Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json)
Hash identifier: xpB4vZTGkUWhn+liE0RL/Rc6LtBHYF5n7nr9an6rXZU=
Subject key identifier: 1D:8F:53:05:F0:58:DB:4F:8F:DF:0A:B6:E8:1F:DB:00:57:5D:60:01
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 0194BC3BDAA9819CCC7E594A03E5C1EC4583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
Manifest number: 11E9
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: 1-DmgZ4SOp-NyMxLpBYaEtj39Pdc.roa (hash: moNVW0pEVWJfvkZEJ959J7HVzxYxrRxeZe7wePoILkM=)
2: 1-YvBQ0BXrsF-NI7ubQxbzvPVuzg.roa (hash: eYRmazTnlT6QkpTc8BcLL4cZu0o6zfLVuHBleuRca74=)
3: FwySP1jVKL7DmmlRNwZnvOJofjw.roa (hash: F8V8HLYupPXjwfMEbx0g1ieMP6WPPz1HmoVO8jTtRCg=)
4: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: fWpBqVfoAUuEMJJi4QDxPwnLEovbnH0qTaVsEfReaTo=)
5: Xu2K8fW-gQnYV7VE3ISwB8N68f8.roa (hash: NKQq6ePbr62hGHn3QtTkpNNxc85cdItsXJmI3/Mzf2w=)
6: bXcsNUMfdZBR3tv1r8dI-NGTxGI.roa (hash: nSyMcXVhj3Lt4TUfuUh042NUrc5IpwBc7m8EmxqlbJw=)
7: d_P2C7-8KzXEXKrYSD9DOI8LiWE.roa (hash: Yd4prnJa4gstJKWN3oZHIXfbfrVyLQkl2GQSNyCI7uQ=)
8: k5bIb9MZd-l_B-bxXKNoMlRDovA.roa (hash: bpuvw96upd8j55DJW2izTXwq0PIjcaMc/13PHw88j0I=)
9: leUb75eQIxyb-VxN49MBjH1YF7k.roa (hash: kyA2+f/9l+pKqkl9Or57N7CwCtWEqE5/Far2bCfSZ4I=)
10: qV9uaYW0EJ9RfJ2uJjNKqD5z7XA.roa (hash: 8zBVfYPjKnKjKryP+fVFU4l51KGHl1B5bpWFMv1A9Mk=)
11: sDrv6ds57QYfp4Z_4o5IpblURKI.roa (hash: Y8MxO27e+WV4vIqzW7fZxZuurHymmQUKVTNCec7B22g=)
12: wFX7xPpJ7yA033Ye7jyB7b5hfrY.roa (hash: cWLM1VzdX6e7FN9H2A5u+k5ZkEsPKCYG7CFbFvNUR/k=)
13: xxa6C-pa80quO5ROYbjP391EF1Y.roa (hash: kO5NzNIL7QO5wmPmlUrjQ/tzsh5UuDfcIRoRWEvLEF8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:da:a9:81:9c:cc:7e:59:4a:03:e5:c1:ec:45:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=1d8f5305f058db4f8fdf0ab6e81fdb00575d6001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:b6:eb:0a:fa:49:31:9b:69:38:cd:fa:b7:
3e:f2:c9:79:a6:bd:29:70:13:c7:f2:a6:bd:08:c8:
f9:4f:9f:39:7d:99:3c:7f:55:43:4d:1c:ce:35:7e:
6b:e5:31:91:2d:03:80:54:cd:a7:ab:0f:b8:97:13:
36:fe:6c:cb:88:6f:3d:58:ca:d7:a4:c9:bc:b7:a1:
53:b8:60:c4:63:7c:4e:46:d5:26:8f:82:5f:bc:19:
a8:61:58:0e:23:55:01:fa:3e:3f:a6:f9:25:0d:27:
8f:02:ac:9b:9c:15:a1:1e:c1:02:9d:6b:1b:29:e4:
21:5b:81:64:47:36:58:83:96:a6:eb:54:78:cd:6f:
b5:e2:88:e4:6e:69:63:4c:bc:5f:f9:bf:29:76:39:
b7:fd:94:43:0c:71:60:c8:55:f7:49:6b:ef:ae:0f:
0a:e8:c3:e0:1b:8d:64:54:32:75:90:4f:09:b4:7e:
d1:80:46:b3:c1:56:f5:52:e1:cb:ba:50:9f:c4:f3:
ee:f3:0e:a0:6a:30:83:05:80:7f:b8:1c:77:00:14:
ea:39:fd:b9:92:09:fb:2f:7a:04:05:f0:fb:e4:ac:
c1:91:45:12:fa:9c:91:f2:31:c3:d6:67:3f:b4:29:
ad:37:cc:2a:39:ff:a0:9e:63:c9:6c:42:e9:aa:24:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8F:53:05:F0:58:DB:4F:8F:DF:0A:B6:E8:1F:DB:00:57:5D:60:01
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:df:89:9e:3b:34:2c:8e:6f:20:7c:d6:4c:73:6b:c0:e2:f8:
23:5f:61:85:4a:44:ea:fa:31:77:ab:c0:e4:6a:45:d2:14:93:
f9:03:2f:16:53:84:34:20:0d:21:08:dc:e2:c8:df:ab:15:77:
18:c5:28:fa:bf:c8:91:b8:c0:4d:60:16:b2:a9:6f:33:9c:a9:
3f:e0:85:19:e7:55:bd:40:a3:c9:91:eb:68:77:29:66:93:0a:
6e:70:ea:ae:88:c8:e9:4c:91:c4:e3:64:0d:a5:fc:6f:d4:d9:
89:33:ef:01:0d:14:60:80:1d:68:a1:91:f6:12:5b:a8:1e:e2:
36:b1:74:32:5b:03:d8:1c:17:9f:cf:f3:f3:17:90:f3:13:35:
5c:44:5e:69:b1:0e:dd:9f:ef:ce:19:88:d5:a5:16:f7:4d:23:
1e:a6:15:1a:b7:25:d3:7d:29:a2:52:52:5e:4e:a7:cf:aa:21:
c9:11:bb:6e:fd:f8:39:64:9e:10:68:4f:20:31:00:1c:c7:9d:
e6:e8:60:06:c1:ce:2a:43:7f:3d:59:f8:11:a4:59:c3:f7:13:
2e:53:27:37:88:49:41:3f:9e:a6:29:00:66:bb:33:9f:d2:16:
2f:29:d9:8e:92:b0:0f:1a:40:3c:79:e4:ad:3a:c5:6f:62:04:
63:9c:cc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:09 2025 by rpki-client