Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
File: 2fwL7GDQus4YiWd72buQGQzE_SI.mft (raw, json)
Hash identifier: 7SWEPztMs+Sifo227pM6vsM/vCjKY2AaCjrbDg6Ze0s=
Subject key identifier: E5:5E:49:77:0E:52:A4:F8:41:1F:5B:16:F7:9B:2D:56:DD:53:DE:35
Authority key identifier: D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
Certificate issuer: /CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Certificate serial: 0194BD85B26EA8F6CB6831FC79AA889BE95E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: 0I8Tv0UylD63i4vV2xwB6rppwxI.roa (hash: QA7YvKS+a4NHe+cVmaIAaBQvm5w2dBSibTU49pm5mxM=)
2: 2fwL7GDQus4YiWd72buQGQzE_SI.crl (hash: AxTGXxSXJGV3iMfVmxnMGB2jzoRxYL+9LSb0aPIS0Sg=)
3: 8Dt0TuVJVMCN6RnRhXhKGlf_lII.roa (hash: sSGLTETKxbNSq3MrBGV2DgOI7we1i0Q8mkHNa5K3SUY=)
4: BvWnnBlWW44V8sVOxm98LqahBBA.roa (hash: 6mRHK+yOMdXINEIp3lFBzgdVlSN/9ntwMd5HVLaTroY=)
5: GSlFodh40GWtFXJ0cvtNrC5QQZs.roa (hash: OLiyxfNtsv2LTCfXCwftWJpdQJ+N0fnXvmkjqgnZmno=)
6: pVnXYoxQriC-WtOLcwsA6Za2gDI.roa (hash: 1qcQ0hH+Vk55dAqX/63+B6qLf3cPHgQEfJdfgWLNx0w=)
7: q_VxYTNksLn-A2DiKrfsqvcSMaw.roa (hash: 9v/49noAVbeRiYCi+xkrBzJwESjZSadJSkvsw1PN9x8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b2:6e:a8:f6:cb:68:31:fc:79:aa:88:9b:e9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9fc0bec60d0bace1889677bd9bb90190cc4fd22
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=e55e49770e52a4f8411f5b16f79b2d56dd53de35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f0:29:a1:a1:79:38:b3:06:5e:01:fd:32:38:
f7:f1:ae:38:5b:dd:ac:b7:79:ba:c4:15:6a:0e:83:
51:4b:23:f7:c5:9a:7b:17:52:8b:c1:e5:ae:32:6f:
32:24:60:48:c1:8e:a4:fb:eb:6a:42:e6:77:5a:cc:
60:51:27:a2:18:72:a3:6c:45:51:22:c3:47:3c:7c:
47:00:48:18:b1:84:33:bd:0b:59:76:c5:66:63:ec:
b5:86:d9:51:40:bf:fe:86:02:82:1f:5b:b5:ea:80:
66:5b:b2:b9:a4:a3:44:26:64:7c:3e:3a:4b:fa:80:
eb:ae:9d:3e:f8:16:f5:46:34:1a:65:91:08:ea:0f:
4b:1b:36:88:98:78:cc:1e:a9:63:48:26:d9:9e:6b:
dd:f7:5a:18:45:63:24:4b:91:6b:13:6e:fb:93:93:
96:be:b1:aa:d0:7e:2e:24:f2:9d:b1:67:13:2d:fd:
bf:dd:7d:a9:7a:d2:d7:02:85:61:7e:5f:b5:1e:c3:
ed:ea:ac:03:a5:63:23:64:8b:80:ab:e3:5e:12:2b:
af:6a:c0:09:60:cb:0b:a4:9e:99:76:9b:f5:e8:e8:
e9:4b:64:1e:dd:9a:74:16:d6:95:a5:b6:8d:3b:c6:
be:e9:3a:d0:df:7a:97:76:d3:48:ce:d0:0c:41:af:
42:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:5E:49:77:0E:52:A4:F8:41:1F:5B:16:F7:9B:2D:56:DD:53:DE:35
X509v3 Authority Key Identifier:
