Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier: CdU7eW/IbrQ7a3z8yTJ0HdMyyJo1aNmp5t+5J/Khzh4=
Subject key identifier: 8E:C8:10:4E:5A:5D:97:3A:91:FC:14:F3:14:43:9F:99:6D:3C:F5:B0
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0195DFD8A15F25F7962A8E15C1D87FC09C26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number: 038B
Signing time: Sat 29 Mar 2025 03:01:10 +0000
Manifest this update: Sat 29 Mar 2025 03:01:10 +0000
Manifest next update: Sun 30 Mar 2025 03:01:10 +0000
Files and hashes: 1: 4NwBF8TPrVxf78B6fgE595ZYIcY.roa (hash: UcGEL17wXUOTJDNf0EgeFxFCcRvQ35cDmPksItdA2FU=)
2: 5MuegZc941EXlrf0YhhZc8L4RKk.roa (hash: kHiIPTd4Jj/nvsaJvM9+xNmDRvRf/qPKh36k1EGAn74=)
3: 7hACT5sKnz3HxIi_xLJsA5iZrPQ.roa (hash: kR684iL/BnCvE3LFX4t7FZeKIp8gUxbro9Dzx1l6bTg=)
4: 9PbkvZ4ol2yeRfGaoDftkNRF4EM.roa (hash: ZO5449lHjcawIHB7jnV7qvkZUlVwVElkUGzx+T6uypQ=)
5: 9xV9_fze4hEiHRTfetcMOaYtwpc.roa (hash: CklFQfcIKFqNZPhKFZNKEUynWDpDHjzYSRYtePRY3l0=)
6: BUagtr_9kQTY8i9MdNXLq5cnNHM.roa (hash: FYPs+RVTF2NhaR4COrGmc5vQPfr7hdf5D4C5BHXkqrs=)
7: D4aJgyurg5sBV9aRkfmz2Wsl9lU.roa (hash: zPt9r8i/IiMY/kNPrd/XCtTmcwSRz/do1PNZccVMDv8=)
8: FNiNdr2A7OQKs4Lh8NIXmrr0CpY.roa (hash: lzfjAZjaBGiVtNnSHHAFnCh/6pNb/eM+js/obHoKL1U=)
9: Gw2mbsE_MoMLk8qNwEEX0NgcNl8.roa (hash: 1jUFBnLBvfA4uzicHOhc17W0Ci/2g8HkC2YbueNHc3Q=)
10: HAEssOWQRwSdc5TGWOA9Yahl7WM.roa (hash: GGhgfbO/+6MLQCq+HU+0d0YUwkftNYr1yFwg0YzDhQk=)
11: KD3J9X723fLJtuTefopShfEqDCs.roa (hash: o+qwjG6XzieW5oWk/X3UOKcsMil17XAcrFY58tZiy/Y=)
12: KSgdLldEqa59Zql4-IziLX55TPU.roa (hash: XUqaNezvDdSkEpv/qzEgciAhag3ntITFRCYMF7kPQRw=)
13: Q9aroViSTNyftnih3yMmSfZmsbY.roa (hash: 5LV9jsogGdw75bsK1cxklhdtKH4/i6QHyICTiSxlbc4=)
14: Ro3-EUE6MEHO8Brlu5iaFdAlG5Q.roa (hash: u0Ts/8nh0LiCnzteTiJkyma0H6U2qh30HZDM8HXhaHI=)
15: TjCyhv-kWQ-PJbBlq2triomj_-g.roa (hash: KDKb5SY9Cg/LioUW+IlNvYLSZMhx9SvgjisICUTIbJU=)
16: _ts8OAlwojVR7RrxU45171xnFEQ.roa (hash: 1o7jXDgX6gwszcNb2hDK4ztSUb/3OElL3cvx3GiOQa4=)
17: dmEWgN6h3xFkBWjn9tW8-qNYTVM.roa (hash: xaHtGUiCewEsAabyHcWlMpWAwt2sd21SLnG70Nk49gU=)
18: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: wuIFxldNSsvbmMqj7L5qJd1IQp4V0ZngcM4tEWWYA8I=)
19: m3kbgVGInZoxkGlQeAONX97frV4.roa (hash: 8gUwO/0n4gQZPZEJMORDD8t/sRehPTtCRHIzAdAWNug=)
20: oXNf5SHrKh2QWntqtmC7qB19SGk.roa (hash: qifSnbRKsEUjrXFAx3OGYSd8X1I2Ha3pqqE8xrvWVLQ=)
