Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft
File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json)
Hash identifier: wGmD1j27RW48GNUFU2M6VPNBfuohszXOpHYnpacMzsw=
Subject key identifier: 8C:03:55:18:A4:26:0B:6A:D8:68:B0:0C:81:E4:4A:B5:C1:5C:1B:CE
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 0194BC72F1CC0850692D84397AC03668ED2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft
Manifest number: 1461
Signing time: Fri 31 Jan 2025 13:00:36 +0000
Manifest this update: Fri 31 Jan 2025 13:00:36 +0000
Manifest next update: Sat 01 Feb 2025 13:00:36 +0000
Files and hashes: 1: 74nFwIKFH3uKtRT845-Vm7iNpI0.roa (hash: dwaCUFData8ya0Po2dQ83XVjExSGr6tN155fGNNRXuQ=)
2: 8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa (hash: yu7qW8GzkV3Hti3WFulLSHqkbPCHZbtH3t3UW9Lux70=)
3: EB1wuDmeUHpHHXGPcvwMNdqGnvs.roa (hash: S/BpxLczs5GDrHvkHydPA/TMOCqSJ4TvOwz6gx4BBLU=)
4: FF91gUN8QFsi0UjNb0hbhpegU4Q.roa (hash: rux40oh7ImTDen+JjsxYObPPdlN/NaOxBM5bJfSToH0=)
5: J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa (hash: 8pwS1Eqt/nPpkIuSrw8GLk2/EWvlTk77ReSYaV8Jvi0=)
6: JNFYYPi5M46N7HWysvZAoIiQkYQ.roa (hash: 4FX/U+mKmibgMicQQFx15cVtRoPongw+FzcAthP3n5w=)
7: bUw7vUVn4cQiT9NfW716xSywuCE.roa (hash: 0o28YQYCqCXv7+7/uFNPlbdyY5SL/GVENUzDTrCxP4I=)
8: czhipXlSFQv2XtrizeOL4AkYjfQ.roa (hash: ktVLYCwHgnxekvZAuH8b1E8sdw3k+FPYtERYCRAoDw8=)
9: eiMLI2dh0653C-exQQO-o2bZ2eQ.roa (hash: IkhvxHI6cJnLtKgglasp3yMcL7l7unzpx1bcMF9QrRQ=)
10: m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa (hash: rnZuJDJK8WGs0bsROLYdsrz2g2AqOwxzQCBo6kRxe1U=)
11: pKbsDSCcPoTPV9a3xyEwiNaa7KM.roa (hash: wFWQhX064Lr1eYYNNXVk7O6211MDK7H1lvoD2jj+zbk=)
12: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: CUcxmtvUzosJ6hsihJihCppxatk5zV5g/54yFeIs9B4=)
13: xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa (hash: hhPTOcVJyofro9aVTmZ/Tc5fqLyU0/BYOcCQnrqIhRM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f1:cc:08:50:69:2d:84:39:7a:c0:36:68:ed:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jan 31 13:00:36 2025 GMT
Not After : Feb 1 13:00:36 2025 GMT
Subject: CN=8c035518a4260b6ad868b00c81e44ab5c15c1bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:40:fa:5b:a3:89:f7:57:4d:27:3d:3e:bb:
36:2b:3d:b5:a8:e6:ba:a0:f2:ee:08:10:73:76:19:
2f:2b:ed:ba:34:62:43:c3:f6:d9:d3:73:e9:16:50:
1d:1b:ad:8f:e7:a1:eb:e7:e0:40:85:16:8c:c6:d2:
8d:c4:32:0f:4d:d2:5e:b9:7f:39:61:f4:76:d3:a5:
2a:3c:42:f8:79:3e:e0:54:f9:8f:16:5a:7a:17:e8:
da:f9:a4:b3:a3:06:6f:0e:44:bc:b8:df:8a:4d:18:
cf:f4:76:0b:89:d5:c3:f0:0b:b4:35:23:2d:52:5f:
fd:e3:38:5e:c4:8a:f6:f9:c2:43:30:c3:50:40:f2:
b9:ac:3a:26:44:c1:fb:c4:f8:5b:17:55:43:ae:42:
c1:22:96:a0:20:24:93:de:69:e1:32:a1:fa:4a:50:
72:62:71:22:67:35:5c:47:15:d7:10:e4:13:a3:d1:
