Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json)
Hash identifier: ZbxW1P+IMFstEY0EUngeAA2sY72KE3yrSesUGlyRPI0=
Subject key identifier: 15:C1:32:91:D5:63:CB:F3:96:2B:C0:DD:7A:5A:EF:52:71:66:23:95
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 0194BBCDE2098332838B7E6930025BE057E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
Manifest number: 10BA
Signing time: Fri 31 Jan 2025 10:00:19 +0000
Manifest this update: Fri 31 Jan 2025 10:00:19 +0000
Manifest next update: Sat 01 Feb 2025 10:00:19 +0000
Files and hashes: 1: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=)
2: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=)
3: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=)
4: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=)
5: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=)
6: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=)
7: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=)
8: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=)
9: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=)
10: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=)
11: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=)
12: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=)
13: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: LslxMF1cV5uFd9abPlOPTG2KIA6JW5HKsweD/BpFK8U=)
14: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=)
15: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=)
16: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e2:09:83:32:83:8b:7e:69:30:02:5b:e0:57:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Jan 31 10:00:19 2025 GMT
Not After : Feb 1 10:00:19 2025 GMT
Subject: CN=15c13291d563cbf3962bc0dd7a5aef5271662395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:02:ef:ad:75:f7:c2:9b:2f:d6:d8:00:22:ea:
21:72:0e:6b:67:f9:33:21:28:a0:75:63:80:11:0f:
cd:e6:a3:be:4c:3a:b8:72:35:50:ce:61:5f:71:f7:
a5:4f:a6:e2:b1:00:e5:f2:6f:1e:7e:b2:d4:b0:12:
ac:29:82:05:1e:fb:b1:02:7b:64:5c:ee:3c:f3:c8:
a1:88:fc:8e:6d:6d:ac:ff:17:dd:ac:eb:ab:5f:b2:
03:6f:10:72:54:3f:5b:00:6a:81:03:9b:bd:0e:60:
86:f8:24:52:78:9d:73:dd:9f:fc:03:99:b4:0b:c3:
bd:ab:dc:a7:2c:ae:49:e9:ac:9c:7f:76:4b:f6:1f:
75:99:7a:6a:f4:1b:c3:88:bb:7f:d8:fb:9c:7d:0d:
bf:04:4f:c5:1e:08:22:d4:52:47:50:4d:40:e4:07:
9a:a3:50:7a:ca:2b:fc:cc:bb:e5:bc:04:bf:97:68:
7a:35:15:70:d5:27:ab:a2:fe:af:7b:31:03:cc:e8:
34:bf:e7:0f:81:d7:b0:e1:bb:e8:24:98:1a:1c:62:
95:1c:7f:0e:e4:f7:b0:e7:c6:fa:68:23:7d:6c:7b:
7b:6b:5c:63:ec:29:c7:a2:1a:7b:8b:c2:27:28:f8:
40:eb:ea:19:ab:7b:f4:88:dc:f0:30:56:75:40:5b:
80:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C1:32:91:D5:63:CB:F3:96:2B:C0:DD:7A:5A:EF:52:71:66:23:95
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7a:f2:95:9d:48:91:29:41:de:7e:19:b0:31:e3:0c:60:a3:
ba:07:fe:9b:ea:65:3f:f8:99:2e:bb:24:6b:49:c0:49:01:21:
a0:7c:1e:b0:ab:3b:d0:04:4b:76:d3:86:96:7c:74:c4:32:fa:
0b:18:db:eb:30:44:13:fa:73:1c:7e:90:fa:60:ff:94:ad:47:
53:2c:c8:ac:93:1f:36:46:72:39:a7:06:6d:b4:b5:b8:fb:28:
66:3a:99:be:90:4e:11:96:42:52:ea:48:e0:1e:89:b3:8b:50:
03:5e:4c:2a:7c:e3:5c:32:df:d8:c8:fb:98:c8:35:57:f1:ee:
f3:94:58:76:9b:be:c7:84:dd:dd:11:b1:cd:44:66:74:24:97:
cb:74:ed:30:65:24:0d:07:1c:ad:5b:4f:59:81:5d:30:e3:75:
70:6b:cf:ee:a7:a4:e5:62:cc:a8:a1:a7:23:20:ee:6a:3c:8c:
55:1a:c3:06:be:39:18:ca:c6:2c:d6:f1:18:16:fb:c2:ef:7e:
b4:d1:23:26:cf:83:97:0c:01:ab:62:81:db:93:b6:0c:f9:22:
63:70:2b:77:04:66:b9:c0:c8:19:39:c6:ab:cd:0c:4f:77:10:
2b:70:a0:82:94:e5:82:c1:59:bc:26:10:15:b6:50:d4:49:c2:
39:c2:33:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:54:08 2025 by rpki-client