Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json)
Hash identifier: F+cQosCHOXkrgjbW52IrG5ZEFdSOqrCOtDiowbsdej8=
Subject key identifier: 09:F9:6B:7A:DC:FD:D5:46:E2:C9:9D:34:B9:BC:00:A9:1A:99:00:B7
Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Certificate serial: 0194BD17E434A18DC606F64A41F7046F5CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
Manifest number: 078B
Signing time: Fri 31 Jan 2025 16:00:47 +0000
Manifest this update: Fri 31 Jan 2025 16:00:47 +0000
Manifest next update: Sat 01 Feb 2025 16:00:47 +0000
Files and hashes: 1: 31z7eSu8--35kebgOlCIABBeVf8.roa (hash: Bo6lIvIlV0RX6xhodzhO7tuvgscKOLMBcfTJSKlUYZw=)
2: 38qwOchGJ_A-9FTGlrpJJL-yZxA.roa (hash: yoh81RGXEUS06sBHWHeNKK9lZEYPXQYPgqR5celg/x8=)
3: 7pPLJaN3OTQBK8i-P4GOQNKJPho.roa (hash: HpLQLLrJKx/bS+zdiKUm5TCX+jRSuh5jVP1YSt/MOZY=)
4: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: d2d6T1gJXbrsplbNrclI8yjwEEP9eh4qBOkRuS1GSAQ=)
5: EacbpO8P-LkG-h50-C35fVYJXyI.roa (hash: btUaf5jDz02025fLzDlihBUOmr88cX2MxuDiHPb5dc4=)
6: LI3W9bAGcJfYeSECRSILu1bw8kk.roa (hash: Wl5pxXd1n1csv2tQU5l7gpWl7BWI1Z8ORecwJV0UFps=)
7: N0ylFt5LVYNjTI-_TsSgO84trzU.roa (hash: FGN5RCpPLee+DVEx92LqF5VUyDDoLbxxrafkYHnOVZg=)
8: PEEbtcraLxJZAPZLAW5H_KDLDwQ.roa (hash: wU0HPJ884+fnbW1G1BaCynti9gWD3Sn+0YrIsJUp3ns=)
9: hLdZE5q1FOXSO44ZofCjRXN9z7I.roa (hash: CmOCZv7BugezIWG5ZPHeIaee5S3CP9UP9zRJfwRzazg=)
10: n_d7GjbZ9YbYK045nkHL_lX76pM.roa (hash: L6McSAJwh8T7ZY3ArgurepjkJRDGFkS06sAchDylLyc=)
11: pW-Kl5UPWqu6KG3_J4t1h52HuR0.roa (hash: 0HOBimxzzdToQy38vYlAJbGZVaBtPNrg0qioOLxF/+Q=)
12: tlqKEYYvFMWYK-JPntFn1nyKI1U.roa (hash: /wIoPxgkbhHCyNQ8NB2J0bNqG5fb1wxitY8EONuXMt0=)
13: yFPiywRMEHaITt3TRPzJux8bzAU.roa (hash: WnTskmfJ1KLR7sA0SYoAyMqXx6u45IJAhh3f7ztydOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e4:34:a1:8d:c6:06:f6:4a:41:f7:04:6f:5c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7
Validity
Not Before: Jan 31 16:00:47 2025 GMT
Not After : Feb 1 16:00:47 2025 GMT
Subject: CN=09f96b7adcfdd546e2c99d34b9bc00a91a9900b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a7:09:8a:ca:f7:06:4d:9f:55:dd:95:ae:d5:
dd:22:d0:3b:5c:d7:ae:74:1a:5a:39:e4:67:26:79:
4d:4f:0e:82:3f:b7:ff:bf:94:26:c3:88:7b:4d:ad:
49:0d:db:9c:92:33:be:a3:a1:af:41:1f:f3:96:6a:
30:fc:79:4d:1e:a9:12:3b:3b:a8:5d:00:fa:f8:e2:
e3:c4:9a:7a:cf:34:28:4e:86:04:61:2b:45:b7:ad:
3e:c6:54:55:5f:bc:16:c3:b2:98:0b:b5:69:39:fa:
17:71:e7:bb:48:c0:62:87:6b:a1:01:93:c7:0f:bf:
a2:1c:b7:1a:8c:3b:b1:a6:50:73:a0:93:9a:7a:e5:
d5:97:55:fb:2e:1d:da:2f:e0:78:4a:f3:c6:7d:c2:
d2:b7:76:d5:b2:6e:9a:28:ae:6a:cc:b3:d0:9c:e0:
56:d5:bc:31:1c:44:13:4a:52:54:ff:da:93:74:c6:
ae:37:13:45:1b:22:c6:bd:57:74:0c:2a:f0:59:68:
9a:1d:d0:ba:d8:5d:e7:90:89:63:75:3b:73:a6:d2:
a6:13:64:b7:8a:65:b1:80:ce:e1:ce:a1:2a:47:40:
b4:d0:be:98:ae:db:b0:bc:70:40:6e:22:0f:39:1d:
64:1c:47:9b:6d:a7:a3:97:9e:f9:79:42:23:bd:69:
da:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F9:6B:7A:DC:FD:D5:46:E2:C9:9D:34:B9:BC:00:A9:1A:99:00:B7
X509v3 Authority Key Identifier:
keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e0:55:45:59:3a:8a:de:5e:48:69:8a:a0:3a:72:0b:37:49:
40:07:94:53:06:97:68:d8:7b:b8:fb:21:7b:2e:7c:64:65:bb:
9e:0b:f2:98:84:d5:6b:86:f7:4b:5b:46:7e:bb:a6:0b:63:d2:
97:33:d0:87:2b:33:c2:6e:42:b6:ef:dd:a8:85:1a:c5:8d:10:
94:d2:6d:cd:53:0d:46:8f:89:29:65:ab:00:28:9a:70:83:35:
5a:5c:eb:79:21:c7:53:8b:d1:d6:05:1d:77:1e:47:b8:1c:d6:
0c:35:7e:2a:5d:eb:c4:74:36:7b:48:2c:db:9c:f2:b5:a5:7d:
29:21:f0:ff:43:ef:31:68:28:49:4d:c3:ba:57:dd:55:e3:21:
e7:ae:ae:f1:7b:e1:c2:05:2f:8d:d8:9c:75:be:d4:f7:b7:93:
6c:bc:39:0f:57:11:a7:d9:99:f9:5e:87:11:66:7a:71:a2:6c:
ec:fd:e0:cc:b8:33:bf:2d:f8:2e:3b:de:27:3c:39:4c:b7:26:
a2:38:4a:f6:bd:8b:83:94:47:ed:ca:7c:74:f9:37:33:6e:cc:
44:3b:0f:b3:69:8e:46:5a:d7:d3:9a:8f:47:fb:f4:e9:5c:cc:
7a:9f:6d:44:64:d9:4d:4a:94:1b:93:3f:27:e5:a7:1b:23:f2:
2d:8e:12:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:53 2025 by rpki-client