Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
File: xJ7uJN6rVSARm2o9oEV9OcQGQds.mft (raw, json)
Hash identifier: 8qQOHScZxpgMqzbdNPpn10IdEX63nCCzvSKGS5Rc1vM=
Subject key identifier: 9B:E5:B8:9D:C2:99:2B:D9:4B:B2:E4:44:98:4A:FE:C6:C9:55:1A:2C
Authority key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
Certificate issuer: /CN=c49eee24deab5520119b6a3da0457d39c40641db
Certificate serial: 0194BD4ECA113FBC2C4AE2C036C08049C6DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
Manifest number: 0D50
Signing time: Fri 31 Jan 2025 17:00:44 +0000
Manifest this update: Fri 31 Jan 2025 17:00:44 +0000
Manifest next update: Sat 01 Feb 2025 17:00:44 +0000
Files and hashes: 1: eZo07jBCKWD2FYiNfDITWNW5OaU.roa (hash: 09rC6Rc4KHaoiqlZ0+3v+LC/tqWiWb4ZuqXZ8h/EnX0=)
2: xJ7uJN6rVSARm2o9oEV9OcQGQds.crl (hash: 2g3iN2ml9uV2U6INtOTNhce6kYa/m94/IzoDscBx1+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ca:11:3f:bc:2c:4a:e2:c0:36:c0:80:49:c6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49eee24deab5520119b6a3da0457d39c40641db
Validity
Not Before: Jan 31 17:00:44 2025 GMT
Not After : Feb 1 17:00:44 2025 GMT
Subject: CN=9be5b89dc2992bd94bb2e444984afec6c9551a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:29:8e:46:b9:05:af:23:84:ab:38:be:d7:ba:
b7:e8:e2:1f:9f:ec:4e:3a:05:e8:cd:e1:af:ad:30:
9b:6e:45:c6:fc:d4:85:6a:3b:18:fd:9b:a7:48:02:
e1:e6:46:c7:69:04:e6:5c:2a:e7:a6:1a:f4:14:b2:
09:03:d5:e2:43:5d:50:14:4c:c1:9b:ae:21:2d:21:
29:c5:e1:c9:5a:89:80:23:16:a3:3e:00:dc:2e:1e:
05:3e:78:e0:2d:78:a3:22:20:d9:76:d0:5d:cf:e2:
2d:51:8d:2f:e1:22:bf:43:d1:5a:44:4f:f1:fd:7f:
71:a0:54:cf:7f:0b:6f:05:66:f9:3c:97:54:9f:d4:
32:63:ae:75:29:ba:54:19:cf:a3:a1:d4:01:38:42:
64:98:d4:98:c6:b7:e1:80:e8:c7:2d:5a:08:90:4f:
74:03:2b:55:c9:11:63:f0:17:15:ed:d6:a8:94:2b:
8e:f6:56:64:ed:7d:b2:7d:c1:79:09:cc:4d:3b:e5:
a8:3b:eb:11:e4:ac:5f:14:19:58:6a:34:31:73:6e:
64:92:73:82:6d:de:08:6e:4d:28:22:39:43:89:b5:
2d:42:b9:6f:f7:63:ea:94:ef:42:f9:8d:43:aa:64:
4f:b2:0d:17:43:d0:90:46:5f:0b:43:bc:e7:cb:96:
e3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E5:B8:9D:C2:99:2B:D9:4B:B2:E4:44:98:4A:FE:C6:C9:55:1A:2C
X509v3 Authority Key Identifier:
keyid:C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f4:00:15:ee:82:96:83:ff:08:e3:8a:c2:cf:e1:53:5d:5f:
47:55:5d:66:fe:87:e0:1a:84:aa:38:59:12:d6:32:77:4d:1a:
