Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json)
Hash identifier: 8MfdFB2lmNzP3qiTHJ0ou1fagRt/UZx59kP5SL01lyY=
Subject key identifier: 0E:CD:AB:80:2D:DD:F6:0B:A2:C6:86:A4:B7:02:EF:EC:FB:F6:19:F3
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 0194BBCE4F3AA19C8CF46BD26BBE46074281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
Manifest number: 102A
Signing time: Fri 31 Jan 2025 10:00:47 +0000
Manifest this update: Fri 31 Jan 2025 10:00:47 +0000
Manifest next update: Sat 01 Feb 2025 10:00:47 +0000
Files and hashes: 1: GbtphNgjK0vdnL4zh4ndNFpMq98.roa (hash: u7HLBqxJEFs0R6rzUwZQDioPq2mneZLMKiZ7WWFYBQg=)
2: HIdYT19grrvIrsLvbv9c-RyNoYM.roa (hash: gMWRLPsAhHALB5C0CyTnC2YpfuJ8OqfVcPAvIC+/69E=)
3: OUt5ZB5ErN_qim9RPT1gdy6_fsA.roa (hash: jUTt0o3pm+pyLvb6Ukj+eNNJ2nE69gsAdM4+2ox59R8=)
4: R_OlpiLM8AchN0LvgG-brNSPeok.roa (hash: Ha2jaeCRdAo3cD1S+TwOcwXV50R2/YikiY9fj+5QfSk=)
5: T-i1HnnAiZlugAgaa37LNPgeYyA.roa (hash: JZrI/oiF2iHcbj3PFgspIgoRlLncbc7mtmuIlUx+R6U=)
6: Ud1-qg4EKtzsyzWQNEDC3VcBphk.roa (hash: tG3V/2PvCU18KU7wZhF4EU3GKrtt9KLBzuF/XDqtx0A=)
7: euxOi9Xp3n7AyiSfCEP-xOv9hDo.roa (hash: hqClLQ+yTS1bqIE58Fj5bi8zXosgwwjJT2D8au7VfQ0=)
8: oTdRqWCGB_YZL-zzysNmCsUI8OU.roa (hash: Z3CxIW13t+FC0u78Ynw/b8NpKjP4IiiiZzM5isLuBQ4=)
9: opjBwsfQwaZJKVugJJ6MF-vgLQw.roa (hash: MNlxdTCVbR2yhgEH9HVAaomJahjdfDcmr5j99PJZjnc=)
10: piqnuODF7lhN690__V-7lYt7O9g.roa (hash: bJ0by5gF5+d/INxTw0HKrWzPPNlfAOi7lGQ6bR/NpSU=)
11: qjtTNxOEgSr0b6Weeb9JJHyFnhM.roa (hash: Eb0gxKs3qeMLVvYaIgIGm1oY4DsjaHktiucw1gfNHns=)
12: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: zG8Jwsz+IXnbqMdV7bqJlPEQecISpjfTT0b7swQMraU=)
13: saFbFhTUuPzFfFtMaOygiXjsdjQ.roa (hash: TDWnbYHUGSQ6GnqoY3kIyLDGpSZVRvMCUWL7dARQ87Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4f:3a:a1:9c:8c:f4:6b:d2:6b:be:46:07:42:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jan 31 10:00:47 2025 GMT
Not After : Feb 1 10:00:47 2025 GMT
Subject: CN=0ecdab802dddf60ba2c686a4b702efecfbf619f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:c7:2d:c7:af:39:da:78:ef:e1:77:bf:f1:
75:03:b3:fd:d6:e2:35:c6:3b:07:e5:3d:a7:1d:c1:
6d:13:2b:e2:61:a9:df:20:dd:c7:25:70:41:30:d6:
ce:ab:ea:23:e8:f2:cd:44:45:e0:d2:22:45:3c:86:
34:81:3f:78:3e:ee:31:d1:af:1a:23:29:98:62:84:
65:25:f7:8a:a9:e0:09:d8:b8:88:df:54:ec:ea:e6:
d1:52:ab:84:ea:9f:e0:6d:40:a3:f8:42:b8:06:e4:
7f:43:a1:b8:79:72:3c:e3:22:47:6d:3e:bd:c3:f2:
b5:3d:1e:36:a9:2a:ea:05:8e:71:05:9f:a3:46:c3:
11:93:86:f8:81:37:f7:21:80:34:ac:33:54:dd:26:
ce:2e:91:46:09:17:e8:9f:df:01:65:04:17:21:73:
