_SHLp2X5wNbbXCbos0.roa (hash: XmZwP1Dphpy/OpROhUP0RXS2PeMw5xbgxdsjXIheFhc=)
10: ztzJ9WkVuGW2KUZ-NYOffXMn-mU.roa (hash: 0aNwIJcWE8BWdRRapb0b1h0he6NRcvrOvXa3hI/Nxv4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:89:2a:69:aa:50:eb:2d:8f:43:c0:bb:a7:b0:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=d1fc829e2d1860c7706bee1401199e3cd44d3b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:79:4e:c5:5c:f5:4a:fc:9a:d9:34:ac:0e:
0a:ad:62:29:18:0d:3f:90:d0:8b:0b:06:08:e1:ed:
74:9a:16:c7:79:7c:01:22:28:3a:2d:4f:e7:a5:f1:
da:0d:1b:41:49:6a:1a:26:95:99:5e:a9:bd:1d:17:
17:c9:ba:b3:d5:b7:ef:86:97:a9:71:24:28:1c:ba:
86:2c:d5:fe:04:40:8f:be:d9:31:e9:bf:55:f5:63:
ca:0b:cf:a0:3a:ff:4d:da:79:a1:f7:50:06:58:9a:
c5:60:2d:36:03:f2:0a:11:94:57:db:5f:29:18:e8:
2a:86:49:fb:69:1c:89:2b:08:fd:de:ac:c6:ae:a9:
25:19:ae:b5:ca:af:00:a3:9b:41:1e:56:7a:a2:92:
e5:e1:5e:f3:fe:88:ca:7d:d0:78:1f:89:f0:8e:33:
5b:16:52:17:ce:31:14:c5:33:f5:36:b1:f1:5d:63:
36:10:a2:b9:d9:47:71:25:96:fb:0c:71:28:c5:bb:
3c:6b:a2:71:84:f6:c5:f6:94:ca:4f:05:73:bc:1f:
7f:cd:f9:c5:38:d0:63:8d:78:67:11:2d:8b:c4:c8:
59:a5:57:37:46:89:d4:8f:ad:12:6e:62:4a:99:fd:
eb:d7:bd:7e:a1:56:72:5f:2f:dc:d8:c2:7c:70:fb:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:FC:82:9E:2D:18:60:C7:70:6B:EE:14:01:19:9E:3C:D4:4D:3B:6B
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:6c:be:78:c3:d0:18:49:65:c8:a7:f6:f4:bd:86:5f:36:1e:
3e:85:46:6b:c9:59:4e:ad:79:21:3f:e0:eb:08:bd:07:48:72:
4c:b6:88:43:3a:b9:91:f7:b9:90:91:7f:bc:1a:8b:a5:e2:7b:
4e:c9:16:9d:74:66:a2:5d:9c:48:f9:1b:34:b6:f4:a9:8b:92:
78:b2:68:90:b7:8f:aa:d4:27:96:92:0d:77:eb:af:c0:66:ba:
ef:d4:88:2d:a5:9c:9d:2f:68:e8:e5:9a:26:68:a9:3b:29:6c:
bb:b5:77:72:c1:ce:c1:13:7f:fb:b3:f2:57:25:6a:f4:06:f6:
39:e4:68:8d:91:68:30:06:6b:30:de:29:24:f8:06:fc:c8:7a:
8e:0f:5b:6b:85:d6:e2:5c:0a:84:df:10:2d:62:d2:b7:e1:f4:
dd:24:5e:1c:1d:ad:7e:b6:e0:1e:c6:2e:fd:e2:d6:65:6e:f3:
10:7b:0c:ac:37:80:55:74:7c:b5:c7:63:86:0a:89:99:a0:19:
76:a3:8f:64:32:f1:e7:d5:cc:d0:aa:33:9a:71:7d:a5:e6:8c:
cd:2f:e5:50:87:67:3c:42:5f:d8:da:36:45:62:6c:9e:1b:46:
7e:66:6a:56:f2:d8:b6:21:f4:ae:e1:47:1a:ba:52:8e:fb:f5:
7a:5a:8a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:25 2025 by rpki-client