Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
File: XM97P9h86bzpn5ALZBmdYGvxYGk.mft (raw, json)
Hash identifier: tEKeCDUTgrXCudf6Jam9haSfGpK+0Y3vMP2legMHxpQ=
Subject key identifier: 3C:90:31:76:73:F1:4C:30:30:5E:47:D9:4F:B7:72:16:EE:C1:08:27
Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
Certificate issuer: /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Certificate serial: 0194BD1746E16A7FFFB0B4E6EA1B19A53836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 16:00:06 +0000
Manifest this update: Fri 31 Jan 2025 16:00:06 +0000
Manifest next update: Sat 01 Feb 2025 16:00:06 +0000
Files and hashes: 1: KOB0vwmJ7cfgZ_1WOb_Xx7LqG6U.roa (hash: a7bo8HXeX2LyPkuCveHxDVKdqnbGHzPDqS6LymzXHUs=)
2: XM97P9h86bzpn5ALZBmdYGvxYGk.crl (hash: jMTwqpUX2HJOymQy3x72I9cnACWyBG0okiUU5JVXZdU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:46:e1:6a:7f:ff:b0:b4:e6:ea:1b:19:a5:38:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Validity
Not Before: Jan 31 16:00:06 2025 GMT
Not After : Feb 1 16:00:06 2025 GMT
Subject: CN=3c90317673f14c30305e47d94fb77216eec10827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:60:27:ee:57:1b:42:2b:1e:c1:3c:c3:5d:
53:22:3e:7c:06:cf:90:57:f7:87:b7:5d:f0:68:a8:
2c:98:f7:d0:11:0f:c3:9d:68:c9:b7:98:ea:02:db:
b3:0d:d9:48:0a:b7:57:cc:b0:03:5a:3f:53:fc:7f:
d1:d6:0f:0c:17:a2:98:34:95:78:c7:f7:54:42:c2:
34:37:68:9f:cd:9a:90:25:b9:03:78:24:fa:b2:78:
ad:e7:53:90:88:35:28:9d:de:f5:f3:0d:98:25:1c:
36:d1:60:14:ce:e2:5d:1e:87:f1:a8:47:ee:c9:28:
f0:8f:f4:6e:b1:a7:10:d3:06:b9:d9:e2:57:ef:97:
70:11:bb:b7:f5:ea:52:70:d1:5f:33:da:81:3f:b0:
b8:44:2d:1c:b0:a9:0a:58:69:68:d5:a1:37:48:49:
21:66:c4:cc:e6:92:51:be:03:d3:80:72:7b:7a:25:
92:59:8a:17:7c:96:08:e0:59:c8:2b:a1:72:bf:18:
07:91:f0:2e:11:63:b4:41:d7:f9:46:f2:59:68:4d:
86:65:fc:b0:80:32:06:80:08:b9:ac:dd:5e:ca:d4:
a1:e6:1d:14:28:3d:32:2c:b1:f4:56:ea:7d:8d:32:
81:28:cc:8c:98:4e:38:f6:1e:f5:a3:4f:63:1a:9a:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:90:31:76:73:F1:4C:30:30:5E:47:D9:4F:B7:72:16:EE:C1:08:27
X509v3 Authority Key Identifier:
keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ff:c3:18:f1:8b:69:d1:d0:86:30:85:06:76:39:85:5f:11:
a4:05:91:00:e2:ec:34:b8:8d:8a:d7:25:ab:31:aa:d4:a7:1a:
45:6b:17:94:c3:ab:6b:26:6f:d8:f0:53:9f:83:34:ca:de:ef:
