Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
File: RotZLzEQvGw1JJqCcaDawamssM4.mft (raw, json)
Hash identifier: 73JaVnQysGg5S9/yvzeQQoBYO3vpl37PyS1SHlE8b84=
Subject key identifier: 86:FF:5B:E0:7C:FD:7C:B6:A3:57:2F:20:E2:AD:64:87:49:20:24:E2
Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Certificate serial: 0194BBCE363F2F32106E327CBB0E3427FEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
Manifest number: 0434
Signing time: Fri 31 Jan 2025 10:00:41 +0000
Manifest this update: Fri 31 Jan 2025 10:00:41 +0000
Manifest next update: Sat 01 Feb 2025 10:00:41 +0000
Files and hashes: 1: 4PdFFqbPgnyAF8OAZU59EP79EQE.roa (hash: 0N0pRYIfSwp4rQqEao9ImOBW5Z4au+nqt0SGDhOprnI=)
2: 8u1Ww9yNVHCXoKy959EsUaU71zs.roa (hash: MCjwWNvinwMVi61YdY3QarB5BMMcy4gUuYfqYD2T3PI=)
3: RotZLzEQvGw1JJqCcaDawamssM4.crl (hash: pPTmAkoWHcDfzclkd0c0iLkmkm/DS/MT3lZ8rEnuKhM=)
4: XxlBbuzHE251PVWYt8IDfDvm0wk.roa (hash: nVVabXK7sQQ4tz6ONtNrZy+JOjU5+yR5hZWs5BNXx1Y=)
5: _vYyrixRE-yXYNd95EagmmedMZs.roa (hash: Nq9E9fzlDdc1TerNy7pW2Y+cp+tsEL9ANsKsoDQ0Pwo=)
6: bvgsPr3D5PPxL6J89BfI0hjp6nU.roa (hash: gQ8pHX8IE1KeaNe50ukz0WLLfO6NzXHlCO7loLPh0Ow=)
7: i1oSM0zm6FdsD8GW2rr18ZJYU9c.roa (hash: vhtU0Gjcgqwk2dDqzgcdqq71xJAqWywoPwJaRLlLExA=)
8: jUB5PRtoRI1flFNEi0Xhc9A2v24.roa (hash: xahLnc6O0sfqsubQhJTJfxB0AtmlnA57o0hU8mlDp6I=)
9: moar5P9-vHm1h7dW1fwgc72NFhw.roa (hash: JbVrT9GvQCxgYaVUxgeC2lZytQA7NzFvIW4W5mDjY3A=)
10: wpO2gWHd7fIiJY2UmwBghuKU8Pk.roa (hash: eNcYuQe4vVrI0lLxGnwWNPY5OwCaWdtNSK5bPAl0Ug8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:36:3f:2f:32:10:6e:32:7c:bb:0e:34:27:fe:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce
Validity
Not Before: Jan 31 10:00:41 2025 GMT
Not After : Feb 1 10:00:41 2025 GMT
Subject: CN=86ff5be07cfd7cb6a3572f20e2ad6487492024e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:01:7b:a4:96:51:e6:c9:9f:b7:90:79:da:55:
b5:3c:bf:8f:b1:38:7d:a7:16:3b:38:d0:ee:49:62:
28:6b:e1:ff:7e:6a:7e:12:ab:f2:04:36:56:e0:7f:
4d:f6:cc:f0:53:e0:7f:9a:70:7d:ea:f4:3b:e2:c7:
a7:d6:34:31:bc:45:46:3f:4e:4e:08:2a:82:07:e5:
0b:fe:94:9f:48:8a:0d:4a:d0:4e:03:64:b3:c9:3a:
03:a3:f0:11:75:43:50:af:92:c5:78:ba:eb:8a:fc:
83:71:eb:c7:e2:7e:1b:37:f7:65:b6:62:8e:bf:4e:
e8:5e:dd:46:ae:df:5a:32:4e:ee:7c:8e:ae:20:01:
2d:00:ba:ae:76:53:d7:ed:ef:71:5c:36:ad:48:cd:
19:17:05:cc:27:98:1f:17:d4:51:bd:b0:d2:ec:09:
e2:42:5c:4b:9f:5d:b0:07:1e:7c:54:b7:07:7a:f4:
cc:91:78:b9:d3:1b:55:5c:84:ad:e7:c9:8d:f3:12:
f6:4f:5c:c2:bf:a8:44:cf:c7:29:47:20:ab:eb:59:
e3:0e:cb:58:d0:10:90:48:47:4a:b8:85:b7:75:f7:
68:00:1e:bd:06:de:09:e8:67:5d:20:17:2e:9e:28:
65:08:3f:63:5d:3f:44:93:ca:a6:e2:70:f7:78:83:
92:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:FF:5B:E0:7C:FD:7C:B6:A3:57:2F:20:E2:AD:64:87:49:20:24:E2
X509v3 Authority Key Identifier:
keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:65:10:6e:a3:15:6a:0d:2b:0d:67:0e:02:2b:41:4f:03:04:
c0:0a:45:6c:ef:e5:c7:a7:ab:b3:23:e2:4d:27:da:b3:08:2d:
45:f1:2d:a0:92:92:ab:1b:21:9f:86:e9:bb:37:e8:6e:12:86:
46:17:60:22:44:10:e4:27:07:e6:43:4c:58:4d:be:57:d2:e3:
4f:0a:d9:27:d4:15:9c:29:15:3c:87:0b:4c:cd:ed:5a:5c:c7:
ee:f5:cc:1b:5d:a7:96:49:01:57:e5:8b:2a:22:4b:de:4d:ae:
b6:9e:94:f9:d7:5b:9d:9c:e7:0e:1a:31:9f:f8:be:af:bd:f5:
b1:1a:fa:b8:ff:9d:23:47:5f:ca:f9:60:0b:70:3b:29:68:ec:
0a:78:ce:8a:7d:7e:4e:44:57:ab:b5:b3:1e:c2:b1:4c:7b:3b:
3a:81:7e:57:77:ab:63:e8:0e:99:75:71:6b:14:9a:d0:9b:f8:
7f:32:67:74:6a:40:f1:30:4b:28:2d:cc:98:1d:da:ef:e3:e2:
a8:66:33:21:23:38:7d:6e:56:f8:e8:4c:1e:34:b4:a0:2c:76:
c9:fa:d8:06:34:13:17:1c:7f:d2:ac:48:e3:39:74:8f:12:2c:
6d:9d:55:55:07:91:c5:97:27:0e:73:2e:52:37:ce:b4:14:7f:
d6:96:98:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zjY/LzIQbjJ8uw40J/7cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh
Y2IwY2UwHhcNMjUwMTMxMTAwMDQxWhcNMjUwMjAxMTAwMDQxWjAzMTEwLwYDVQQD
Eyg4NmZmNWJlMDdjZmQ3Y2I2YTM1NzJmMjBlMmFkNjQ4NzQ5MjAyNGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wF7pJZR5smft5B52lW1PL+PsTh9
pxY7ONDuSWIoa+H/fmp+EqvyBDZW4H9N9szwU+B/mnB96vQ74sen1jQxvEVGP05O
CCqCB+UL/pSfSIoNStBOA2SzyToDo/ARdUNQr5LFeLrrivyDcevH4n4bN/dltmKO
v07oXt1Grt9aMk7ufI6uIAEtALqudlPX7e9xXDatSM0ZFwXMJ5gfF9RRvbDS7Ani
QlxLn12wBx58VLcHevTMkXi50xtVXISt58mN8xL2T1zCv6hEz8cpRyCr61njDstY
0BCQSEdKuIW3dfdoAB69Bt4J6GddIBcunihlCD9jXT9Ek8qm4nD3eIOShQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIb/W+B8/Xy2o1cvIOKtZIdJICTiMB8GA1UdIwQY
MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct
MDUwMzc0OWFkZWEwLzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw
LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl2UQbqMV
ag0rDWcOAitBTwMEwApFbO/lx6ersyPiTSfaswgtRfEtoJKSqxshn4bpuzfobhKG
RhdgIkQQ5CcH5kNMWE2+V9LjTwrZJ9QVnCkVPIcLTM3tWlzH7vXMG12nlkkBV+WL
KiJL3k2utp6U+ddbnZznDhoxn/i+r731sRr6uP+dI0dfyvlgC3A7KWjsCnjOin1+
TkRXq7WzHsKxTHs7OoF+V3erY+gOmXVxaxSa0Jv4fzJndGpA8TBLKC3MmB3a7+Pi
qGYzISM4fW5W+OhMHjS0oCx2yfrYBjQTFxx/0qxI4zl0jxIsbZ1VVQeRxZcnDnMu
UjfOtBR/1paYZg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:58 2025 by rpki-client