Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json)
Hash identifier: E8hT7aVmfkiQKNpmSeuYJ+jBjMyOEjxM3N6IeQVqPP0=
Subject key identifier: 17:C0:4A:04:B8:09:FE:29:C4:70:E7:A5:A1:93:19:70:6B:02:6A:5C
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0194BD17DB5C0AF1049EB870EB56B0AD8E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
Manifest number: 15FE
Signing time: Fri 31 Jan 2025 16:00:44 +0000
Manifest this update: Fri 31 Jan 2025 16:00:44 +0000
Manifest next update: Sat 01 Feb 2025 16:00:44 +0000
Files and hashes: 1: 0pU8j0MySids8B7P1Z4MPCYtQQ8.roa (hash: YB7/HZL1tekwHsjTYy7WcH7gtaLHvddr5HCEfT0Sa/M=)
2: Hz_xDuk3Vvfh6JY3welKqmjCaoE.roa (hash: UJU3C1rwhTNaES7yoXR7xuWHpGTcdq5wM3nNwCM33l4=)
3: TAMT8S1Oah9_z0PWf3XcQc44cOk.roa (hash: 9mcb/wnUVCxwNUJn00ZGKe3b2/Eu25INtNWxqWVF+fE=)
4: TOEtygW-JFsbCGpcVCPKCUmvT8Y.roa (hash: JOt+ILdNMnAl8qaOPRPYlPMnVx4wLH49n9I8LiobkQA=)
5: U2tphYuFM8kk0W7orOWXNfbZPqw.roa (hash: fWhJtmDdcAYyNt0CvDorvB/6p7uqlch+/pvi2XMjyPs=)
6: Uxt9xtNoM4UmPfW3AD2yl96P1g4.roa (hash: Hmj3pBb7cHH+AUZxj6RnL4nH/svIdPL8CJUVFbcYvdk=)
7: XbK71XmDhZ84irJ2BuCGbbUcSrI.roa (hash: /KFmCOPdf7KqB2mvQS6vb3QYy/TcVDV7emg/BulKL7A=)
8: ovKyvCqAYAi4GuIc3J8z5faKymI.roa (hash: Km2wn6rXYGpVOUdXmNB5XvHkgJAIc1yNr7TuGTuVV9M=)
9: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: 0xIorBGIiv0qZGskA3z2zL4y1VkfEOeKpX9++tRSSC0=)
10: rmrCbbrS1Tw_7ZKo8BjYlvL6Sj8.roa (hash: n/Do8QgQFF5nBe1gQaeGAVidQjalUdDv00gU2tjHloY=)
11: tnCxlMJcFjJNR1BgpRasaoWflbg.roa (hash: NGBkP+kMJwXFz3QRdHJSNRXeiC1xezQ5KE4ynogLaXo=)
12: vzTanwbr4t3-d_ew6MYjIY7B60s.roa (hash: V77quOethnKxDHJMjbM6m972KOUbs2IyF+Kf059wU8E=)
13: yK6ssOWoPDeYE0W6ZxzPJC0rBHw.roa (hash: 52vkWSu+Xe46mKEs+O2A4dE8J3gg0EoPs6Jdnm/NCrA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:db:5c:0a:f1:04:9e:b8:70:eb:56:b0:ad:8e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jan 31 16:00:44 2025 GMT
Not After : Feb 1 16:00:44 2025 GMT
Subject: CN=17c04a04b809fe29c470e7a5a19319706b026a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:e5:98:c2:35:f3:bf:fc:42:49:41:7f:8e:
84:25:50:b4:5d:e3:35:cc:f1:a3:9e:8e:31:7e:60:
93:ad:ef:d1:b1:7f:86:2e:46:5a:39:e7:a5:ee:9a:
60:74:e7:79:85:4f:c1:80:f3:bb:0f:9f:1c:78:25:
6d:b3:bd:1c:d0:8a:bd:e3:42:c0:fb:78:db:0a:fa:
04:7c:8c:ca:95:4f:87:86:bf:c7:19:5a:af:f0:37:
d3:12:0a:5a:f8:e5:94:ec:f5:e7:9f:61:3a:cd:b4:
6a:00:0d:10:fa:eb:4c:54:fe:03:d3:e4:74:20:ae:
9f:4f:2c:64:e5:5a:10:23:98:c4:b5:af:89:91:eb:
32:eb:ee:c0:43:40:0c:93:d0:3c:4f:8c:6b:4b:ca:
9c:9c:e7:2e:c5:dd:da:c5:d3:12:1b:32:d1:de:ed:
9f:c1:be:ac:91:85:db:a8:60:b5:9b:b1:2c:99:83:
39:dd:c8:d9:3f:c3:7c:93:9a:e6:b3:aa:32:91:4f:
cc:cf:76:b4:c3:e4:06:82:3b:cb:a2:83:e0:59:c4:
81:10:ee:8b:c2:2f:0c:65:de:f3:6a:5d:0a:9b:46:
89:de:84:99:37:1f:02:9a:2f:c6:86:a6:cb:d6:f5:
ae:0c:e2:91:1c:52:12:d9:9a:71:3f:29:b9:55:55:
0b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C0:4A:04:B8:09:FE:29:C4:70:E7:A5:A1:93:19:70:6B:02:6A:5C
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fc:18:7a:61:5c:5e:10:ec:b3:bc:90:ec:bf:88:fa:cf:1b:
d7:06:aa:ee:d3:22:80:6a:9a:40:d4:52:fb:73:5f:2a:56:1a:
87:42:cc:50:55:53:1f:91:f2:9b:77:df:77:d4:8d:cf:ab:e0:
80:ad:98:c1:d1:01:24:87:61:e2:d4:f8:3b:30:ec:80:2f:91:
39:28:07:d9:72:7b:56:75:f0:e0:2c:cc:78:e2:00:e4:88:52:
03:6a:59:d8:da:af:e3:bb:15:0f:1a:53:d6:3b:c6:cb:68:52:
5f:56:a0:40:5c:74:0d:8f:23:e4:50:a3:b1:28:02:59:a5:29:
22:63:61:bd:e2:31:10:35:7c:e1:61:4b:64:0d:51:1c:06:9f:
5b:43:0e:7c:6f:f6:5c:35:5b:4d:36:46:bf:23:4c:54:c2:de:
d6:40:25:37:1e:ef:fa:69:62:55:f9:ea:20:46:6f:ea:2c:8b:
a5:1e:cd:a7:8d:26:7f:a4:5f:44:5f:3f:4a:f3:4e:1e:58:ff:
e7:c0:dc:8f:37:fe:3b:6a:f2:4e:b9:fa:6d:0e:17:56:86:4f:
85:f4:88:dd:ea:14:5a:f9:a3:80:b4:cb:14:4b:8d:f8:4b:ec:
7a:2b:bf:2b:a5:2b:a0:ab:c3:c3:62:e2:5f:15:a0:9e:67:e8:
1e:a3:32:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:13 2025 by rpki-client