Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json)
Hash identifier: lhKT+AwCw7fG1O1Scgvc3WNSSyW6Q3oEG6pXxTwZsOM=
Subject key identifier: C3:F3:12:B0:57:2F:3E:F9:7C:BB:E2:B5:5D:52:67:93:BF:BA:42:5A
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial: 0194BD8542B0F9FC7AB37A2D1269245FA88E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
Manifest number: 07D2
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: 7HWHA8UqwHtsqDMBW-DwrAaDDjM.roa (hash: e8s5o0udkcNi/3gr4/Pby8a6BORkIl6Tk5BcUgdqf98=)
2: 7kAjdsFeoGIlffyRccGeBTEu_FE.roa (hash: V5X41O+8NhL09TYkx6MudBsqNZ4WocGTuULsSpgpD3E=)
3: 8ZU3bGrm9xWhwMuNBNg_sVSf78w.roa (hash: q1BAPF4hVnnZILV3v3GzNcOP1nX7SZBYfnbCOVjjzwo=)
4: CH-MNJ62x7kM2_t2iuWi-Pl441k.roa (hash: HaFXnQzr7MPgH+K0peJzoRzHcSdMpsIno7S1dDVTYls=)
5: F93HK3zZbjyanEiJSO9cArJniew.roa (hash: wrh+x7Klvcmq0ZMqoDo7aM3datdsQCypsCC/kWY8BG4=)
6: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: Jdb2dD0sHlbeNgIJu8Xjb+7iDwAtroFXszJ7ZlmGZEc=)
7: RocZhE1Sgw4wWmm8LnKO4d7f68w.roa (hash: +rys+d7y9dD2VIYL252iXtWKGL/n4lME4L1WtriVBxI=)
8: U47Wz_LD2xLJywbdswHmPzRJpDo.roa (hash: qCq8pw/dLAXcMlcPqPaGHxhAYIuN8gInNQEcnd7HSIs=)
9: XVHP5qtngkOzkHHcBMfCOoE6FyE.roa (hash: U8lDjEDePEbA90E5ZD4uXWmkg3O6630794CxqDFoPBY=)
10: cSOzcJuJznyp0-yCo16vcwC-SO4.roa (hash: /BcpV3CpFg+yHnaLyG3CeUoFmA/RLptEV35Vt1SRJwQ=)
11: g8u27N4QItUirByGNIpicNOy82Y.roa (hash: 86XD7A3oPGKMoD9IAzlfVhw0nOpZrI3Tfibq7N31K6c=)
12: iH3j8qY1-071YfTwOblznlAQw6s.roa (hash: yME8emyVjusbrBjqemdlgI+CwPOa3VlHZpR5ZeMxUWc=)
13: mGSm6WnPN8htR3E3SqRmvrkDAW0.roa (hash: ma8SoOibhRfVHVvLv4aSGOKoznJfyTFPs8hixxk0hN8=)
14: ryDPDikJ1i_zY_ss9G41qhvN3jc.roa (hash: h94vj7TMlIg5ainHE5mYHmcUUj3Q1WNeWVzGbaI/3Fg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:42:b0:f9:fc:7a:b3:7a:2d:12:69:24:5f:a8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=c3f312b0572f3ef97cbbe2b55d526793bfba425a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:f9:0b:62:09:3c:00:db:47:35:b8:fb:df:
c9:15:9f:79:0f:c9:f4:61:e4:4f:97:07:63:33:8e:
09:1b:da:96:40:17:53:83:80:09:39:3a:a3:8e:c3:
ce:a8:7c:8d:7e:c0:4c:7d:86:0f:b8:86:82:d0:05:
37:76:6c:ff:91:42:e6:f8:07:6a:d8:61:84:39:eb:
f8:ca:b1:08:9f:7a:d4:fc:61:86:c1:2b:6e:df:a8:
40:49:26:a0:ec:59:ad:cc:1c:f0:0a:5c:a9:d5:b8:
4b:45:46:f9:28:7a:c1:83:58:16:e0:0c:eb:6c:4a:
31:79:2e:90:10:2b:0f:57:75:56:db:a3:ec:a7:e0:
a6:d5:f5:3c:3e:b8:ee:b4:39:cc:7c:d5:4c:38:d8:
35:78:2a:7f:9d:41:d9:79:1c:14:84:00:f2:b7:bc:
43:69:0d:87:45:1a:40:14:56:34:32:fd:aa:2d:63:
0c:55:d1:7f:bc:6c:59:a6:ec:d2:39:b7:d9:dc:9a:
f5:cd:c7:c9:3e:89:2d:c4:aa:60:13:4c:f4:3a:c6:
28:98:b5:a1:df:42:6e:47:9e:0e:3f:53:db:1d:76:
ab:75:fd:8a:c3:5f:0a:be:b6:42:14:b1:64:97:f2:
b5:e9:02:b1:53:f1:30:de:97:22:8f:0b:1d:a3:7a:
58:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F3:12:B0:57:2F:3E:F9:7C:BB:E2:B5:5D:52:67:93:BF:BA:42:5A
X509v3 Authority Key Identifier:
keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:53:83:ab:00:9c:e0:4b:b7:f9:1a:f6:1b:cc:fd:23:55:8a:
ab:db:c5:9a:dc:d0:45:1b:4c:90:a7:8b:ef:f7:c6:f4:70:89:
83:d4:f5:28:53:29:1a:08:d2:4b:2c:36:81:aa:77:6f:be:6c:
b9:e2:7b:94:b5:3f:ed:a7:4f:7c:40:01:2b:1a:d8:f4:7d:fe:
bd:6a:ed:eb:4f:45:6a:3e:57:22:1f:e0:1f:bd:b5:71:1a:97:
0f:22:08:81:da:1a:9f:cb:d8:76:8c:36:56:14:69:08:b7:34:
ad:7b:2a:4d:3c:a1:76:de:fb:07:42:8e:bd:4e:c0:89:4f:64:
21:9d:21:57:0e:c4:ca:23:a9:8b:97:cd:da:35:2d:af:ad:da:
86:fc:bf:57:c2:80:b8:a5:96:29:71:12:09:f0:31:09:cd:dd:
b8:8d:9a:28:1a:55:a6:34:0d:31:ab:bf:55:a3:9b:54:0c:03:
42:2e:53:d2:b6:de:53:3f:a0:18:74:26:34:6c:9c:24:52:cf:
ee:05:bd:89:dd:15:27:7d:59:3f:79:43:4f:c7:94:96:0c:e0:
8f:e6:ce:d8:29:17:1c:41:2e:e5:47:93:8c:b3:c4:34:e0:4a:
f6:a7:a5:12:57:11:33:55:58:ce:25:53:f8:d4:61:16:3e:c7:
07:e0:1d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:05:57 2025 by rpki-client