1e:9e:ce:54:e5:dc:74:74:f4:f2:84:58:13:45:18:
8c:05:6b:0e:13:73:26:68:89:72:56:69:f9:10:ca:
eb:4d:80:83:1f:aa:aa:a2:ee:1c:59:5a:29:40:37:
5c:9c:6c:6c:93:26:4b:1e:92:97:58:a7:d4:71:f6:
16:ad:12:b8:7e:98:e9:c3:d5:ea:8a:12:a1:6f:5d:
ec:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:03:55:18:A4:26:0B:6A:D8:68:B0:0C:81:E4:4A:B5:C1:5C:1B:CE
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:31:ea:09:bd:04:bb:a9:96:f0:1d:4d:80:d9:3f:74:2a:b8:
28:17:9c:45:9e:4f:f6:c4:7a:0b:52:8f:e6:9d:62:13:81:f3:
9e:c3:27:d2:7c:fd:e2:32:95:a5:c9:8c:5d:43:95:43:59:da:
8d:6f:df:f9:34:7d:5c:ac:e1:e2:c4:63:d2:10:3e:1d:36:48:
c0:c6:80:09:b9:ff:f7:c1:39:26:24:75:3a:da:38:1c:a8:fe:
c8:74:e4:4e:5a:4f:91:30:c7:17:ba:76:74:0e:8e:66:45:4a:
ff:f2:7a:41:e1:de:c4:5c:95:59:75:8a:e1:cb:e2:b4:a5:fb:
45:15:3e:ca:65:7a:6b:e1:bf:02:e2:fb:aa:56:6b:fe:d5:a0:
e6:ff:39:b1:3d:43:21:44:a0:85:03:74:9f:86:23:eb:c4:e0:
4b:03:71:fd:9b:fe:51:2a:c1:dc:ff:1a:35:3a:aa:44:05:a1:
ad:4d:28:00:aa:90:2d:34:1f:4a:3d:fd:f7:c6:bb:6b:33:4b:
87:3e:93:39:99:67:7c:fe:dc:42:e2:04:cb:f4:1c:3b:e8:63:
53:37:ce:5c:23:ee:5f:84:45:c7:cf:29:5f:df:d0:76:6d:25:
1f:c7:1b:83:91:ad:26:30:18:63:c9:bb:68:1c:55:51:7e:bb:
df:f9:31:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cvHMCFBpLYQ5esA2aO0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MjcwOGRmOTM5NTRhYWM2MDFhZWYxODM1YmQ1ZDY5MjQ1
ZmIwMmYwHhcNMjUwMTMxMTMwMDM2WhcNMjUwMjAxMTMwMDM2WjAzMTEwLwYDVQQD
Eyg4YzAzNTUxOGE0MjYwYjZhZDg2OGIwMGM4MWU0NGFiNWMxNWMxYmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw99A+lujifdXTSc9Prs2Kz21qOa6
oPLuCBBzdhkvK+26NGJDw/bZ03PpFlAdG62P56Hr5+BAhRaMxtKNxDIPTdJeuX85
YfR206UqPEL4eT7gVPmPFlp6F+ja+aSzowZvDkS8uN+KTRjP9HYLidXD8Au0NSMt
Ul/94zhexIr2+cJDMMNQQPK5rDomRMH7xPhbF1VDrkLBIpagICST3mnhMqH6SlBy
YnEiZzVcRxXXEOQTo9Eens5U5dx0dPTyhFgTRRiMBWsOE3MmaIlyVmn5EMrrTYCD
H6qqou4cWVopQDdcnGxskyZLHpKXWKfUcfYWrRK4fpjpw9XqihKhb13slwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwDVRikJgtq2GiwDIHkSrXBXBvOMB8GA1UdIwQY
MBaAFMQnCN+TlUqsYBrvGDW9XWkkX7AvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYt
NzQxYzFkOGRlYTJiLzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9mNjE3YTUtMzI0MC00OGM0LWI3MTYtNzQxYzFkOGRlYTJi
LzEveENjSTM1T1ZTcXhnR3U4WU5iMWRhU1Jmc0M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzHqCb0E
u6mW8B1NgNk/dCq4KBecRZ5P9sR6C1KP5p1iE4HznsMn0nz94jKVpcmMXUOVQ1na
jW/f+TR9XKzh4sRj0hA+HTZIwMaACbn/98E5JiR1Oto4HKj+yHTkTlpPkTDHF7p2
dA6OZkVK//J6QeHexFyVWXWK4cvitKX7RRU+ymV6a+G/AuL7qlZr/tWg5v85sT1D
IUSghQN0n4Yj68TgSwNx/Zv+USrB3P8aNTqqRAWhrU0oAKqQLTQfSj3998a7azNL
hz6TOZlnfP7cQuIEy/QcO+hjUzfOXCPuX4RFx88pX9/Qdm0lH8cbg5GtJjAYY8m7
aBxVUX673/kx+Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:26 2025 by rpki-client