Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json)
Hash identifier: sCbMNTDem25i8fxDdeWp9wUOPs+wfAPhyY3dMD9Hia8=
Subject key identifier: BC:2D:4D:21:5A:07:73:A7:48:17:12:BD:9B:C2:1E:CA:CB:FB:8C:62
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial: 0194BD854C3F19F91933857FE98E24C9FAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
Manifest number: 11BC
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: 5WpWrypca4XGx0ISHtuZYRT_cno.roa (hash: R8ZoU8UZw1Z3gy7t3IJTFumdlDzgJjWSubPKAJkbvV0=)
2: 8BhJBrgJU6QTtBxUF9P-mg4e0FY.roa (hash: NHMGlFSWYU71U5CjbiwbYwVbjDXPm6NLwAYxgGFRzxI=)
3: 8wA7Z8R93JqOIr4nUCX1S5SLIf0.roa (hash: 8DXy5Yj333BXczsMQt5oYuiRo4BwLMddhajfUUPGovk=)
4: T1V76bxlhezLMl4Tzlvgqgk0pcg.roa (hash: Hk9kWyBSS3VZQ3ORtc2F2qsaXDclUxsqlus/HDJzLds=)
5: WTUcioF_Os4-XQkEQnPS1q_idj4.roa (hash: GoDJH/5tFY0kg++3GdMi45gfR3SA7rccJtYB4pw0JOA=)
6: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: CzOWJXZvz7mcCS0py0DnBYxszQLUxSIegqw7gSO1XFY=)
7: ezMLdhISIqr2PAqGoulAf-qQ6FY.roa (hash: MoVmtNQ9G0A/NJidABkGuBmF42AfIIukbBtAhp8lY68=)
8: f1wW_BV7vZtAZNKpmUDuydqJlsA.roa (hash: CdljZlhyWSUXZqLfpyDj+9shC/3i0VNujpmPdvzAtoY=)
9: mA4IEAHXR0LDJS0AO7AgvdyymfA.roa (hash: B62czMPy2pKQJ5FL2R2C5ZUZdywtpL+Cj+O5hZ16Rv4=)
10: nFpg1MdDA_eWwsO0Q3ACQCVoOLo.roa (hash: IrR5tLEqGUX+0tWapdzyeHvySftzHPehM4InRtFyHTE=)
11: rYC3jtCWjTE1_eifJwNBxiJmWgI.roa (hash: 18UkcBrtwFNepeuEYFTsG26kpbtVbxETboNFoBglbnw=)
12: sPeokAR-Fs3QF6kgxnY1Mln6cE4.roa (hash: y9wAEgungVsJkEt/V1Br+tCS6vp9AMavusIhdjXlm7A=)
13: t-GC4kGf7lvSnOYAiTpgmlkKEL4.roa (hash: 9rNbslHDQxGg0Ew50MQa2Fk3HC4+vs4VNNeusuZLYr8=)
14: x9Pa4FjGFuSawk-SEv2Ok6k19yY.roa (hash: KV0RsDBtETgbugEI2r4ib263Vs08/yFDjc5KML8G+A0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4c:3f:19:f9:19:33:85:7f:e9:8e:24:c9:fa:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=bc2d4d215a0773a7481712bd9bc21ecacbfb8c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:fd:a2:47:5e:e4:4a:c1:cf:0a:7f:a6:c4:14:
b6:29:da:f5:37:88:c8:5c:69:24:95:c0:e7:a3:02:
2c:32:ce:02:bf:4b:f5:77:c0:53:e3:5b:5c:77:cd:
0a:c5:19:1b:5f:04:ee:af:29:04:8c:fb:7c:a1:b5:
82:fd:69:0f:2a:b0:df:71:99:76:eb:4c:ee:dd:ec:
7f:dc:d2:1c:d4:b8:c6:c5:d3:64:bc:e4:2e:08:00:
6a:f5:8e:69:0a:58:eb:50:85:8a:80:63:ad:c9:e7:
73:c0:c8:9a:44:ef:4f:36:bb:bf:b9:ef:d7:c5:b7:
fa:c9:5a:ee:b8:4c:ba:d1:be:08:91:6e:ec:29:23:
e4:03:cb:2c:95:b0:a3:14:26:fa:ba:13:1f:57:05:
61:f4:8b:87:a5:37:be:8e:1d:60:58:fd:a3:d6:63:
49:b2:a6:88:fb:3d:08:78:a1:8a:90:5d:f7:d9:1e:
5f:65:bb:dd:95:be:ee:14:33:23:61:b0:61:71:f9:
10:98:f4:3d:3a:f5:1c:f8:da:6c:ec:30:10:60:dd:
7f:06:40:3f:3a:d0:97:9f:d1:1d:c6:de:38:0c:dc:
e2:b7:25:82:12:74:86:9f:42:8f:25:64:20:b7:f7:
a2:2b:a0:53:59:bb:0a:69:84:b4:b3:64:0f:b7:be:
05:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:2D:4D:21:5A:07:73:A7:48:17:12:BD:9B:C2:1E:CA:CB:FB:8C:62
X509v3 Authority Key Identifier:
keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:91:29:58:7f:74:97:5e:11:15:65:97:3b:31:4f:a2:34:fb:
e9:18:4b:8d:16:1f:25:90:4c:ff:f3:65:f6:28:e8:3c:00:4a:
61:f5:38:1b:65:1c:af:cc:be:f4:f6:8e:4f:1e:4d:3e:bb:dc:
5b:2e:98:75:ba:47:46:cd:89:c3:26:5f:4e:24:f3:61:60:4d:
49:cd:1c:7e:3e:fd:ef:e6:57:28:61:c6:56:fa:46:d1:b0:51:
16:8d:e6:3f:b1:04:34:ec:c2:d4:70:81:1a:4c:c8:db:d1:0f:
b7:ee:63:a2:94:96:46:2f:2a:f8:41:db:25:18:8d:49:24:04:
e8:5f:46:14:67:f1:76:9e:74:65:f1:ca:bd:5c:7e:84:33:81:
18:66:c1:12:09:3c:3c:1d:49:9d:9b:47:9a:12:1d:f1:bc:22:
dc:44:f2:5f:6f:f8:64:31:60:c8:b4:89:71:5f:2c:ad:90:e0:
7a:cc:50:f0:a5:0e:2f:bf:b1:d8:db:ed:0d:8e:ec:36:fb:0a:
de:8d:b9:f9:f3:fd:20:64:aa:f9:ad:e8:1e:5a:8f:1c:2a:9e:
f4:d7:6f:09:d0:7f:6c:26:f3:6e:3c:2d:09:18:e7:38:7b:e5:
14:99:6b:e7:d3:ab:a6:f3:f2:73:04:34:14:9c:e2:4b:3e:15:
6e:b8:04:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hUw/GfkZM4V/6Y4kyfqlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3
ZWVmNDAwHhcNMjUwMTMxMTgwMDE3WhcNMjUwMjAxMTgwMDE3WjAzMTEwLwYDVQQD
EyhiYzJkNGQyMTVhMDc3M2E3NDgxNzEyYmQ5YmMyMWVjYWNiZmI4YzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/2iR17kSsHPCn+mxBS2Kdr1N4jI
XGkklcDnowIsMs4Cv0v1d8BT41tcd80KxRkbXwTurykEjPt8obWC/WkPKrDfcZl2
60zu3ex/3NIc1LjGxdNkvOQuCABq9Y5pCljrUIWKgGOtyedzwMiaRO9PNru/ue/X
xbf6yVruuEy60b4IkW7sKSPkA8sslbCjFCb6uhMfVwVh9IuHpTe+jh1gWP2j1mNJ
sqaI+z0IeKGKkF332R5fZbvdlb7uFDMjYbBhcfkQmPQ9OvUc+Nps7DAQYN1/BkA/
OtCXn9Edxt44DNzityWCEnSGn0KPJWQgt/eiK6BTWbsKaYS0s2QPt74FXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwtTSFaB3OnSBcSvZvCHsrL+4xiMB8GA1UdIwQY
MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt
YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk
LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpEpWH90
l14RFWWXOzFPojT76RhLjRYfJZBM//Nl9ijoPABKYfU4G2Ucr8y+9PaOTx5NPrvc
Wy6YdbpHRs2JwyZfTiTzYWBNSc0cfj797+ZXKGHGVvpG0bBRFo3mP7EENOzC1HCB
GkzI29EPt+5jopSWRi8q+EHbJRiNSSQE6F9GFGfxdp50ZfHKvVx+hDOBGGbBEgk8
PB1JnZtHmhId8bwi3ETyX2/4ZDFgyLSJcV8srZDgesxQ8KUOL7+x2NvtDY7sNvsK
3o25+fP9IGSq+a3oHlqPHCqe9NdvCdB/bCbzbjwtCRjnOHvlFJlr59OrpvPycwQ0
FJziSz4VbrgEDg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:34 2025 by rpki-client