Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File: CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier: jXwEvdbDsrs8pY5xS5FUG6Z+ur3g8rv1w/Wn+U2ID5E=
Subject key identifier: B3:22:25:F2:F2:C6:2C:70:DD:02:DD:56:48:CA:65:C0:C4:69:21:49
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial: 0194BC72FEA9E34AD4CEBF7BF0452ACFA289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number: 07E0
Signing time: Fri 31 Jan 2025 13:00:40 +0000
Manifest this update: Fri 31 Jan 2025 13:00:40 +0000
Manifest next update: Sat 01 Feb 2025 13:00:40 +0000
Files and hashes: 1: 0NFiTmuSyQvbIvanJiLjWHvt4RM.roa (hash: luko6CdhO6PPQy8mRMEAKBgkFwNJM+Gi1UFJ4ngvy+Q=)
2: 0SX6tguCPbTedDIJv_v61mNVvPQ.roa (hash: OkN/xXnA9ztS0yO9CPbdPXj9DcZxVLy9MCAhSe7Y+Vs=)
3: 1Au5Z5nGoqTJTIUg3MEmF0l6qLQ.roa (hash: IvdLtqnBMyGRWSVQH7Ip2GpcjvgrFZiBYsuGVCM6qKU=)
4: 4nU8t9nFwIiWzcROGA6bDv2HTiA.roa (hash: QIYEjvQS5BHu7T+tElBrKTGFMYY7X1GdGDqPR3ESe8Y=)
5: 7DPyUtc9n8WTweBBkrOb_SjAkcE.roa (hash: ZoSn5vUNB/wa1uBbMDCP16ELaz+Q0L0GTnc/wHeaX0o=)
6: 7NoekW-HkxHn4P8-jBcdVtp5hPY.roa (hash: y374UyHAmZutF/EVdVEF8nRMAlnmcdvOeQf/dEszG8Q=)
7: 7_Pam1zCWMSxN35Hg3GoolAI0gM.roa (hash: lswJSDHwS490ZDhaMLtu12CoEJf1WU4AZd47lIYMptI=)
8: CIRls3stTp9BOjHce35suioz25Y.crl (hash: cDkKOAyyONKY/yUA01w0n8F0PdTiUDqEQyF5OZf++Gc=)
9: DQ9Y2TKIQQfnAkl5dD1WYgGZfTI.roa (hash: i3PppcVXNlfJ81Wt3dyqjPX5lC6AsicinQTUdq1qZBE=)
10: Dwm1AgByDnGAza8NsN0JCqMfecA.roa (hash: kXy1cfQzA3iOuX5Pyj85jZvj8d3G6Z9rtOX5bo1fDm8=)
11: GnQoHq2ALkHnA-1hM45uzLeJnlg.roa (hash: 56wbhZ1KfSgNZ2QOQ2O1i7JWNQODxAT5JXlghcuIe+0=)
12: IROFoAzRYfAyAuh137ZUKRo16o0.roa (hash: pE3NB8j3VAGJYXXKqsPuAAxosijoArjuXWM4LMmqg5s=)
13: MOhuKkKFUOCJzvGkfVg3ZmGMV9g.roa (hash: GRcY4hPKLNCKWz8KxAbe1WQmkZqEk9LZq4sJ8uzaP8k=)
14: RkVV0EjcjxNBWcvA8hIWquuWiTE.roa (hash: gg70g49DwuFI9SyU14ctAnLmER/u5gvtmm3cshRekd4=)
15: XlFQTjC7481aLM5EMChR3qT8AcE.roa (hash: f0DnksinMMergPKlFXbJU92z0zwQyKjG50p2FrrrbAU=)
16: al4U2JPxxiid9aONoVxE42bXtsM.roa (hash: XIfhyTCn1Ywozl9yi5YvzH2FdKI/ST5gD2VgyepHB5A=)
17: at-uzm8cDHh5AIa1LJdRT9W8Wh4.roa (hash: H5l0QXxMa+Vawhghd7+XDKzjHO1k7D4xJ4O0j6Jb8BM=)
18: exlEKANutgG_vDp1CnyhUG3YUe8.roa (hash: NHAlDoUxYtYveHw9TLM5p3WftexDT/jlIeiCrEjifQ4=)
19: f59xenCUDXDDeMwa_nEJN7nMCGQ.roa (hash: QsZCsEt6m6rV691+Xfz+nKfAfIU4tpPtr3jZyy6Pr0s=)
20: ncgp8pS-LeqyJJCXmAzpm9zx1w4.roa (hash: KyNxVAZB5t/KeQqDiwZordl2HiSMjCAUULYph3XPWLU=)
21: oDni1EJm1ojLAR69a31uPncLns8.roa (hash: Vg8O7m2AgHh60b93FLyO9wy8Nzk9z4F/YYUyXCnmzmk=)
22: oL3-_6pqYdpSPuSTN2GkwZaneN0.roa (hash: o/fwSGo3+i4YRX9/IGl/K4XHnL01gJ3TF73Zb1RldpA=)
