Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json)
Hash identifier: ORD1V2woY/Upnzhb3xYFcFh1Z4LFrqrpi+4erGLXbJA=
Subject key identifier: 3C:57:92:0B:68:24:80:E0:EE:84:9A:03:1A:36:26:3D:89:EC:0F:D3
Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Certificate serial: 0194BCAA2D7D85A8E9C82C78E2DED8C0F30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
Manifest number: 148E
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: 7DM2hbO-hq6IK6AoAUuQ1ea2stU.roa (hash: +WzkExLJvB4whmsPOMItEHHQpSRKHyVLJlT/3lSLPVU=)
2: DCk-HbF-eV580rU6qOCfufYCA-g.roa (hash: 4M3pyOpfpRYD0mDyghTt07Py5R3GII9tjv9853A9cvE=)
3: GJGNGTLsLaPzo7RV9J9cGo7ZCKI.roa (hash: ycPiGraLR+oJB3cwW5Zn+sG2+Vx4fOUp8s3QYwjDHdY=)
4: LJGytq9N5LZAfsPYy6Q-7xTDnFQ.roa (hash: L8DANG0AVQkhh+LlhVF97AUo2a9H2Thg2+BhZTsZc9s=)
5: VdTIZg10bNsf97lJZgApyqs5rnw.roa (hash: JZmVNExP4W1uSJTEkKjxhG9IYISkRZKnN8IfaygiTvg=)
6: ZYxHxbyUqO0AcEc29yP0EJGRFzU.roa (hash: o8vjrNrM+L4uM+B11Nia5Kt2L5CIxZ+RsDMwJFiGpTY=)
7: _RuQI5qt_gCJV8eSXJjHywGzAcM.roa (hash: DUnvGlvb0qBwrlu2PMIboP80gnaIA1d0Yg1mit2U5+4=)
8: acsdEgh-dFdAGSqAE_lAYWdPdzo.roa (hash: lIvBIoA3FQRV1Et4CF8cBr7OP+IuEmQHKzZDW4s0Y6A=)
9: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: 42fQaUNdLHOmfPkTmkJizPMGSkOxRkNHeaHzJVMVUmg=)
10: mJjHdX3SCVwj6yoNCT7Dpu7pXSo.roa (hash: ccP3x4XUmUaf8il9YXiD7LEPdeAv9/EZKZYCHAVZnrA=)
11: uXeorQ0KraTFvVQlrxOSwyrTRt8.roa (hash: p6Mox6CbN3FoG5SSiyHeNVnPtI+94QgKaVPxEdmTl2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2d:7d:85:a8:e9:c8:2c:78:e2:de:d8:c0:f3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=3c57920b682480e0ee849a031a36263d89ec0fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5b:08:62:7d:24:2c:01:ae:15:30:68:20:e1:
99:4a:bf:0a:b8:b4:c5:46:c0:80:2d:4f:a8:f4:1d:
34:f0:6e:26:3a:82:da:45:78:b8:5c:20:eb:f0:f0:
69:30:fc:67:62:46:85:36:02:f6:e2:e4:00:ac:ba:
9e:9a:75:c0:13:a3:28:36:76:cc:26:2b:e1:e3:0b:
ca:03:d4:be:5a:76:07:51:2d:b9:43:7d:62:b2:48:
e7:a4:d7:87:a0:7e:d7:f1:18:ca:db:34:f1:5b:e7:
01:44:a0:50:e9:56:0c:99:30:b0:c6:87:78:ae:3b:
83:ab:fc:c8:d0:8f:50:dc:1d:99:be:35:cc:92:c7:
8a:e8:23:08:6e:53:65:2a:8f:1a:1d:d2:74:06:11:
87:d7:19:1f:20:c4:0f:8c:d0:84:c4:7a:52:17:7d:
2c:e0:fd:94:19:b1:01:ee:0f:29:c0:c1:1b:16:b9:
95:4f:9b:ab:cf:c4:16:3b:2e:1c:c5:2c:e8:ef:79:
17:93:02:76:ae:19:aa:43:b4:78:1a:e9:29:b8:9d:
4a:93:4d:a4:0a:2c:f7:ce:bf:d1:7a:53:52:d6:75:
79:ec:df:87:1d:63:11:bb:4e:ea:22:a1:8a:d6:8d:
23:04:9f:6b:e5:d7:8a:7e:ca:b8:11:d2:c7:aa:f6:
c7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:57:92:0B:68:24:80:E0:EE:84:9A:03:1A:36:26:3D:89:EC:0F:D3
X509v3 Authority Key Identifier:
keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1a:2b:f0:06:8f:14:21:dc:f8:73:e9:d6:1d:d3:6f:f5:77:
57:47:5a:22:a0:4c:e9:88:cb:1f:51:e1:ac:b3:ab:6a:5c:ac:
55:bd:35:af:0c:2b:ea:bc:95:69:4b:5e:56:95:29:06:8c:f2:
23:be:e5:b2:37:0d:23:5d:bc:d3:2b:62:97:c1:a5:59:65:dd:
cd:ac:ae:45:0c:b3:7c:3c:d8:79:bd:64:81:31:09:d1:e6:14:
3a:c3:72:a9:85:57:a7:fd:a8:f0:5e:09:81:37:a6:1c:46:15:
69:6c:c4:f4:81:04:64:36:9a:25:81:e1:75:f5:64:1f:bc:f6:
a3:6e:af:7c:8a:dd:a7:b0:51:74:62:07:7d:7f:dd:57:1d:2f:
33:69:64:66:6a:c7:17:de:ec:7f:2b:df:5b:01:9c:95:85:26:
27:ea:5a:52:a4:f4:1d:27:39:b1:fa:07:67:36:9e:30:b1:72:
43:b0:b3:6a:f8:dd:e0:75:9d:b1:91:d9:08:c0:90:07:52:7d:
34:37:ab:3d:59:8b:f2:6d:d4:65:80:93:ef:45:ff:e4:1d:41:
3c:21:27:8b:23:da:23:e4:4a:8e:31:a7:66:bd:5b:11:37:de:
3f:e4:1f:43:3d:68:d3:32:f4:57:2f:c0:cf:3b:16:fd:ad:d3:
80:f2:24:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:37 2025 by rpki-client