21: qILC_Pv0K7-ROV4CDhL6zSnDsio.roa (hash: tV5WuqZJh0gjM0aw66Rwu52v2V+q3xkrQZsO/3MBrn0=)
22: v6DRm2BxHSU2TI8KD12J2fvQjdI.roa (hash: 2jOdiO20NF/908n5Oq5KVZ1zpLepOGdqMBtD3aX7Ya4=)
23: x2XVu0ALr02iGe6yyUDAD6F8NjI.roa (hash: 08nS9hEpSqpZaHf0s18vSYc5qS8WtwFKwLrU014TaPc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:a1:5f:25:f7:96:2a:8e:15:c1:d8:7f:c0:9c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Mar 29 03:01:10 2025 GMT
Not After : Mar 30 03:01:10 2025 GMT
Subject: CN=8ec8104e5a5d973a91fc14f314439f996d3cf5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:29:2c:e5:ab:cf:83:8f:64:c0:c1:24:f2:
91:b8:48:c2:bb:1e:c1:41:da:c3:68:6a:66:56:5d:
ce:73:65:1e:60:d0:7b:3f:35:52:3d:69:85:54:d3:
80:11:c3:5a:c2:bd:73:85:71:61:fe:42:f1:3d:2b:
60:07:b3:cd:3f:d2:9f:71:ea:aa:fd:a3:3a:a7:af:
e0:04:f3:b8:23:7a:4b:c2:85:98:4a:d7:b6:d9:a0:
22:d3:af:39:f5:02:8a:09:ac:ef:20:22:56:45:92:
cb:b1:b0:35:7b:17:fe:1c:3d:e1:16:3c:19:67:48:
79:f3:0f:14:e9:08:5c:c3:c6:b5:36:c0:cb:01:28:
d8:b6:c2:21:45:a2:f2:96:80:d9:cd:57:63:44:a5:
28:f7:f1:bf:71:e3:76:9d:8a:a3:8b:0f:7e:17:80:
ce:14:c9:2c:17:92:19:3c:c1:19:44:25:0e:db:22:
4a:f1:30:22:52:11:cd:0b:09:58:81:c0:98:d3:88:
0f:4d:97:60:2b:6d:8e:7f:b1:3a:b5:94:30:0e:9b:
dc:28:b3:55:9f:4b:5b:ce:db:66:97:d1:4e:90:e1:
ef:ec:fc:55:df:8f:a6:f9:5d:db:aa:72:31:60:21:
2b:cc:e8:dd:36:6a:f3:24:98:73:01:0c:d6:c1:22:
0e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C8:10:4E:5A:5D:97:3A:91:FC:14:F3:14:43:9F:99:6D:3C:F5:B0
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b3:63:54:be:26:04:17:62:69:e9:55:5c:b5:bd:77:43:77:
89:39:7d:01:db:2a:df:c9:0f:ee:ea:ce:e4:41:e8:ce:76:11:
78:82:c0:00:0c:28:6a:5c:79:79:31:59:fe:48:77:2d:06:2f:
61:b2:bb:1e:d7:bd:d2:4b:91:db:bf:cb:09:44:3a:53:ca:59:
e4:fd:f4:73:22:d3:7c:70:d1:a3:6f:22:2b:7a:0d:cc:5d:a9:
2a:0f:78:7b:92:bd:e2:86:7c:8b:e9:9e:30:bb:1c:9e:63:26:
c2:36:da:0d:61:70:5a:71:b3:f9:d7:a7:05:24:c7:fc:14:48:
e0:f0:71:d9:fe:4d:09:ad:97:5d:a6:e2:ac:41:8d:58:b9:81:
49:17:a4:b5:90:d7:02:9e:f3:7c:bc:42:8b:05:58:6f:8d:22:
71:50:97:68:b0:f0:a7:c0:62:ba:a5:0e:c5:ed:9e:d0:61:0a:
a9:ff:0f:28:3d:2b:99:9d:2d:03:83:81:13:d5:85:f4:22:3c:
3b:7d:0b:18:c7:b1:72:c8:1a:4b:28:32:53:bc:5f:3f:45:66:
7b:aa:21:a7:d4:f7:7e:b7:73:43:be:0a:f4:ca:6b:fe:10:db:
1e:2e:b3:9e:aa:22:32:53:06:60:86:a3:68:bd:d3:2b:6a:68:
76:78:24:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:20:42 2025 by rpki-client