23: ogNihGVYrghH8grukZGii0-MTnU.roa (hash: PiM4u+yLk8KHyPfyWC4NVbt1Xw2USY1e7QTVDT2W4t0=)
24: pq7pcdWVikTQ-KOe2gcv9i1f2qY.roa (hash: Y8V4SfgPnXyIoDPEtSOpbGM1xvThRgl/bKwf/VdzxaU=)
25: vyLjFvSuQm0_pQih6LiAdYCNY9c.roa (hash: /6CYLPOjXexhIIIeJnrGjEKoKdtpezbqkCXs7RqU3FI=)
26: zB4DK4xuq1XzyMGQt0yUpiCH1mI.roa (hash: lAQP8m8UapwTe64UInkYcZkWzCw4ZGMoLx8CAM1NvV8=)
27: zwB_NfcfrW5dDlELOTYJqzX4fyk.roa (hash: 4XzyrpXgUs2LsFTwoqCbEmzvuAsR3qmjgxRr13yBpIs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:fe:a9:e3:4a:d4:ce:bf:7b:f0:45:2a:cf:a2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Validity
Not Before: Jan 31 13:00:40 2025 GMT
Not After : Feb 1 13:00:40 2025 GMT
Subject: CN=b32225f2f2c62c70dd02dd5648ca65c0c4692149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:00:72:50:3b:62:50:c2:15:f7:c3:3a:be:e9:
7e:bc:e6:ea:08:bd:67:f6:09:ca:f6:30:10:19:48:
91:06:78:77:a7:0a:a6:0e:17:a8:25:fd:b6:78:a4:
01:67:56:98:54:ee:c2:0d:bc:43:fb:7c:9e:fe:21:
75:0f:0f:5b:68:7b:30:90:15:2a:71:c2:a3:bf:e2:
19:fa:ed:3c:b2:d3:1a:e7:7a:7c:cd:df:e9:2a:a3:
71:51:38:f7:c3:14:90:17:63:95:0a:bc:93:8f:0b:
30:34:12:be:9e:e7:e7:f2:6e:8d:d9:d6:91:38:a3:
a0:3a:7b:6b:58:f8:c4:ed:cb:16:85:04:74:4c:33:
2b:5e:6e:b4:0d:fd:0c:d1:a3:68:d9:8f:1f:1f:55:
56:35:fe:42:92:ac:05:43:2f:22:33:2d:5e:bd:b1:
f3:a5:1c:68:df:fc:46:9f:05:e1:c3:fa:d6:bb:41:
e0:a9:1a:d6:de:7f:dc:37:23:7c:5b:2a:85:61:d2:
ba:eb:b1:61:be:26:59:2e:41:b1:a7:2f:dc:21:ab:
d8:e0:4b:24:ca:2a:cf:7f:97:62:bf:55:07:62:18:
8f:2a:9f:df:1a:14:13:ec:7e:50:30:a8:ab:a5:eb:
25:17:dc:3e:45:db:f4:2e:44:8e:e2:f1:a9:9e:7f:
ab:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:22:25:F2:F2:C6:2C:70:DD:02:DD:56:48:CA:65:C0:C4:69:21:49
X509v3 Authority Key Identifier:
keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:02:9d:04:5f:d3:46:e6:a5:f2:9d:77:4e:10:09:da:58:6d:
aa:5b:ea:fb:44:5e:b4:01:a6:e7:af:a7:5c:6a:15:2b:57:f0:
d3:40:6c:4e:1c:e9:59:2d:1a:e8:d2:40:94:8c:16:58:cc:0b:
15:4d:a6:7c:47:03:40:60:6e:87:60:66:89:e4:68:fb:fd:5f:
06:0c:81:62:04:3e:47:36:98:c8:d3:72:3a:0f:98:b4:48:bf:
d9:b2:11:46:90:02:bb:91:c1:de:4f:6d:6e:35:56:c3:f1:a0:
ea:87:e5:e8:2a:3b:e9:ba:88:19:26:71:62:1f:2f:79:01:c6:
92:68:2b:97:64:90:0c:78:57:70:52:f0:80:24:00:3c:a2:9e:
57:5f:ac:0f:e7:a9:3b:28:9b:39:2d:8b:27:2b:fd:e5:01:f6:
4a:9d:43:c5:41:72:3b:ed:f8:1d:ea:2d:1d:0b:58:de:c5:a9:
14:0b:ce:d3:15:3d:90:66:86:e2:b0:82:a5:ba:02:4a:88:a4:
c1:bb:b4:d7:0f:7b:75:17:49:97:e7:40:c6:4d:fb:ef:f1:b5:
c2:5f:2e:c1:d9:06:e8:e5:9e:ef:ab:c0:d3:15:f5:e3:2a:e2:
9f:c5:99:7d:41:32:3f:41:72:e8:cb:8a:52:a2:9b:16:d2:26:
82:f1:eb:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:34 2025 by rpki-client