Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft
File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json)
Hash identifier: 3xTJ3fP0x61XtOX2IVl2DJSHLcTJ9HaSHKwNR0HjiGU=
Subject key identifier: 38:D9:A3:3B:18:9A:3B:38:15:CF:41:3B:89:6D:7F:FD:CE:E2:9B:96
Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Certificate serial: 0195E0467DA28A2B2B22F50AB36210A7C00A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft
Manifest number: 0ABD
Signing time: Sat 29 Mar 2025 05:01:10 +0000
Manifest this update: Sat 29 Mar 2025 05:01:10 +0000
Manifest next update: Sun 30 Mar 2025 05:01:10 +0000
Files and hashes: 1: 8wknUCvN7dL5Ngyq2oYeYw2qKaA.roa (hash: 2x+7TMLohOium2m4btHhUYg1HhvZTp1KUAyfNFsWp/s=)
2: CREMqHNRtZMAgL_3QQz8QbKg6EI.roa (hash: ad2n+lNuuymsjsALF9GRHKc/gIh74hGgXC7FhHl2DRA=)
3: CYe_FylQBC35YAPXurtpIgFimIQ.roa (hash: DTdje2SGWnkKYzvIScF3Fa/xUC5bG87DDdchy0e9aCI=)
4: DSVR7QIy0UPUErMehW4PxJP4J1w.roa (hash: RxBfnEoFmNE2dkCZjNvrHRwuVoiFTGWB2B/srN/Z1tQ=)
5: KD0QGVZZHlzJH2sIzPN3BvCFuEw.roa (hash: 2sHKOaHU+WfcuH7knMpKw3QL927TDsSv0dYawbgXbII=)
6: Qe-CvDBFhBHZ8fOjbKuz23oGKeE.roa (hash: EHYNUAhY0OD7mkD4gRmiZGisTP3nLjxgXhPcOI6y/fQ=)
7: Rg-rwznqAAZZCpXiUsH9yNT4n6M.roa (hash: R0tTH3SJW7iuGtYToatlEGOWh2QhWznFnYDn8BYzsO4=)
8: RjclhfmYJs-nn3YIpui-vTkLCP4.roa (hash: kHAmt3kfei8Efn3czRaKzPGSzcq/laoel6ixmjuKvgM=)
9: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: DblCOzEpU4WYef80xvWDnuo9MrAzDqmZ7ykGuql3XGo=)
10: ecGl7SXxfvzyrf_IROWG6PeXN6I.roa (hash: BeofmFT3DEwetEcQFY4kjdzbj6TWwwJHMUHk5ZEuYcY=)
11: mDxyiD9X-pKoSpMDHewalWK4frA.roa (hash: mOBdq9p0ho/s/u99fQ8BxCqlC+u1XlqpRxkj0tREVjY=)
12: pQRUqfEGszJRFj-f_9B7LRsXpIo.roa (hash: GvQtcsCffFQqFmkiU80GKNNld9J6Q9SZQLRTW6fuVyw=)
13: qhsLFfRsoTvrv1LFKvzxFV--7eI.roa (hash: mCfCuVaysiNed67aIssE3UkdX0/ZnYMrYJ3yChdggeQ=)
14: ux_GqYHXmZocuOppLlDDU7W7nJk.roa (hash: IrC7X0/W+fjzN/PrVDL3lUuhJiDjnAPAkEsKq+cTMlk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:7d:a2:8a:2b:2b:22:f5:0a:b3:62:10:a7:c0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7
Validity
Not Before: Mar 29 05:01:10 2025 GMT
Not After : Mar 30 05:01:10 2025 GMT
Subject: CN=38d9a33b189a3b3815cf413b896d7ffdcee29b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:2e:34:c6:96:6a:d0:97:8c:3c:70:6e:c1:
98:f5:c7:d1:9f:b2:97:1f:28:6c:23:0e:9c:2b:4b:
70:71:21:8e:14:1e:95:11:2d:e7:96:e9:4e:bb:c5:
ac:4b:bb:aa:25:87:c7:ae:00:69:06:bd:fd:38:35:
02:fa:38:67:37:fe:2f:7b:b1:7d:34:e9:26:50:9d:
e6:69:b4:53:e2:81:11:ff:6a:7b:48:18:dd:57:85:
f2:c4:7c:81:f7:5f:5f:05:9f:f5:d7:c4:71:96:74:
f1:22:03:e5:f9:73:a5:79:af:43:a9:95:53:a1:af:
54:8e:01:a2:89:d0:ef:81:bd:03:86:20:3d:91:9f:
70:80:3f:91:3d:da:2c:1e:51:25:f9:aa:b4:ff:66:
1a:c2:b5:f9:95:42:ea:32:6f:73:db:9c:ee:fa:7c:
30:9a:7f:55:59:f4:05:bd:52:ab:a2:28:25:ae:d9:
ae:6b:82:27:b1:b3:9d:17:a6:77:a3:11:15:f4:51:
3a:fd:93:b6:0f:7c:87:f1:40:a9:a7:36:b9:af:8e:
02:ce:52:f4:88:4e:80:5c:99:3b:aa:59:0e:7c:44:
5d:8a:7d:a6:cf:75:29:c2:bd:16:36:bb:6b:98:c8:
44:c6:a0:f7:ec:3e:9b:c0:21:93:31:bf:c3:b7:37:
65:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D9:A3:3B:18:9A:3B:38:15:CF:41:3B:89:6D:7F:FD:CE:E2:9B:96
X509v3 Authority Key Identifier:
keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4a:67:e8:ef:71:24:4a:2f:14:70:dd:40:1d:67:2a:1b:1b:
4b:92:bd:aa:1e:da:cf:66:00:31:ee:81:92:3d:ab:fe:97:e9:
73:47:ba:3b:d5:61:05:32:29:05:80:32:d4:2f:62:5e:d6:4a:
c7:20:5a:71:0b:95:2a:da:f9:b2:d2:22:ec:4d:9a:cc:d1:26:
b4:a5:03:33:22:c9:3a:7e:a9:e7:03:71:dd:49:07:e7:54:bd:
15:37:df:77:0e:9a:3b:52:ee:d2:85:50:74:aa:b0:b5:3a:ac:
68:19:75:2b:f9:dc:f7:0a:a9:df:38:b5:a2:c8:a5:95:fc:53:
27:cf:73:97:5a:67:61:d7:3e:cb:97:b2:06:af:36:b0:42:6b:
34:32:c6:08:1d:96:cb:5b:37:7c:ab:51:1f:61:4d:53:2e:61:
a8:1e:f4:46:1d:fb:72:93:e0:a7:71:dd:d1:5d:f2:75:37:9d:
df:be:d4:5d:9a:74:c2:ff:6e:74:4c:81:e3:5c:0c:5f:25:87:
e7:d0:e0:dd:8c:29:6f:9f:d6:aa:4a:d3:56:4b:b7:16:dc:5a:
7e:9b:48:8a:91:9c:04:d9:13:e6:e8:63:d2:1f:a1:89:82:c8:
e6:79:f6:15:9e:fb:b9:3b:fb:ba:a3:f2:a6:b8:34:17:d0:49:
c8:db:82:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:53:08 2025 by rpki-client