Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft
File: 22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft (raw, json)
Hash identifier: 6j8FOk1uApcT+/wBdNjg9zqqiR3YuXzcKfJBVvGD3FI=
Subject key identifier: 90:CA:34:86:70:B5:81:04:E9:E0:2C:6D:2F:71:F0:18:1F:48:DF:44
Authority key identifier: 22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD
Certificate issuer: /CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
Certificate serial: 76E1849D70D4BE3B64E6C5BCBD795230CAEB7817
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft
Manifest number: 0153
Signing time: Thu 10 Apr 2025 07:19:29 +0000
Manifest this update: Thu 10 Apr 2025 07:14:29 +0000
Manifest next update: Fri 11 Apr 2025 08:03:29 +0000
Files and hashes: 1: 323630323a663766663a3a2f34372d3437203d3e203133383532.roa (hash: LDkqFvPL3o/efEjqIiW+FxteB100HkeM92v9RegGzqE=)
2: 22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl (hash: mpCnX2FgmzDmckYn6MnUsUzv22Z/ADWjDNp138NQ6Mw=)
3: 323630323a663766663a37303a3a2f34342d3434203d3e20323135373531.roa (hash: FMLKXgJBfG1dAAJKXhFrC8iIerl7nyzyT/6MRRFKEt0=)
4: AS13852.asa (hash: 0kMGq2jANQBO8ytDLtkuzsBRwasLFQXbJoStqg2UGqI=)
5: 323630323a663766663a323a3a2f34382d3438203d3e203133383532.roa (hash: jdkeCFq6jZpmJyE5tazsE5RQRmAWRpqXKhXFnEyweqE=)
6: 32332e3139302e32342e302f32342d3234203d3e203133383532.roa (hash: N9miqn/XeWnI2x4q978KfgI3giSsB9quYTNg+REDQRU=)
7: 323630323a663766663a31303a3a2f34342d3434203d3e203133383532.roa (hash: qVVSiSIdf3JARqfKMypInRkZ0SJ7s9R+RmB0x0L/zRQ=)
8: 323630323a663766663a363a3a2f34382d3438203d3e203133383532.roa (hash: +T8BewC/9QE5cGeVfbOn7ZKdKKQGSMU41mYlT4HG40U=)
9: 323630323a663766663a623a3a2f34382d3438203d3e203133383532.roa (hash: P0e96u9n2kfllVLKLgVE+UNoj2PaZ6HDSPCTePHnYNE=)
10: 323630323a663766663a33303a3a2f34342d3434203d3e203133383532.roa (hash: XRpSV8mM/ikvrI3omBv7quv/dtlqd32U3vh8DXt5/ow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:e1:84:9d:70:d4:be:3b:64:e6:c5:bc:bd:79:52:30:ca:eb:78:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8
Validity
Not Before: Apr 10 07:14:29 2025 GMT
Not After : Apr 11 08:03:29 2025 GMT
Subject: CN=90CA348670B58104E9E02C6D2F71F0181F48DF44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:62:6f:77:fb:c3:00:1c:33:6e:3b:ba:4f:fd:
8c:d5:17:c4:2b:d2:ec:5a:ca:88:41:ac:c3:08:47:
df:ce:c7:86:ce:52:84:bc:1f:f8:92:36:e1:ab:dd:
fc:45:b0:8d:87:46:a2:11:9d:c0:75:bd:46:94:37:
d4:50:c0:79:75:83:15:ad:e3:32:66:29:4c:d2:32:
77:8f:1d:f6:70:ea:66:5b:7c:67:2c:54:46:31:6d:
de:b5:c0:f2:c7:c9:6a:bf:41:5a:26:8c:57:f0:9d:
c4:72:ab:7b:e5:a3:d5:69:71:39:9f:46:5e:eb:09:
fe:fd:8f:14:f8:8b:8b:37:58:2a:30:d2:fb:ac:20:
16:3d:02:ab:d4:db:33:e2:7d:60:05:02:b1:21:15:
49:ab:34:63:47:63:33:a3:8b:2e:ea:32:f1:8c:ad:
be:16:e9:1c:69:0b:7b:42:aa:44:5c:7e:b5:e7:81:
6a:18:43:61:42:03:fa:04:32:fa:47:8d:be:c7:8d:
f6:85:50:31:35:81:d7:dc:15:4d:fd:00:de:e4:30:
62:00:f2:24:46:8a:cf:f5:db:c4:e2:84:00:64:5b:
d0:02:87:9e:c6:cd:dd:27:89:8b:78:ef:af:ac:66:
f7:60:8a:f4:b8:af:26:b3:1d:f1:29:3b:be:99:2c:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CA:34:86:70:B5:81:04:E9:E0:2C:6D:2F:71:F0:18:1F:48:DF:44
