Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json)
Hash identifier: 1twdCYhsgLf3f48ZSlFUFbTf2otcxXJihSRvjHER8r8=
Subject key identifier: 3E:44:77:1A:A7:BD:A7:47:87:1A:C0:14:0B:C4:2F:B2:6C:9C:88:A4
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 0194BBCED9BDF501123AB0EDCAE1B1977B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
Manifest number: 105A
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: 544qbizQi-bIdkw3-dYqPJlzThI.roa (hash: +gEWQ7alsMrRoKZmorV8F7Ob4+H0fyVPG8B4nJMMSoA=)
2: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: RsMbR96UiKubbn7OyGNCaVegsDDltuOe1s5Gi5HQ8kg=)
3: CFEprGG9zI2SPXEkfveiqcGkxys.roa (hash: zwoMXpp3WPmfn1e+WeBEAccAThpouC8C+SBbtldgA/c=)
4: RLjWAiBDW7OGzF_VcCkKg-SuzTE.roa (hash: DCBINTtLxKJQkC6BRMLb3TMqWlrNb5ZnwJro+/q+QhU=)
5: Xd2QaW60upMnqwQIBHXXIoPXPzs.roa (hash: +i6BQOs/QyU2pk+3pSoh+wtk4Cf+VFJXifr7WtqVoY4=)
6: ZWH5dik-57qT_VKYcibYh0fZMes.roa (hash: V4HyXcC7GD93JW+xBhzBdGWwVycZxFz98efL+J+3t6c=)
7: d3w3nqB5Kl-FSC0jSCG-gsD4dlY.roa (hash: 33QNQ+kF6mFEetO5Rno9ayPExXyzerB4sZWFH0Ulruk=)
8: kaXih0ftxLoxKevElyyNGY3Am90.roa (hash: VV+Kmbg3++xVZSuR6z9QplDGDyuGw9lzxK6+uDRXc2k=)
9: mMAwso5PyMiUkBDuP91mCU2ukBI.roa (hash: 8lAOzf9Ul80EHkivmkCJNmV8WShjC87n8hXocC2Jg4o=)
10: rL6AzulHQOLcRfhqRrPdMX43AzM.roa (hash: /p4sN3vL44k5lwQiWwAvoayVUuPAubPMAhf99ERn0+c=)
11: uqdpFYbEZmSQcI9e2QxzA21bJyU.roa (hash: wfLrEHcgt+ndgHwz1K4AVmoTfmzIEA6xcdAY4tC7VEA=)
12: xE9QBs_-I-okZvOErWXLkoKDqmk.roa (hash: PCh0aczn6Bj3Hiz+iIpjZK10Xg+FpiTDJMX+WibJh2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d9:bd:f5:01:12:3a:b0:ed:ca:e1:b1:97:7b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=3e44771aa7bda747871ac0140bc42fb26c9c88a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0c:a3:cf:2b:21:23:61:d3:0a:51:ef:64:18:
de:e8:a5:76:8b:08:ec:25:2d:9f:e4:e0:9c:95:15:
33:bb:b3:94:3e:a5:06:1d:30:a6:93:0c:d9:95:35:
df:14:b6:10:f9:1b:55:fa:47:88:44:00:1d:cd:3a:
8c:4a:7c:ec:2a:9f:0e:fb:77:4e:90:83:89:5c:ec:
77:49:51:46:18:ca:15:d5:3f:44:b4:01:d8:56:7b:
6e:4f:f5:98:a6:ec:f7:13:bc:79:e1:90:22:41:30:
54:b2:8b:b8:0d:6f:f4:59:69:17:f9:f8:fb:60:e3:
d6:a4:4f:90:8c:7c:43:ca:8f:84:52:d8:fb:4d:5c:
aa:01:0f:b3:b4:e4:a6:dd:48:a2:93:7a:ad:dc:70:
5c:47:37:12:b5:82:08:a7:57:1b:ea:46:46:03:40:
e6:dc:b5:b1:21:33:39:5e:f9:e1:a0:9e:db:48:c6:
0d:48:2e:14:10:86:8b:89:d1:ba:83:12:dd:5f:df:
a9:30:8c:ff:84:6c:1b:29:0d:00:30:89:28:02:5b:
