Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
File: o20K5eL7_8zgh3Drwgwha5-_lIU.mft (raw, json)
Hash identifier: 3mETT3DpZddZFsvJ8d96oq3KkLAbHk19hjI3tAsYH0o=
Subject key identifier: CB:27:0E:09:E3:86:05:DF:18:2A:72:61:02:BB:9E:96:E4:F5:0A:3A
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 0194BCAA116227F7E633C6121EBAE058102A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
Manifest number: 1458
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: 1XbIXlsc12j6nm66ObHlANu1FxM.roa (hash: lxZWGjYaWrGULnJUqbEWkt5IyYC/5a04fccF0g2Mp+o=)
2: 3RFddkozoZGvDJWQRcnS3tQnN6k.roa (hash: KSM4qOmDj4X6PN9gZp6oxzJSTfcXsGzAsnDPsOPcYvo=)
3: 5Ni6TTomkpPGcPlO3kSvRsrQu-U.roa (hash: 1JbN0aQZgu8I5lbFUp1QWBBO58Y4WN7qnz2P+FqHbJQ=)
4: 7S8CxuCZgwEuPwPQrodHEuixK_c.roa (hash: Qpde78GgRiZiGUxC0MztnIMZR2EI3yqwC8R5K89O7xs=)
5: BUbLcDK2mlbMmQrWrXK_KkB_Z8I.roa (hash: 5p58mg305UQz5j2iOVYn7ENJmD3sfGRtf406Z23M5Fg=)
6: RdqjtJDLFWOt3Phx5mE_iQ2n2ac.roa (hash: lxo1VRjxzcOyUQlNG+1uXakzpre9ZL0uw2/WRhwVovc=)
7: fz5OQX3YNuZKli23fQPsHJMHAjg.roa (hash: 2W1jdhiJm6VJW0yfAkLiyNtl6yjC+Bfx3j0Hv8QWt58=)
8: o20K5eL7_8zgh3Drwgwha5-_lIU.crl (hash: 89uijVpiyuMOrTi/Zl3uk4pMZ/3Rbo65yB0YfhKcfwk=)
9: tn7ZdWo9WQgYlB0Z6sOK2If7PKQ.roa (hash: 8aBGWuWam9C6QXOPco15OTid7ItEiEbxf2K863xiGIk=)
10: uxPuBCLIiL0vvpcp5iG57n6Nxl8.roa (hash: 9FJQPnJf1+iHQwAWGEeso0fULqarFlyxqNgrRoa6pYY=)
11: v8yHhVnQZ24d3Hqq-_MmljsyF-o.roa (hash: ldyVLPmDRLippOD+hn4EjHJmd9dcu8cUfl/mwJelT5M=)
12: vOg7pIai3eYlqI8nGfkYR-448qE.roa (hash: k2twTqEvKHP86X8yabE26RQnv5iqhvXZjH+b4EIuDog=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:11:62:27:f7:e6:33:c6:12:1e:ba:e0:58:10:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=cb270e09e38605df182a726102bb9e96e4f50a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7d:96:3c:eb:ad:6a:ff:be:f1:55:97:06:0a:
aa:a1:a0:e3:aa:8a:5f:f4:ea:43:59:61:67:c9:5c:
ae:2a:36:70:04:01:e6:81:6e:34:89:38:66:5f:b1:
bb:ae:08:eb:f3:ed:a2:c9:5c:29:f3:3c:e8:89:3e:
a0:06:01:9e:c7:5e:8c:d0:c8:ec:aa:1a:49:59:16:
b9:4e:17:0d:23:6a:59:08:5e:38:33:f7:a8:bd:02:
e7:32:2e:68:20:60:36:13:9a:8a:64:ee:92:a5:2a:
3c:3c:5f:af:aa:89:3d:2f:30:67:31:97:b4:9b:74:
56:79:a3:15:1f:68:33:61:02:3c:b9:20:05:45:8f:
7c:83:38:f4:a6:c9:c0:a8:5c:a0:53:53:b3:a6:5a:
58:0b:d5:09:16:b4:db:1d:e9:08:df:97:a3:1b:0a:
3f:8c:e5:19:7c:e8:80:17:a8:a1:96:cb:e6:50:0d:
5a:91:a2:b0:8d:00:37:22:90:c6:76:a4:b5:88:e0:
c1:50:3f:1b:f7:76:4a:d8:21:10:f0:a4:00:90:88:
b5:d8:b9:12:c3:fc:c4:c0:83:d3:94:ab:5a:51:e1:
41:90:b3:58:46:d6:12:bd:89:ea:99:2b:e2:11:2d:
80:65:0a:93:6e:51:e1:cc:18:83:cd:64:b8:fc:5b:
37:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:27:0E:09:E3:86:05:DF:18:2A:72:61:02:BB:9E:96:E4:F5:0A:3A
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:12:3e:a2:7a:04:4c:3f:dd:a7:32:f5:d0:d0:61:f0:55:89:
db:95:5d:c3:bf:30:51:d8:df:d3:75:3a:6c:c6:67:bd:72:1b:
c8:79:f3:fa:69:7c:df:65:f4:c0:12:20:0b:01:29:f0:58:c2:
4c:3c:db:aa:31:91:f3:a7:eb:6c:7e:ea:95:33:80:46:14:d4:
fe:57:b8:7c:66:00:9a:c7:40:a3:9c:91:49:e5:aa:4f:8b:db:
55:84:14:b7:d5:e6:84:0f:cb:2e:a1:a3:1b:ad:8f:c7:44:ad:
be:45:55:be:f5:74:11:89:b4:b0:28:66:5b:e3:e7:fb:f0:d6:
e4:e7:36:ec:e7:47:86:b7:04:cc:02:2f:92:c0:d7:25:fb:2a:
aa:dc:6e:da:cc:81:ba:e3:5f:b9:f2:47:a0:df:5a:54:16:c0:
65:39:77:09:02:de:11:bd:c0:15:28:a8:1c:e2:2b:2f:90:52:
0a:9a:a2:d0:e8:b9:aa:aa:1d:1b:28:2c:92:b9:a0:4a:0f:39:
81:e7:38:e8:5c:3d:97:f3:a0:ff:da:1f:ad:e4:30:3a:30:75:
fd:b0:78:5b:71:40:b3:fa:85:6e:7c:9c:0a:7e:24:3b:50:78:
ba:b6:3f:b3:b9:15:fb:dd:34:c0:b7:4a:e7:33:b9:49:bd:02:
17:bc:c0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:34 2025 by rpki-client