X509v3 Authority Key Identifier:
keyid:22:EC:27:BC:99:97:53:43:E6:F2:5F:5A:46:C6:E6:7C:28:2D:96:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e83fbf2-b64b-4c55-ba28-ca84ad0af5ab/f9d4bd83ed27b9a9325e1d6da6cc71a7e6564c102ee7996ce8.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/3/22EC27BC99975343E6F25F5A46C6E67C282D96DD.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:11:9d:81:dc:fe:2a:04:fb:c0:ca:ab:d1:46:b6:e5:08:8f:
96:d3:57:b5:a3:fd:13:2e:df:4a:41:c0:16:e6:69:b9:ef:c3:
a8:c8:69:d3:fd:b5:91:26:9e:60:41:c7:cf:8a:a1:b8:53:a8:
df:23:01:23:9a:f0:ca:5c:6c:0e:1e:7e:c0:db:7c:97:8b:7b:
6d:52:69:30:0f:3f:d4:e7:c5:f6:89:3d:38:95:31:ca:ee:a2:
b6:c7:36:22:69:5b:2b:5c:02:c8:e8:6f:d8:fc:6d:19:2e:7a:
f7:10:dc:96:5f:2a:ea:77:39:2a:c7:5e:ea:b8:ba:63:07:0c:
c0:1f:46:d6:cf:08:0c:ec:47:ea:41:2b:51:cb:2f:42:91:64:
2d:65:3e:ab:02:42:b0:99:58:ba:a2:06:81:fc:19:5a:c6:2a:
99:39:16:6f:16:db:3d:18:78:c3:5f:96:f0:3e:3b:10:b2:80:
3c:b5:29:af:41:21:e2:62:74:43:64:50:5c:8f:7e:f7:53:e1:
4e:e6:ef:4c:13:3e:2e:88:b2:a9:60:20:fd:71:bc:95:03:5a:
83:d9:42:8d:80:8e:56:7b:8c:bc:cc:16:20:0c:0f:a9:31:7f:
bd:ea:79:34:1b:e2:52:32:21:41:03:54:64:94:ba:2a:b5:5b:
e5:91:a4:c1
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgIUduGEnXDUvjtk5sW8vXlSMMrreBcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjlkNGJkODNlZDI3YjlhOTMyNWUxZDZkYTZjYzcxYTdl
NjU2NGMxMDJlZTc5OTZjZTgwHhcNMjUwNDEwMDcxNDI5WhcNMjUwNDExMDgwMzI5
WjAzMTEwLwYDVQQDEyg5MENBMzQ4NjcwQjU4MTA0RTlFMDJDNkQyRjcxRjAxODFG
NDhERjQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmJvd/vDABwz
bju6T/2M1RfEK9LsWsqIQazDCEffzseGzlKEvB/4kjbhq938RbCNh0aiEZ3Adb1G
lDfUUMB5dYMVreMyZilM0jJ3jx32cOpmW3xnLFRGMW3etcDyx8lqv0FaJoxX8J3E
cqt75aPVaXE5n0Ze6wn+/Y8U+IuLN1gqMNL7rCAWPQKr1Nsz4n1gBQKxIRVJqzRj
R2Mzo4su6jLxjK2+FukcaQt7QqpEXH6154FqGENhQgP6BDL6R42+x432hVAxNYHX
3BVN/QDe5DBiAPIkRorP9dvE4oQAZFvQAoeexs3dJ4mLeO+vrGb3YIr0uK8msx3x
KTu+mSzDiwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFJDKNIZwtYEE6eAsbS9x8Bgf
SN9EMB8GA1UdIwQYMBaAFCLsJ7yZl1ND5vJfWkbG5nwoLZbdMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzBjNzA0MDFjLTdmNDEtNGE2Yi05NDM0
LWNjODBkY2EwOTNlNi8zLzIyRUMyN0JDOTk5NzUzNDNFNkYyNUY1QTQ2QzZFNjdD
MjgyRDk2REQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYt
NDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82ZTgzZmJmMi1iNjRiLTRjNTUtYmEyOC1j
YTg0YWQwYWY1YWIvZjlkNGJkODNlZDI3YjlhOTMyNWUxZDZkYTZjYzcxYTdlNjU2
NGMxMDJlZTc5OTZjZTguY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
MGM3MDQwMWMtN2Y0MS00YTZiLTk0MzQtY2M4MGRjYTA5M2U2LzMvMjJFQzI3QkM5
OTk3NTM0M0U2RjI1RjVBNDZDNkU2N0MyODJEOTZERC5tZnQwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA
MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAARnYHc
/ioE+8DKq9FGtuUIj5bTV7Wj/RMu30pBwBbmabnvw6jIadP9tZEmnmBBx8+KobhT
qN8jASOa8MpcbA4efsDbfJeLe21SaTAPP9TnxfaJPTiVMcruorbHNiJpWytcAsjo
b9j8bRkuevcQ3JZfKup3OSrHXuq4umMHDMAfRtbPCAzsR+pBK1HLL0KRZC1lPqsC
QrCZWLqiBoH8GVrGKpk5Fm8W2z0YeMNflvA+OxCygDy1Ka9BIeJidENkUFyPfvdT
4U7m70wTPi6IsqlgIP1xvJUDWoPZQo2AjlZ7jLzMFiAMD6kxf73qeTQb4lIyIUED
VGSUuiq1W+WRpME=
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:58:47 2025 by rpki-client