17:a8:95:7a:37:87:8d:df:b6:99:3e:7c:e1:7b:8b:
fb:08:e9:8d:ab:7c:38:c4:70:b6:80:a3:14:62:46:
be:0c:67:c1:ce:8c:06:76:d2:8c:d2:76:d2:7e:77:
dc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:44:77:1A:A7:BD:A7:47:87:1A:C0:14:0B:C4:2F:B2:6C:9C:88:A4
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1c:46:db:ba:8b:22:9f:ac:1b:ed:8b:a9:fe:cb:74:3c:04:
4c:45:92:c3:df:88:7a:7e:8c:aa:15:e5:3f:c1:db:78:67:6d:
4f:5c:de:db:bb:54:4a:7f:58:6f:a3:14:60:ac:b1:47:6d:2e:
1f:75:9f:3b:f9:2b:b0:c6:a0:80:5e:d5:a6:97:42:8a:dd:7d:
dc:a0:92:d0:a6:5b:c7:39:f5:67:2d:ba:2d:7f:5f:b6:02:1a:
5e:0e:b3:90:88:57:da:a1:64:a3:50:b9:c5:13:95:70:16:4a:
cf:3d:7f:01:34:ad:09:36:44:39:68:5b:bc:8b:c8:b0:b1:9d:
c1:41:af:97:d5:62:57:e0:df:c4:a1:2a:6a:e0:2f:cc:fb:87:
fc:f8:22:fd:f2:d4:c0:d6:b7:91:a8:24:18:54:7d:10:ee:a8:
f8:ab:a5:4e:7e:8a:6d:d7:78:de:2d:68:0e:7f:23:21:d4:f4:
1f:36:b9:2e:16:05:92:44:18:97:48:6c:fd:1a:8a:12:01:f0:
52:5d:c6:11:56:94:d8:83:e9:ea:7e:d5:d7:46:0d:a2:a7:78:
14:b0:ac:2e:f9:b8:53:b3:a9:65:c0:b1:2c:27:d7:e3:ba:1d:
33:83:23:ec:47:07:38:cd:67:2e:f9:c3:98:8d:2e:96:b7:a7:
5e:2d:93:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7ztm99QESOrDtyuGxl3uaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi
MzliOWQwHhcNMjUwMTMxMTAwMTIzWhcNMjUwMjAxMTAwMTIzWjAzMTEwLwYDVQQD
EygzZTQ0NzcxYWE3YmRhNzQ3ODcxYWMwMTQwYmM0MmZiMjZjOWM4OGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngyjzyshI2HTClHvZBje6KV2iwjs
JS2f5OCclRUzu7OUPqUGHTCmkwzZlTXfFLYQ+RtV+keIRAAdzTqMSnzsKp8O+3dO
kIOJXOx3SVFGGMoV1T9EtAHYVntuT/WYpuz3E7x54ZAiQTBUsou4DW/0WWkX+fj7
YOPWpE+QjHxDyo+EUtj7TVyqAQ+ztOSm3Uiik3qt3HBcRzcStYIIp1cb6kZGA0Dm
3LWxITM5XvnhoJ7bSMYNSC4UEIaLidG6gxLdX9+pMIz/hGwbKQ0AMIkoAlsXqJV6
N4eN37aZPnzhe4v7COmNq3w4xHC2gKMUYka+DGfBzowGdtKM0nbSfnfcnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD5EdxqnvadHhxrAFAvEL7JsnIikMB8GA1UdIwQY
MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct
OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0
LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYBxG27qL
Ip+sG+2Lqf7LdDwETEWSw9+Ien6MqhXlP8HbeGdtT1ze27tUSn9Yb6MUYKyxR20u
H3WfO/krsMaggF7VppdCit193KCS0KZbxzn1Zy26LX9ftgIaXg6zkIhX2qFko1C5
xROVcBZKzz1/ATStCTZEOWhbvIvIsLGdwUGvl9ViV+DfxKEqauAvzPuH/Pgi/fLU
wNa3kagkGFR9EO6o+KulTn6Kbdd43i1oDn8jIdT0Hza5LhYFkkQYl0hs/RqKEgHw
Ul3GEVaU2IPp6n7V10YNoqd4FLCsLvm4U7OpZcCxLCfX47odM4Mj7EcHOM1nLvnD
mI0ulrenXi2T4g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:46 2025 by rpki-client