Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
File: XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft (raw, json)
Hash identifier: 12VvZsqW94hC4MnB2fb6GwE3XMO7YomHviWlgIWeYXs=
Subject key identifier: 43:8F:52:71:EF:92:EC:A8:8C:60:7B:7F:C8:B4:09:B2:4D:0A:65:C2
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0194BBCDD9434A1A14870168AA3B2844077B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
Manifest number: 0BA3
Signing time: Fri 31 Jan 2025 10:00:17 +0000
Manifest this update: Fri 31 Jan 2025 10:00:17 +0000
Manifest next update: Sat 01 Feb 2025 10:00:17 +0000
Files and hashes: 1: 2eSn5y27ldEmC0Gd_54Bd8_I9JY.roa (hash: 1Gj1gucEHIQe5/suhFpq18I0KHQmpiCbAT8OEer2XJY=)
2: 2n7kwmC2AFc0VVKzNtxDLDMgqS4.roa (hash: C3LiEcIaLGyjYDwQCwJjLQRdCMwb7IYyGJcBaxdU/zU=)
3: 4zijRX3qFSJj7GUPzn2tNtVGEqU.roa (hash: G11+LD/eIulIMC02GT0rOyORwsGurEkPCQfgsNssMY4=)
4: 6wQs6-0w-fWJLJ0hVPQK6QCCGkY.roa (hash: rb19DmwWMRxoIZtq3fo28eOFDkPmJthIUG0I+8TP2AM=)
5: AuOqSBFQao1XdeScaH_pzc2oidA.roa (hash: KCgCD5VjXUJcoI9zPUC+HgqfHioM6+FN7vkkVzOcdHA=)
6: BOI1awQxdXwnD-j71lBbNJhD_Lc.roa (hash: RDggKzi5X4GzB5qxGRZl8jlJFnbQqP70OHVTn4IeWCs=)
7: BjsuLgGQNhMD4InbUJY9wvy3euM.roa (hash: HQnpHX6hfakLbQoTyAQapgMmds3GLNhUneOg7VrLXNA=)
8: EliH32nM72jk5o8srlCb9Qn8SIg.roa (hash: Rtb7C9DazwCLvPY2asNPyAzR9ypSlDn7TK9tDgFH01c=)
9: JDi96XtBmi1E-eUX4bd0z2rNMAQ.roa (hash: g67c4gAiqig1Iyele/QFecJvszyajLNwbzJcH0zM3As=)
10: Lssg1hmehdX-Lsz9DcV4aLkIYgw.roa (hash: u6fW/BJ3Ar0dDQcWSBBZvwRYW6WUKzGGcINR5CZtSYk=)
11: N1kPa63Y6FcbIG4ZFA6vBaVC4N4.roa (hash: ADzkv6QiLNzt6CZ3/NGstYTNCCFuWgTGZZVgBsDhSg0=)
12: XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl (hash: 0dNUtAqe8HKGA6CM7D+8sM2goU3r0dVccrmhBs5iFNs=)
13: c5Kgx9M_pZoyC-FuKyzrc0aGPI4.roa (hash: qo5ZvreioWLB6l4kqymHWyEjF1uBdQswYAIK4BkA1Q8=)
14: jurUKjOgqPlKTPlS6z_hV6r5Fec.roa (hash: mK/2mFnvM6PHbw/5fnMHl0N0FSkbsHgl6zx5ITdWUqk=)
15: n_rP7jWTS4Z479ne6IAs1NmLMNk.roa (hash: tJkrT8kWq9nKGSWE25BO34wrEprXE5qoElSyxJPmjJc=)
16: ngscqhdgErvXG-iVVxQNCQCJLXU.roa (hash: 09AYPwoIsTPMDTLNJ7lXjZ8bnqolSOEtKBzcuvG27U4=)
17: s2q3u5eyvYJCHvune6FWh078ryM.roa (hash: 2YCwbxgoTgvHEolKVdcJpumrWybHAqExQ49U7X8ltpk=)
18: sDmkBA1dK9BujbOx1JUeSinCGs0.roa (hash: cbr13ejwtvQbyoyvg+8X0OR/MTCPmFSmC5KjzxF0U7I=)
