
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft
File: xCcI35OVSqxgGu8YNb1daSRfsC8.mft (raw, json)
Hash identifier: PJmRkwkrTE2QZ1PHb6uYDYM4NHTyJjahT20AxbQkknM=
Subject key identifier: 48:09:FD:8A:40:5E:23:B3:E9:A5:9D:DC:19:57:AB:E7:3C:A7:D4:90
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 0195E00FEC070CD7B90DC805710F25C6EB22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft
Manifest number: 14F8
Signing time: Sat 29 Mar 2025 04:01:34 +0000
Manifest this update: Sat 29 Mar 2025 04:01:34 +0000
Manifest next update: Sun 30 Mar 2025 04:01:34 +0000
Files and hashes: 1: 74nFwIKFH3uKtRT845-Vm7iNpI0.roa (hash: dwaCUFData8ya0Po2dQ83XVjExSGr6tN155fGNNRXuQ=)
2: 8Vw-Hgob2gJJzFxw4N_7kn5Uv2U.roa (hash: yu7qW8GzkV3Hti3WFulLSHqkbPCHZbtH3t3UW9Lux70=)
3: EB1wuDmeUHpHHXGPcvwMNdqGnvs.roa (hash: S/BpxLczs5GDrHvkHydPA/TMOCqSJ4TvOwz6gx4BBLU=)
4: FF91gUN8QFsi0UjNb0hbhpegU4Q.roa (hash: rux40oh7ImTDen+JjsxYObPPdlN/NaOxBM5bJfSToH0=)
5: J0w5SdH9yfaXfZI27FnFWkxgcvQ.roa (hash: 8pwS1Eqt/nPpkIuSrw8GLk2/EWvlTk77ReSYaV8Jvi0=)
6: JNFYYPi5M46N7HWysvZAoIiQkYQ.roa (hash: 4FX/U+mKmibgMicQQFx15cVtRoPongw+FzcAthP3n5w=)
7: bUw7vUVn4cQiT9NfW716xSywuCE.roa (hash: 0o28YQYCqCXv7+7/uFNPlbdyY5SL/GVENUzDTrCxP4I=)
8: czhipXlSFQv2XtrizeOL4AkYjfQ.roa (hash: ktVLYCwHgnxekvZAuH8b1E8sdw3k+FPYtERYCRAoDw8=)
9: eiMLI2dh0653C-exQQO-o2bZ2eQ.roa (hash: IkhvxHI6cJnLtKgglasp3yMcL7l7unzpx1bcMF9QrRQ=)
10: m3NytSFQ3M-7elbGFk6F36SJ_Q8.roa (hash: rnZuJDJK8WGs0bsROLYdsrz2g2AqOwxzQCBo6kRxe1U=)
11: pKbsDSCcPoTPV9a3xyEwiNaa7KM.roa (hash: wFWQhX064Lr1eYYNNXVk7O6211MDK7H1lvoD2jj+zbk=)
12: xCcI35OVSqxgGu8YNb1daSRfsC8.crl (hash: 5TYLWNvc9+TBOuotLMMNRg/Bah0vBwcmwcwzYOoKDB4=)
13: xVaoOo9WsmEpdGw7xGgi0JzmgcI.roa (hash: hhPTOcVJyofro9aVTmZ/Tc5fqLyU0/BYOcCQnrqIhRM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:ec:07:0c:d7:b9:0d:c8:05:71:0f:25:c6:eb:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Mar 29 04:01:34 2025 GMT
Not After : Mar 30 04:01:34 2025 GMT
Subject: CN=4809fd8a405e23b3e9a59ddc1957abe73ca7d490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:4b:5f:9f:7c:c6:31:d0:ad:f9:d0:2b:63:
d9:42:27:7d:b3:c2:d0:33:ff:4d:36:89:30:82:0a:
aa:38:1b:f0:8f:b4:31:4e:5a:e2:ad:01:3c:54:69:
0d:e8:1b:bb:cb:2a:fb:d6:63:31:f0:7a:16:84:d3:
52:ad:e4:53:27:fc:4f:f8:49:a9:62:3b:d8:d9:7b:
b6:98:98:7a:2b:7f:86:dc:d0:74:f8:cf:f2:8c:f0:
3e:3c:82:52:13:77:65:c0:19:88:a8:1f:a3:a4:ac:
61:60:2e:de:91:2d:b0:84:72:07:b3:ea:96:90:cf:
31:d9:4e:cb:07:9e:7a:c3:ae:ba:3c:be:b3:20:c6:
95:3a:68:68:08:63:d4:f5:9c:21:bc:63:52:5f:04:
78:a8:c5:ac:00:ca:fe:7c:45:36:de:bb:10:3d:e2:
59:b8:c6:df:8b:6f:f7:88:f2:0d:64:b3:1b:e6:d6:
38:68:f0:d6:21:a2:a2:4c:7c:c7:87:68:d7:da:31:
30:74:f5:58:99:fc:7e:05:91:21:1a:c8:3d:d1:9a:
a2:b7:2d:68:b6:ea:db:fc:91:11:84:98:3e:a7:8c:
30:0c:e6:08:b3:5d:b3:49:f4:97:65:fa:3d:26:96:
2d:1a:d4:16:bb:36:24:f8:c0:8e:48:bd:ec:c9:53:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:09:FD:8A:40:5E:23:B3:E9:A5:9D:DC:19:57:AB:E7:3C:A7:D4:90
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:41:02:bc:91:55:dc:cf:2f:c6:21:c0:8e:b8:e8:0b:e7:5e:
b8:f7:53:93:88:df:ca:1b:b8:fe:27:e2:fe:fa:de:57:d7:72:
a5:86:ce:84:b6:7f:62:c0:7d:d0:cb:72:71:83:7c:de:51:b8:
1f:86:f4:fa:a3:c9:ad:f8:8d:57:29:43:cb:1a:3e:0b:8e:37:
5b:b8:7c:0b:e5:dd:23:5c:f3:af:02:31:1c:04:8d:6b:eb:2f:
f6:f7:1b:dd:e8:c0:36:1b:9f:5e:8d:62:88:40:d5:aa:44:cd:
1b:0c:f0:af:cd:09:48:07:04:d6:b6:48:87:76:f9:34:db:3b:
a9:76:df:94:c0:1c:9f:10:a9:f7:57:db:5d:6a:5d:48:ef:c8:
3f:51:9a:2f:27:1f:8d:14:51:4f:49:e2:8d:19:f9:90:68:9b:
d5:7e:c3:3a:79:45:dd:ed:02:99:bf:15:95:0c:aa:53:e2:54:
cd:37:c6:80:b6:99:fd:21:43:3d:ed:29:76:23:69:73:d4:2e:
7c:11:1e:e4:63:02:2b:db:55:71:ec:cd:c9:70:8e:e0:5b:44:
b6:4d:eb:f1:82:fd:b2:eb:b0:f4:c8:23:42:6c:25:36:d6:76:
c4:1e:1d:46:e3:e1:e3:1e:f4:a4:20:14:0a:f4:e9:bf:46:29:
f6:2b:95:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:17:33 2025 by rpki-client