Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json)
Hash identifier: HAfeZiLWk/QHnPf7PxyBinOD8MgGeyRYNTsGqd7qwpg=
Subject key identifier: BE:1C:75:8F:3B:F3:D4:2E:8F:B9:C8:B0:57:BF:59:CF:40:BF:ED:0A
Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Certificate serial: 0194BBCE7DAC149B4DCB03A884CB308935DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
Manifest number: 1433
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: 0vpioq7e7IBvU0f7txi-wExHAPw.roa (hash: lCvUWIuH8RdERCkztaN1NhfYOchJDmj9ywnhD1WG0qs=)
2: 1-t-clxlx4vHi76xBwGIh0Y5orug.roa (hash: WGphFqEzeHYQfivrVaHRtOvOzzhN/PDKxrZlm3FuIDA=)
3: 4CCEdgNV-fGWUC_aGHxQwbUsOKQ.roa (hash: zTRmkFZkHzwf+QYURy5/v5Sjyovq0HLSmOwtNQ48L/c=)
4: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: a4lS1EMnaYXbn3xI3Ov2gha/O+rTheHhNpaAA6MZipU=)
5: 9oOMh0CjqydkdSKEbK66nXXsu4E.roa (hash: qQJNJWud5A2R6q9LElC5WdsYynVdzga12kQWDH61mWo=)
6: AoQYABlbiRY1s0Gu3McHV58zrpk.roa (hash: 9zDAXKdytFg/3YwoUton7cniFW2Ja9ArE5tJ2skkn+c=)
7: OdGF_e17lYBOCmXmsk6hkXdf7b4.roa (hash: mFKHbPekFFY75D3Eu+1fU9mzEnOZ9+rJaeHup24zW3Q=)
8: PFyByii-LGzRSy90jiJ5mw1207A.roa (hash: gIS/3e5ejAqBGpUPti4f7RxoNdrem0KAE6vwjMubh3s=)
9: Qkq_75MjyviWe2NqgT_-Mwn9gnM.roa (hash: wJb9fi2vDIIR6voDYxFFRDUWuFkEQa98zP1PFmkzpXs=)
10: ScwFXX2rYjT7naQciVMaotJ-UfM.roa (hash: X8Vp96ZEvVObF+OkcOx9P04g9HBNU6my6Pc/b9LR72Y=)
11: rh7_88ku0NVEacOTg4kYRNyhUIs.roa (hash: Uz863y1lKUf+O+OGV8gNQDxIpi4RBI83I9R9FXt5Xp4=)
12: u37q8oxj6d2YnoBLY1VE3CqS2g0.roa (hash: QV9HVDjMgl4TBfOFPjFKF+CTfrUEm6XmvkI/fobJGaM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7d:ac:14:9b:4d:cb:03:a8:84:cb:30:89:35:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=be1c758f3bf3d42e8fb9c8b057bf59cf40bfed0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a6:2b:9e:0e:df:37:95:fd:39:6d:d8:9b:42:
b9:f8:55:cb:ca:11:f6:3e:8e:a5:8e:57:13:fd:a1:
34:fc:6b:37:7a:a0:11:50:14:f9:4a:83:47:d0:b3:
d6:85:1c:c5:c3:e6:d1:78:24:be:8d:41:c7:85:37:
69:64:f5:62:f7:b3:71:5c:f7:6b:7c:42:f0:a1:f1:
02:2b:70:08:e1:c5:94:ee:71:ec:37:b2:a9:d3:51:
51:39:90:5e:fb:7f:17:a1:af:19:72:f8:6a:ef:25:
26:3f:f7:bb:ad:61:c4:5a:09:0e:68:87:c0:66:6b:
6b:18:cc:b0:b0:dd:16:2e:56:11:05:62:fc:ba:8b:
b0:a3:72:2b:5b:a3:9e:22:26:62:83:29:60:4a:21:
2e:75:24:7d:06:83:a3:64:d5:d6:ab:3f:47:8c:2d:
98:76:f5:3f:1e:19:dd:39:64:11:a6:e9:20:dc:71:
46:1b:a7:16:6f:b7:e7:89:eb:9d:77:2b:c0:72:8b:
5a:f9:75:d7:7a:52:82:22:c5:d6:08:ed:93:ed:02:
e0:fd:d8:62:51:de:01:dd:84:14:41:4d:d0:37:bd:
59:df:8a:a6:fb:79:b3:3e:bd:d6:69:ca:3c:86:26:
53:f4:9b:89:a5:3c:42:3a:a4:e6:e6:b1:90:78:e8:
d4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1C:75:8F:3B:F3:D4:2E:8F:B9:C8:B0:57:BF:59:CF:40:BF:ED:0A
X509v3 Authority Key Identifier:
keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1f:08:18:2d:b6:1e:fd:d3:88:bc:99:f8:66:d7:44:c1:b4:
ff:a1:2e:be:51:a8:00:f5:af:7b:5e:88:b2:1f:45:ee:e7:cb:
cd:ef:bd:fb:5c:2e:c1:b8:9e:06:fe:11:bb:c7:d9:86:dc:40:
5c:61:84:82:0c:6c:51:e5:cc:8d:dd:7c:84:56:07:87:ab:ef:
e3:03:01:05:3b:75:ab:76:04:59:27:b5:b3:ca:05:0f:90:d8:
8d:d1:68:5c:29:d8:fd:7c:1e:da:82:82:46:71:9b:9c:79:24:
81:bf:ef:f6:0b:db:c7:6c:da:8e:ca:72:83:a4:3b:bd:42:6c:
8c:82:26:ea:57:54:45:73:9b:b4:59:54:b7:0d:91:d9:d1:12:
a0:bc:16:23:30:d9:3f:3b:fd:f9:62:b9:56:03:56:e7:11:c8:
ce:df:71:f8:e7:0e:16:72:9a:09:3f:ad:ec:4c:96:03:8b:26:
fe:1a:d5:6c:06:41:67:1e:70:c4:90:67:ab:69:4b:20:c1:79:
df:93:51:56:6a:d8:46:e0:19:eb:f8:af:a7:c6:20:e2:9c:7a:
4a:53:f0:3b:68:c0:94:28:81:bb:d6:31:ad:5b:68:87:99:ce:
0d:12:56:f6:23:e8:a8:c9:c2:14:d6:b3:c1:20:82:68:4c:56:
43:c0:28:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:48 2025 by rpki-client