19: ya1Qvlz0z2yIW3rWpmZNZE0Mahw.roa (hash: pUh8tSNEyZT8qdNgsK70xOXvpKS7aoBqKqdEgq1Za3o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:d9:43:4a:1a:14:87:01:68:aa:3b:28:44:07:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 31 10:00:17 2025 GMT
Not After : Feb 1 10:00:17 2025 GMT
Subject: CN=438f5271ef92eca88c607b7fc8b409b24d0a65c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:b3:07:48:ff:17:91:71:9a:f7:d1:14:0a:
0f:d7:5b:75:48:97:8e:bc:73:21:dd:62:7f:86:db:
2c:15:69:d1:f3:21:d0:aa:a2:54:1e:68:66:2a:da:
47:fa:31:27:96:99:f3:d6:e7:62:ce:24:f2:2d:04:
10:b6:e9:d4:c1:33:81:9e:4e:a8:6f:23:22:52:9d:
a2:21:c7:87:04:c1:4a:b5:21:21:a2:c7:15:7b:af:
bf:9a:cf:ba:a6:fa:36:da:06:c5:e7:20:35:c2:16:
e1:16:f6:ca:fa:2e:87:3b:ae:64:ec:a4:de:81:97:
b8:b3:ce:48:ed:53:8c:d6:02:0d:aa:54:a4:11:06:
e1:7f:da:04:cd:8e:ad:58:9a:65:e8:ac:98:ac:ff:
8e:b6:58:50:49:cf:af:f2:88:f8:60:1b:b9:ec:99:
bf:95:6c:0a:7f:92:5e:dc:a8:81:b0:68:6b:f7:7c:
e2:3f:11:1b:36:46:8a:e2:73:66:74:21:c3:cd:6c:
dd:5a:4c:34:e6:80:e4:46:29:a9:10:db:b1:e6:09:
3e:ae:2e:86:1e:80:fd:7a:a2:ba:29:cf:7e:40:97:
44:bf:07:0f:e0:48:41:ee:a4:1d:b7:9b:00:59:1e:
db:98:ad:dd:ca:e1:21:c3:b3:7e:38:22:17:32:9d:
50:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8F:52:71:EF:92:EC:A8:8C:60:7B:7F:C8:B4:09:B2:4D:0A:65:C2
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:13:23:d5:0a:d1:ed:66:8c:98:b5:e1:63:ac:73:86:e7:68:
fe:13:5c:13:e5:3b:c1:1f:20:43:47:13:5b:e3:40:43:2a:07:
c6:31:01:84:3b:f1:eb:24:e3:4b:d5:e4:06:f1:df:05:d3:cc:
bc:30:1a:db:1c:34:1c:27:8e:65:63:94:d7:71:84:2b:34:aa:
40:6c:5a:65:f5:2f:07:47:f6:50:cb:bf:c5:92:48:c0:8e:30:
67:a6:03:41:15:f7:6e:d6:2b:1f:5a:ea:16:27:fb:de:c4:43:
4b:bf:d2:5d:7a:78:23:75:f8:01:3f:da:9e:11:7e:75:66:2a:
70:de:a7:90:ee:4e:61:a1:56:83:fc:58:62:3b:c7:e1:ec:1b:
3a:7f:50:9e:4f:f3:b6:60:c7:55:eb:43:03:57:0e:4b:9f:89:
2a:ce:00:91:42:72:55:58:f1:a6:71:c1:86:c6:ab:f6:a5:3e:
28:92:91:c2:cb:12:29:cb:0a:57:08:f3:f3:61:41:fe:a2:fe:
b5:1d:e0:7d:63:4f:ac:b1:d1:0d:42:45:a0:f1:04:5b:98:6d:
28:6b:b6:c7:0d:09:ac:0e:c9:29:1c:ad:10:b1:9c:a4:b5:91:
f5:03:66:05:b5:ec:45:4b:9f:b3:8f:6c:4f:64:2f:bf:af:f6:
f7:0d:dc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:45 2025 by rpki-client