keyid:D9:FC:0B:EC:60:D0:BA:CE:18:89:67:7B:D9:BB:90:19:0C:C4:FD:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2fwL7GDQus4YiWd72buQGQzE_SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b0d6e6-2ed7-4928-ad69-3469034fa441/1/2fwL7GDQus4YiWd72buQGQzE_SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:39:c7:39:28:2a:70:e3:62:87:a2:17:f2:6c:6b:58:29:a3:
2e:ee:5d:80:14:14:c0:5d:11:6b:2e:74:2d:57:9e:80:2d:60:
9b:fe:24:77:01:a9:a5:08:70:1c:46:38:44:e8:02:ad:74:7b:
71:ba:2d:d3:d3:1e:97:3c:6e:58:39:cc:7d:14:63:7a:73:0e:
d9:92:e0:1e:8f:e0:e2:4d:d5:74:67:ff:e3:f9:ac:2e:e4:6a:
38:e1:9d:de:a9:f1:12:fc:eb:b0:16:0f:af:df:38:3b:6a:75:
6c:da:09:95:f8:b0:b7:ef:d1:90:c7:71:33:d3:be:88:5e:e0:
f2:62:4c:cc:e1:fc:af:e4:2b:e3:ae:0d:0b:91:88:40:6f:0e:
24:6c:c3:bc:60:2e:3a:00:8c:2e:36:50:54:a2:90:a5:06:53:
46:91:82:2f:f4:dd:75:e6:4e:f3:23:e5:8d:29:17:3c:51:c5:
e0:95:48:b3:1a:f9:e5:ef:d1:83:14:55:48:74:c7:86:e0:c8:
29:1c:fd:a6:31:0f:fc:6b:fb:c6:b9:35:ad:c2:a9:84:4d:42:
82:50:3c:b9:81:b9:d0:ac:62:08:bf:d0:fb:25:0e:a5:9a:75:
83:35:6b:99:88:16:ad:24:85:40:b0:87:0f:12:2a:ce:0d:df:
25:15:6a:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hbJuqPbLaDH8eaqIm+leMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5ZmMwYmVjNjBkMGJhY2UxODg5Njc3YmQ5YmI5MDE5MGNj
NGZkMjIwHhcNMjUwMTMxMTgwMDQzWhcNMjUwMjAxMTgwMDQzWjAzMTEwLwYDVQQD
EyhlNTVlNDk3NzBlNTJhNGY4NDExZjViMTZmNzliMmQ1NmRkNTNkZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PApoaF5OLMGXgH9Mjj38a44W92s
t3m6xBVqDoNRSyP3xZp7F1KLweWuMm8yJGBIwY6k++tqQuZ3WsxgUSeiGHKjbEVR
IsNHPHxHAEgYsYQzvQtZdsVmY+y1htlRQL/+hgKCH1u16oBmW7K5pKNEJmR8PjpL
+oDrrp0++Bb1RjQaZZEI6g9LGzaImHjMHqljSCbZnmvd91oYRWMkS5FrE277k5OW
vrGq0H4uJPKdsWcTLf2/3X2petLXAoVhfl+1HsPt6qwDpWMjZIuAq+NeEiuvasAJ
YMsLpJ6Zdpv16OjpS2Qe3Zp0FtaVpbaNO8a+6TrQ33qXdtNIztAMQa9CKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOVeSXcOUqT4QR9bFvebLVbdU941MB8GA1UdIwQY
MBaAFNn8C+xg0LrOGIlne9m7kBkMxP0iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjkt
MzQ2OTAzNGZhNDQxLzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9iMGQ2ZTYtMmVkNy00OTI4LWFkNjktMzQ2OTAzNGZhNDQx
LzEvMmZ3TDdHRFF1czRZaVdkNzJidVFHUXpFX1NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnjnHOSgq
cONih6IX8mxrWCmjLu5dgBQUwF0Ray50LVeegC1gm/4kdwGppQhwHEY4ROgCrXR7
cbot09MelzxuWDnMfRRjenMO2ZLgHo/g4k3VdGf/4/msLuRqOOGd3qnxEvzrsBYP
r984O2p1bNoJlfiwt+/RkMdxM9O+iF7g8mJMzOH8r+Qr464NC5GIQG8OJGzDvGAu
OgCMLjZQVKKQpQZTRpGCL/TddeZO8yPljSkXPFHF4JVIsxr55e/RgxRVSHTHhuDI
KRz9pjEP/Gv7xrk1rcKphE1CglA8uYG50KxiCL/Q+yUOpZp1gzVrmYgWrSSFQLCH
DxIqzg3fJRVqyQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:40 2025 by rpki-client