47:a0:fc:76:ef:dc:59:88:27:37:47:20:2c:8e:93:fe:26:a3:
3a:fa:ca:53:0e:2d:65:cb:bd:b7:43:a6:ee:43:d8:66:93:1c:
a5:73:90:f2:12:20:f8:c9:0b:7f:17:55:03:27:49:97:6b:c8:
1b:85:f8:5c:9d:26:e0:16:2c:97:53:6b:b1:f8:8a:dd:20:4b:
de:ec:7b:90:53:5d:e8:fd:c1:b5:44:59:3c:a2:66:4a:be:e8:
31:c3:ba:80:02:09:ad:fa:41:ca:05:f8:1e:1e:41:b4:2a:13:
db:e7:10:b6:f4:f8:56:2f:25:b1:57:17:30:5c:f0:41:2d:bf:
7c:b1:9b:b8:04:a0:f4:46:d3:72:8c:5d:38:c9:83:73:65:0f:
0c:4e:b9:c8:0c:97:c3:17:f8:af:d5:ed:68:cd:84:18:dd:6e:
42:af:a7:ec:92:40:8e:6d:94:70:a6:15:f0:02:6b:c8:6e:e0:
a8:ad:d8:d4:ea:24:bb:ca:e7:6d:a5:90:26:53:ec:1a:f4:57:
3e:fa:c7:e0:06:5a:5d:4c:e4:a6:bf:6a:bb:a7:6e:cd:11:f6:
53:88:0e:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9TsoRP7wsSuLANsCAScbdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OWVlZTI0ZGVhYjU1MjAxMTliNmEzZGEwNDU3ZDM5YzQw
NjQxZGIwHhcNMjUwMTMxMTcwMDQ0WhcNMjUwMjAxMTcwMDQ0WjAzMTEwLwYDVQQD
Eyg5YmU1Yjg5ZGMyOTkyYmQ5NGJiMmU0NDQ5ODRhZmVjNmM5NTUxYTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ymORrkFryOEqzi+17q36OIfn+xO
OgXozeGvrTCbbkXG/NSFajsY/ZunSALh5kbHaQTmXCrnphr0FLIJA9XiQ11QFEzB
m64hLSEpxeHJWomAIxajPgDcLh4FPnjgLXijIiDZdtBdz+ItUY0v4SK/Q9FaRE/x
/X9xoFTPfwtvBWb5PJdUn9QyY651KbpUGc+jodQBOEJkmNSYxrfhgOjHLVoIkE90
AytVyRFj8BcV7daolCuO9lZk7X2yfcF5CcxNO+WoO+sR5KxfFBlYajQxc25kknOC
bd4Ibk0oIjlDibUtQrlv92PqlO9C+Y1DqmRPsg0XQ9CQRl8LQ7zny5bjEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvluJ3CmSvZS7LkRJhK/sbJVRosMB8GA1UdIwQY
MBaAFMSe7iTeq1UgEZtqPaBFfTnEBkHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEo3dUpONnJWU0FSbTJvOW9FVjlPY1FHUWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85Nzg2ZjQtZGQ1NC00ZTQzLWFlYTQt
NTljNGMxMGFlYmQ5LzEveEo3dUpONnJWU0FSbTJvOW9FVjlPY1FHUWRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85Nzg2ZjQtZGQ1NC00ZTQzLWFlYTQtNTljNGMxMGFlYmQ5
LzEveEo3dUpONnJWU0FSbTJvOW9FVjlPY1FHUWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvQAFe6C
loP/COOKws/hU11fR1VdZv6H4BqEqjhZEtYyd00aR6D8du/cWYgnN0cgLI6T/iaj
OvrKUw4tZcu9t0Om7kPYZpMcpXOQ8hIg+MkLfxdVAydJl2vIG4X4XJ0m4BYsl1Nr
sfiK3SBL3ux7kFNd6P3BtURZPKJmSr7oMcO6gAIJrfpBygX4Hh5BtCoT2+cQtvT4
Vi8lsVcXMFzwQS2/fLGbuASg9EbTcoxdOMmDc2UPDE65yAyXwxf4r9XtaM2EGN1u
Qq+n7JJAjm2UcKYV8AJryG7gqK3Y1Ooku8rnbaWQJlPsGvRXPvrH4AZaXUzkpr9q
u6duzRH2U4gOSg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:16 2025 by rpki-client