e1:d4:ab:1f:47:93:3f:fa:98:8a:76:6f:e8:a7:b5:07:7c:27:
89:60:ab:28:25:65:fd:43:4f:77:7a:ba:97:83:33:54:9a:f8:
65:6c:42:4f:b3:2c:f8:4c:8c:e1:84:d5:e4:41:f6:ca:cf:63:
bb:ce:8e:17:ea:a7:91:6d:ce:a3:ef:75:1f:55:ce:08:18:88:
ca:5c:38:84:91:f4:8c:ad:7d:8e:fa:44:5c:c4:a0:c8:24:ac:
64:ec:ad:76:b1:c7:93:49:86:d0:7d:41:73:7a:6e:1a:08:2d:
68:db:6c:03:c5:b5:19:ad:57:0f:68:8a:f7:2e:cb:74:ef:af:
4d:d1:dd:14:f4:b3:9b:35:56:95:d5:04:27:4f:38:3f:11:c6:
b0:52:98:1e:76:bd:8c:e8:cc:9f:17:f4:8a:e6:43:07:97:5f:
dd:5e:eb:52:0c:89:fe:33:99:89:ef:a7:a1:5d:6f:ac:d3:3f:
d0:70:13:cc:cd:95:57:83:c8:2d:48:f7:0b:64:43:01:f0:cb:
b6:bf:a2:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F0bhan//sLTm6hsZpTg2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjY2Y3YjNmZDg3Y2U5YmNlOTlmOTAwYjY0MTk5ZDYwNmJm
MTYwNjkwHhcNMjUwMTMxMTYwMDA2WhcNMjUwMjAxMTYwMDA2WjAzMTEwLwYDVQQD
EygzYzkwMzE3NjczZjE0YzMwMzA1ZTQ3ZDk0ZmI3NzIxNmVlYzEwODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy1gJ+5XG0IrHsE8w11TIj58Bs+Q
V/eHt13waKgsmPfQEQ/DnWjJt5jqAtuzDdlICrdXzLADWj9T/H/R1g8MF6KYNJV4
x/dUQsI0N2ifzZqQJbkDeCT6snit51OQiDUond718w2YJRw20WAUzuJdHofxqEfu
ySjwj/RusacQ0wa52eJX75dwEbu39epScNFfM9qBP7C4RC0csKkKWGlo1aE3SEkh
ZsTM5pJRvgPTgHJ7eiWSWYoXfJYI4FnIK6FyvxgHkfAuEWO0Qdf5RvJZaE2GZfyw
gDIGgAi5rN1eytSh5h0UKD0yLLH0Vup9jTKBKMyMmE449h71o09jGpo/wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyQMXZz8UwwMF5H2U+3chbuwQgnMB8GA1UdIwQY
MBaAFFzPez/YfOm86Z+QC2QZnWBr8WBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE05N1A5aDg2YnpwbjVBTFpCbWRZR3Z4WUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC81NGRlYmItZDBiNi00NGQxLThlNTgt
OGNmOWU2ZjhhYjQ1LzEvWE05N1A5aDg2YnpwbjVBTFpCbWRZR3Z4WUdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC81NGRlYmItZDBiNi00NGQxLThlNTgtOGNmOWU2ZjhhYjQ1
LzEvWE05N1A5aDg2YnpwbjVBTFpCbWRZR3Z4WUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALf/DGPGL
adHQhjCFBnY5hV8RpAWRAOLsNLiNitclqzGq1KcaRWsXlMOrayZv2PBTn4M0yt7v
4dSrH0eTP/qYinZv6Ke1B3wniWCrKCVl/UNPd3q6l4MzVJr4ZWxCT7Ms+EyM4YTV
5EH2ys9ju86OF+qnkW3Oo+91H1XOCBiIylw4hJH0jK19jvpEXMSgyCSsZOytdrHH
k0mG0H1Bc3puGggtaNtsA8W1Ga1XD2iK9y7LdO+vTdHdFPSzmzVWldUEJ084PxHG
sFKYHna9jOjMnxf0iuZDB5df3V7rUgyJ/jOZie+noV1vrNM/0HATzM2VV4PILUj3
C2RDAfDLtr+iSg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:53 2025 by rpki-client