Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
File: XZOOJrKYSy-hYarAewS9uFCq3RY.mft (raw, json)
Hash identifier: pk9bH3CVXAthVYi3sBuH+nKkEOrTnN5SrDZkz8XveXg=
Subject key identifier: 12:D0:B7:87:17:74:0A:0B:CC:AE:12:08:6B:78:2A:27:FD:8D:9E:87
Authority key identifier: 5D:93:8E:26:B2:98:4B:2F:A1:61:AA:C0:7B:04:BD:B8:50:AA:DD:16
Certificate issuer: /CN=5d938e26b2984b2fa161aac07b04bdb850aadd16
Certificate serial: 0194BCA9E5258ABFC0395418A843022F17E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
Manifest number: 0810
Signing time: Fri 31 Jan 2025 14:00:38 +0000
Manifest this update: Fri 31 Jan 2025 14:00:38 +0000
Manifest next update: Sat 01 Feb 2025 14:00:38 +0000
Files and hashes: 1: XZOOJrKYSy-hYarAewS9uFCq3RY.crl (hash: tsCcPTvYbN5HcoDn/NsVhXgNvIGgxSfBfszt2kSrWHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:e5:25:8a:bf:c0:39:54:18:a8:43:02:2f:17:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d938e26b2984b2fa161aac07b04bdb850aadd16
Validity
Not Before: Jan 31 14:00:38 2025 GMT
Not After : Feb 1 14:00:38 2025 GMT
Subject: CN=12d0b78717740a0bccae12086b782a27fd8d9e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:c2:fd:b8:f1:30:69:1d:9a:cf:25:4f:06:
2a:16:6f:2f:59:28:c6:f1:06:b8:de:49:b8:7b:3b:
3c:56:59:36:00:69:4d:a5:27:ee:26:e9:c8:b7:63:
72:07:5f:c2:82:b9:68:24:16:ae:2e:8d:28:92:17:
df:3f:44:72:c9:b5:78:84:e6:45:40:7c:67:03:6b:
f3:0e:35:a0:72:4c:35:4d:28:ab:f7:89:3c:db:2f:
07:04:f3:b2:ea:6e:24:db:8b:c6:d7:cd:cf:75:4c:
61:64:ae:27:5d:d0:e2:95:8d:14:02:46:4b:d8:95:
aa:54:86:65:7c:61:81:ba:6a:5b:fd:96:ca:7f:d1:
da:0f:75:f4:f6:78:f6:48:0c:5c:3b:46:61:15:42:
b8:03:d8:1b:9e:57:e8:73:e6:f4:2e:0a:49:01:ef:
34:f4:7c:c6:31:7f:ca:ac:28:7b:2c:7d:7b:71:9d:
f1:93:a5:28:4f:7a:fe:00:4f:48:61:f8:01:24:93:
e5:04:9c:5f:aa:3d:1e:06:3d:1e:d1:6e:bd:ad:48:
d8:92:43:83:4e:d3:3f:5a:5e:19:e3:67:87:ed:e8:
a7:07:c1:e1:41:f2:40:8a:7e:b6:82:82:d6:72:2f:
8b:a8:0e:8d:2e:d0:00:3c:67:cb:43:b6:12:c8:d9:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D0:B7:87:17:74:0A:0B:CC:AE:12:08:6B:78:2A:27:FD:8D:9E:87
X509v3 Authority Key Identifier:
keyid:5D:93:8E:26:B2:98:4B:2F:A1:61:AA:C0:7B:04:BD:B8:50:AA:DD:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZOOJrKYSy-hYarAewS9uFCq3RY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/1be9f1-5c48-4427-a2b1-6ec7dbe27bb3/1/XZOOJrKYSy-hYarAewS9uFCq3RY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:37:19:c2:22:a4:98:24:49:94:3e:49:a8:81:1d:cf:58:51:
b1:00:54:00:93:88:9e:ba:74:f2:b2:63:39:ea:a3:f5:cc:2e:
4b:9f:de:99:3b:6d:a9:81:cb:90:49:63:01:b3:3d:88:ab:f1:
d3:82:f8:84:fb:c2:cd:c5:27:f5:a7:f4:9f:0a:fb:28:75:7c:
4a:0c:21:76:9f:ad:09:11:4e:19:77:2c:e6:74:74:c4:3b:48:
f1:37:4d:6c:08:e3:f2:e7:ab:64:f2:d0:70:9a:f7:e4:49:de:
f6:76:de:ac:39:f5:dc:35:14:87:1f:29:5c:37:5b:cf:13:e5:
a4:13:e4:4c:0d:88:60:2c:9c:ab:f8:99:44:d0:9e:18:ad:97:
1c:ec:6e:90:d5:27:b8:ef:5b:bf:ac:12:9c:8e:38:ec:34:e6:
e0:9b:f9:10:7f:d3:39:a0:c4:e4:00:39:f9:68:58:3a:28:cb:
a2:4d:f6:fe:04:d5:2d:79:60:75:6a:40:b2:e6:d2:2b:69:1f:
64:7d:76:75:4e:3b:be:a8:7d:4e:ee:48:f2:97:4c:82:1c:2f:
cb:a7:91:5d:8c:e3:90:e7:2d:5e:b6:3d:33:e3:51:16:6b:4b:
11:66:48:5b:3a:45:44:72:75:4d:2d:8c:44:27:8f:ff:93:9f:
56:1d:f8:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qeUlir/AOVQYqEMCLxfmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkOTM4ZTI2YjI5ODRiMmZhMTYxYWFjMDdiMDRiZGI4NTBh
YWRkMTYwHhcNMjUwMTMxMTQwMDM4WhcNMjUwMjAxMTQwMDM4WjAzMTEwLwYDVQQD
EygxMmQwYjc4NzE3NzQwYTBiY2NhZTEyMDg2Yjc4MmEyN2ZkOGQ5ZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxovC/bjxMGkdms8lTwYqFm8vWSjG
8Qa43km4ezs8Vlk2AGlNpSfuJunIt2NyB1/CgrloJBauLo0okhffP0RyybV4hOZF
QHxnA2vzDjWgckw1TSir94k82y8HBPOy6m4k24vG183PdUxhZK4nXdDilY0UAkZL
2JWqVIZlfGGBumpb/ZbKf9HaD3X09nj2SAxcO0ZhFUK4A9gbnlfoc+b0LgpJAe80
9HzGMX/KrCh7LH17cZ3xk6UoT3r+AE9IYfgBJJPlBJxfqj0eBj0e0W69rUjYkkOD
TtM/Wl4Z42eH7einB8HhQfJAin62goLWci+LqA6NLtAAPGfLQ7YSyNldcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBLQt4cXdAoLzK4SCGt4Kif9jZ6HMB8GA1UdIwQY
MBaAFF2TjiaymEsvoWGqwHsEvbhQqt0WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFpPT0pyS1lTeS1oWWFyQWV3Uzl1RkNxM1JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8xYmU5ZjEtNWM0OC00NDI3LWEyYjEt
NmVjN2RiZTI3YmIzLzEvWFpPT0pyS1lTeS1oWWFyQWV3Uzl1RkNxM1JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi8xYmU5ZjEtNWM0OC00NDI3LWEyYjEtNmVjN2RiZTI3YmIz
LzEvWFpPT0pyS1lTeS1oWWFyQWV3Uzl1RkNxM1JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdTcZwiKk
mCRJlD5JqIEdz1hRsQBUAJOInrp08rJjOeqj9cwuS5/emTttqYHLkEljAbM9iKvx
04L4hPvCzcUn9af0nwr7KHV8Sgwhdp+tCRFOGXcs5nR0xDtI8TdNbAjj8uerZPLQ
cJr35Ene9nberDn13DUUhx8pXDdbzxPlpBPkTA2IYCycq/iZRNCeGK2XHOxukNUn
uO9bv6wSnI447DTm4Jv5EH/TOaDE5AA5+WhYOijLok32/gTVLXlgdWpAsubSK2kf
ZH12dU47vqh9Tu5I8pdMghwvy6eRXYzjkOctXrY9M+NRFmtLEWZIWzpFRHJ1TS2M
RCeP/5OfVh347Q==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:23:20 2025 by rpki-client