54:76:fd:4e:62:f3:d3:71:02:6f:13:ed:70:55:93:
9f:5f:5d:5b:20:87:5f:a9:49:88:e2:b1:79:c2:f7:
67:57:c2:a2:a9:fe:1e:01:cc:32:8c:c4:b5:29:49:
11:17:7f:bd:08:0b:c5:3b:86:7f:c7:0d:cc:83:32:
8b:ae:f2:79:63:32:06:67:9f:66:97:81:a3:29:a8:
62:72:af:be:86:b2:9c:4f:fa:ac:77:97:8e:36:fd:
f1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CD:AB:80:2D:DD:F6:0B:A2:C6:86:A4:B7:02:EF:EC:FB:F6:19:F3
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:12:e7:8a:3f:5e:c7:b5:04:99:e6:39:e8:8f:86:c3:ea:c9:
8c:86:25:e4:96:1b:3a:0c:f2:55:14:7e:b8:5c:7c:b9:48:81:
97:33:60:d8:95:63:39:ee:58:79:69:b4:db:a4:9c:0a:db:9f:
d8:5b:c9:71:54:11:02:7b:68:4e:9f:0c:d5:0b:8f:91:58:f3:
ef:ff:a2:1b:75:46:ac:76:56:b0:db:7a:25:03:ec:05:94:33:
af:86:3b:74:77:21:85:77:1b:d2:3a:38:7e:32:d0:10:2a:c3:
c5:45:58:a0:84:1d:14:72:b2:f9:f4:7f:15:53:c4:a1:6d:ba:
47:83:3c:da:83:00:16:d6:29:e7:27:be:14:07:c7:9a:7f:c8:
bf:45:0a:fa:ff:d8:01:17:c4:21:58:b7:21:23:59:63:05:7b:
12:09:e7:3c:25:b8:b2:0c:4a:5f:f8:7e:24:00:a5:29:17:ac:
ba:c7:81:9d:26:f1:8a:41:59:e6:44:08:8b:6e:0c:2d:e1:e9:
a3:ef:66:b2:05:db:10:37:33:28:e7:1a:31:ac:66:53:2f:6d:
5c:6d:ea:10:3d:40:6e:61:f1:7e:58:c2:f9:08:ca:5e:a5:c4:
a7:2c:7d:7e:c7:30:5c:4d:77:cf:1f:86:2d:ed:70:87:77:e6:
c2:ea:33:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zk86oZyM9GvSa75GB0KBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz
N2Y0ZWQwHhcNMjUwMTMxMTAwMDQ3WhcNMjUwMjAxMTAwMDQ3WjAzMTEwLwYDVQQD
EygwZWNkYWI4MDJkZGRmNjBiYTJjNjg2YTRiNzAyZWZlY2ZiZjYxOWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbvHLcevOdp47+F3v/F1A7P91uI1
xjsH5T2nHcFtEyviYanfIN3HJXBBMNbOq+oj6PLNREXg0iJFPIY0gT94Pu4x0a8a
IymYYoRlJfeKqeAJ2LiI31Ts6ubRUquE6p/gbUCj+EK4BuR/Q6G4eXI84yJHbT69
w/K1PR42qSrqBY5xBZ+jRsMRk4b4gTf3IYA0rDNU3SbOLpFGCRfon98BZQQXIXNU
dv1OYvPTcQJvE+1wVZOfX11bIIdfqUmI4rF5wvdnV8Kiqf4eAcwyjMS1KUkRF3+9
CAvFO4Z/xw3MgzKLrvJ5YzIGZ59ml4GjKahicq++hrKcT/qsd5eONv3xLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7Nq4At3fYLosaGpLcC7+z79hnzMB8GA1UdIwQY
MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt
NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0
LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxLnij9e
x7UEmeY56I+Gw+rJjIYl5JYbOgzyVRR+uFx8uUiBlzNg2JVjOe5YeWm026ScCtuf
2FvJcVQRAntoTp8M1QuPkVjz7/+iG3VGrHZWsNt6JQPsBZQzr4Y7dHchhXcb0jo4
fjLQECrDxUVYoIQdFHKy+fR/FVPEoW26R4M82oMAFtYp5ye+FAfHmn/Iv0UK+v/Y
ARfEIVi3ISNZYwV7EgnnPCW4sgxKX/h+JAClKResuseBnSbxikFZ5kQIi24MLeHp
o+9msgXbEDczKOcaMaxmUy9tXG3qED1AbmHxfljC+QjKXqXEpyx9fscwXE13zx+G
Le1wh3fmwuozHQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:03:26 2025 by rpki-client